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spread general negligence) in the number of fines we receive from the 
regulators for avoidable errors . . .). [HSBC OCC 8874328-330] 646 

17. HSBC internal email, dated April 2007, re: Managerial Letter: HBMX 

(. . . process he initiated over a month ago following the seizure of the 
arms and money from our customer’s premises. ...*** Not a happy 
story.). [HSBC OCC 8875010-014] 649 

18. a. HSBC Bank USA, National Association Office Memorandum, dated 

May 1, 2007, re: Wall Street Journal Article Regarding Wachovia 
(Sigue Corp. — A money service business that allegedly processed $24.7 
million in suspicious money remittances related to drug-trafficking pro- 
ceeds.). [OCC-PSI-01358514-517] 654 
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AUDIT MEXICO, AUDIT REPORT SUMMARY SCHEDULE (Main con- 
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the most thorough of investigations.). [HSBC OCC 8966014-018] 
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has indicated.). [HSBC OCC 8874821-825] 

31. HSBC internal email, dated July 2008, re: HBMX Visit Update (The 
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files that could be found, there were serious failures in following Group 
procedures.). [HSBC OCC 8873487-489] 

32. HSBC internal email, dated July 2008, re: HBMX — Cayman Accounts 

(... it appears that our CAMP monitoring system identified significant 
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PAYMENTS FROM IRANIAN BANKS ! ENTITIES (The business case in- 
cludes a number of express references to practices which may constitute 
a breach of US sanctions, including the OFAC provisions, and could 
provide the basis for action against the HSBC Group . . .). [HSBC OCC 
8876487-488] 784 

46. HSBC internal email, dated October 2003, re: IRAN — STRATEGY DIS- 

CUSSION PAPER (. . . there remain serious political and reputational 
risks within the USA if they proceed with this . . .). [HSBC OCC 
8873941-947] 786 

47. HSBC Document, IRAN— STRATEGY DISCUSSION PAPER, undated, 

(The Iranian market offers substantial untapped potential for the HSBC 
Group.). [HSBC OCC 8873949-956] 793 

48. HSBC internal email, dated October 2003, re: USD Clearing — Iranian 
Banks (. . . HBEU have been manually intervening in the processing 
of Iranian bank payment instructions by removing the remitter’s name 
and country to prevent the probable trigger of a filter in the US, and 
the subsequent declaration to OFAC (and possible freezing) of the funds.). 


[HSBC OCC 8875217-218] 801 

49. HSBC internal email, dated October 2003, re: Iran (The practice of 
amending instructions is clearly a long standing one which has hitherto 
continued despite the RMs believing it had ceased some years ago.). 
[HSBC OCC 8874660-663] 803 


50. a. HSBC internal email, dated December 2003, re: COMPLIANCE — 
OFAC ISSUES IN GENERAL AND SPECIFIC TO IRAN (I currently 
feel that we may be exposing ourselves to unnecessary and unacceptable 
Reputational and Operational Risk when we are handling payments 
originating from FIs domiciled in or who are a local branch of an 
FI domiciled in an OFAC regulated country.). [HSBC OCC 3407517- 


522] 807 

b. HSBC internal email, dated June 2003, re: PLC — Re “do not mention 

our name” (When Funds Transfer staff noted the messages in the 
BBI field stating “do not mention our name” the payment was rejected, 
per our policy, due to concerns about evasion issues under the OFAC 
regulations.). [HSBC OCC 8873922-928] 813 

c. HSBC internal email, dated May 2005, re: Wire Payments Suspended 

(Wire payment suspended re “Iran” — USD 6,912,607.82). [HSBC OCC 
8874710-712] 820 

d. HSBC internal email, dated February 2008, re: Rami Makhlouf (Please 

be advised that we currently maintain a relationship with Sellor, 
Mohamad Makhlouf in our capacity as Trustee and the individual 
named in your search request (Rami Makhlouf) is actually a bene- 
ficiary of the Trust ...). [H.SBC-OCC-8S7 8838-840] 823 
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51. HSBC internal email, dated March 2004, re: BankMarkazi Payment (. . . 

I remain extremely uncomfortable with the practice of amending Iranian 
payment orders for whatever means.). [HSBC OCC 8873979-982] 826 

52. HSBC internal email, dated March 2004, re: Bank Markazi Payment 

(The complexity of the OF AC regulations, and the fact that HBUS were 
unaware that any arrangements existed with Iranian Banks, has made 
speedy resolution of this issue difficult.). [HSBC OCC 8873985-986] 830 

53. HSBC internal email, dated April 2004, re: Iran Correspondent Banking 
Services — OFAC (. . . the most pressing issue to be resolved is that relat- 
ing to the limited number of existing relationships that we have (for 
two small Iranian Banks) where I suspect that HBUS are not aware 
that payments may be passing through them.). [HSBC OCC 8873994- 

997] 832 

54. HSBC internal email, dated June 2004, re: Iran (. . . there are very 

compelling commercial reasons which need to be borne in mind when 
making this decision, not least of which is the threat to the Group’s 
position in and business with Iran over the medium term.). [HSBC OCC 
8874001-004] 836 

56. HSBC internal email, dated June 2004, re: Iran (. . . our interpretation 
was that we were being asked to “fudge” the nature of the payments 
to avoid the U.S. embargo and seizure . . .). [HSBC OCC 8873999] 840 

56. HSBC internal email, dated July 2004, re: HBEU Iranian Payments 
Business (. . . we are being asked to amend instructions or, assume re- 
sponsibility that the contents of the payment message do not attract the 
fed’s attention and seize the payment. . . .). [HSBC OCC 8876861-863] .... 841 

57. HSBC internal email, dated November 2004, re: U-turns (. . . initially 
there were concerns about the potential intentional removal of wording 
“off limit payments” from these payments.). [HSBC-PSI-PROD-0096165- 

167] 844 

58. HSBC internal email, dated December 2004, re: U-turns (Attached are 

the conditions under which HBUS will accept U-Turn transactions.). 
[HSBC OCC 3407526-527] 847 

59. HSBC internal email, dated June 2005, re: IRANIAN PAYMENTS (. . . 

HBME is currently seeking to open a USD account with JP Morgan 
Chase as our first choice ... in order to process Iranian related USD 
payments.). [HSBC OCC 8878026-029] 849 

60. HSBC internal email, dated May 2006, re: TP GATEWAYS (I would 

have thought the US regulators would have taken a dim view of routing 
stuff around the US.). [HSBC OCC 7687437-438] 853 

61. HSBC internal email, dated May 2006, re: U Turns (I anticipate that 
you would prefer to see Field 72 completed, but this will mean more 
hits in the filters even if they will then be passed.). [HSBC OCC 3243782- 

787] 855 

62. HSBC internal email, dated January 2007, re: Transactions with Iran! 

Cuba, etc (. . . let’s set up a completely different Swift address to help 
avoid any problems with Cuba and Iran.). [HSBC OCC 8876921-931] 861 

63. HSBC internal email, dated June 2007, re: Iran (There are further com- 
plications surrounding the process of closure with all Iranian banks as 
we have some USD 9m in reimbursements due from Sepah, where we 

are running off trade lines . . .j. [HSBC OCC 8878214-216] 872 

64. HSBC internal email, dated June 2007, re: GROUP MESSAGING GATE- 

WAY FOR LAM— CLEAR CHOICE REPORT (We have not engaged with 
Cl and Nassau as we have no leadership responsibility for this geog- 
raphy.). [HSBC OCC 8874349-355] 875 

65. HSBC internal email, dated June 2008, re: OFAC processing in GSC’s 
(. . . we’re strapped and getting behind in investigations (on OFAC cases) 
and have some of our key managers in the queues releasing items . . . 

I cannot hire first level staff unless it’s offshored . . .) [HSBC OCC 
0616349-350] 882 

66. HSBC internal email, dated December 2009, re: OFAC Payments (. . . 
we could use 5 or 6 people for 10 days who can review payments to 
clear the 700 and building backlog of payments that have been held 

over and need to be worked to process.). [HSBC OCC 7688668-670] 884 
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the connected KYC issues as it is impossible to plan the required capacity 
* * * Attached is a list of 121 international banks that we can no longer 
support and need to exit. * * * the US requirements cut across business 
lines and it is crucial that the strategies of PCM, TSC and FIG are 
aligned to prevent this situation occurring in the future.). [HSBC OCC 


8876104-106] 887 

68. Excerpt from Deloitte Review of OFAC transactions, RESULTS OF THE 

TRANSACTIONS REVIEW— UK GATEWAY, March 29, 2012. [HSBC- 
PSI-PROD-0197919, 930-931, 940, 968-969, 976, 980] 890 

69. Excerpt from March 29, 2012 Presentation, prepared by Sullivan & Crom- 

well LLP and Cahill Gordon & Reindel LLP on OFAC compliance by 
HSBC Bank USA. [HSBC OCC 8966113, 118, 143] 898 
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a. GCL 050047 — Compliance with sanctions (28 Uul 12005) [HSBC OCC 

3407560-561]; 901 

b. GCL 060011— US Dollar Payments (06 ! Apr ! 2006) [HSBC OCC 

3407587]; 905 
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(25 ! Oct ! 2006) [HSBC OCC 3407606]; 907 
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Documents related to other countries: 

71. a. HSBC internal email, dated September 2005, re: OFAC sanctions (In 

particular regard to the Sudanese payments, but also to a lesser extent, 

Cuban and Burmese, there are a considerable number of USD denomi- 
nated transactions.). [HSBC OCC 8877213-214] 912 

b. HSBC document prepared May 2007. INFORMATION REQUESTED 
IN CONNECTION WITH: NORTH KOREA, CUBA, AND MYANMAR 
(We were notified that there are relationships with Cuban and North 
Korean customers.). [HSBC OCC 8876093-095] 914 


c. HSBC internal email, dated October 2005, re: GCL 050047 — Compli- 
ance with Sanctions (I note HBMX continues to process USD payments 
involving Cuba. It is very important this is stopped immediately as 
the regulators are getting very tough and the cost to the Group could 
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U.S. VULNERABILITIES TO MONEY 
LAUNDERING, DRUGS, AND TERRORIST 
FINANCING: HSBC CASE HISTORY 


TUESDAY, JULY 17, 2012 

U.S. Senate, 

Permanent Subcommittee on Investigations, 

OF THE Committee on Homeland Security 
and Governmental Affairs, 

Washington, DC. 

The Subcommittee met, pursuant to notice, at 9:36 a.m., in room 
SD-342, Dirksen Senate Office Building, Hon. Carl Levin, Chair- 
man of the Subcommittee, presiding. 

Present: Senators Levin and Coburn. 

Staff Present: Elise J. Bean, Staff Director/Chief Counsel; Mary 
D. Robertson, Chief Clerk; Laura E. Stuber, Senior Counsel; Robert 
L. Roach, Counsel and Chief Investigator; Eric Walker, Detailee; 
Kristin Gwin, Congressional Fellow; Christopher Barkley, Staff Di- 
rector to the Minority; Keith B. Ashdown, Chief Investigator to the 
Minority; Adam Henderson, Professional Staff Member; Dennis 
Bogucz, Congressional Fellow; Brian Egger, Detailee; Beth Baltzan, 
Congressional Fellow; Noah Czarny, Law Clerk; Bill Gaertner, Law 
Clerk; Curtis Kowalk, Law Clerk; Lane Powell, Law Clerk; Arielle 
Woronoff, Law Clerk; Sofia Knutsson, Intern; and Jacquelyn Jones, 
Law Clerk. 


OPENING STATEMENT OF SENATOR LEVIN 

Senator Levin. Good morning, everybody. Today’s hearing will 
examine the money-laundering, drug-trafficking, and terrorist-fi- 
nancing risks created in the United States when a global bank uses 
its U.S. affiliate to provide U.S. dollars and access to the U.S. fi- 
nancial system to a network of high-risk affiliates, high-risk cor- 
respondent banks, and high-risk clients. 

Most international banks have a U.S. affiliate. They use it in 
part to compete for U.S. clients and business, but also to provide 
themselves with access to the U.S. financial system. Global banks 
want access to U.S. dollars because they are accepted internation- 
ally, they are the leading trade currency, and they hold their value 
better than any other currency. They want access to U.S. wire 
transfer systems because they move money across international 
lines quickly, securely, and to the farthest corners of the Earth. 
They want to clear U.S. dollar monetary instruments like travelers 
checks, bank checks, and money orders. And they want the safety, 
efficiency, and reliability that are the hallmarks of U.S. banking. 

( 1 ) 
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The problem here is that some international banks abuse their 
U.S. access. Some allow affiliates operating in countries with se- 
vere money-laundering, drug-trafficking, or terrorist-financing 
threats to open up U.S. dollar accounts without establishing safe- 
guards at their U.S. affiliate. Some operate in secrecy jurisdictions. 
Some allow poorly managed or corrupt foreign banks to make use 
of an affiliate’s U.S. dollar account. Others allow high-risk clients 
to use those accounts without taking adequate anti-money laun- 
dering (AML) steps. Some even allow their affiliates to pressure 
their U.S. cousins to ease up on U.S. AML restrictions or look the 
other way when they spot suspicious activity. The end result is 
that the U.S. affiliate can become a sinkhole of risk for an entire 
network of bank affiliates and their clients around the world play- 
ing fast and loose with U.S. rules. 

The consequences are the ones you would expect from operating 
a U.S. bank with inadequate safeguards against money laundering. 
The U.S. bank can end up aiding and abetting transactions that 
fund terrorists, drug cartels, corrupt dictators, and tax cheats, be- 
cause all of them want access to the U.S. financial system, too, and 
for the same reasons. Wrongdoers can use U.S. dollars and U.S. 
wire transfers to commit crimes, arm terror groups, produce and 
transport illegal drugs, loot government coffers, and even pursue 
weapons of mass destruction. That is why our country has made 
combating money laundering and terrorist financing a national se- 
curity imperative. 

For the last decade, this Subcommittee has contributed to the 
battle against money laundering and terrorist financing by expos- 
ing problems that increase U.S. vulnerabilities to abuse. In 2001, 
for example, this Subcommittee released a report showing how U.S. 
banks that offer accounts to foreign banks, engaging in what is 
known as correspondent banking, can become conduits for illegal 
proceeds involving organized crime, drug trafficking, or financial 
fraud. Back then, most U.S. banks opened a correspondent account 
for any foreign bank with a banking license. After our hearing, 
U.S. banks took a harder look and assessed the risks before open- 
ing a correspondent account. In 2002, Congress cited our hearings 
when enacting tougher AML laws in the PATRIOT Act, including 
in that Act a provision making it a legal obligation for tl.S. banks 
to conduct a due diligence review before opening an account for a 
foreign bank. 

Tougher AML laws have helped deny criminals access to the U.S. 
financial system. But as our report that we are releasing today 
shows, enormous problems remain. 

To illustrate those problems, today’s hearing focuses on a case 
study involving HSBC, one of the largest banks in the world. 
Headquartered in London, HSBC has a network of over 7,200 of- 
fices in more than 80 countries, 300,000 employees, and 2011 prof- 
its of nearly $22 billion. HSBC has been among the most active 
banks in Asia, the Middle East, and Africa. It first acquired a U.S. 
presence in the 1980s; today its leading U.S. affiliate is HSBC 
Bank USA, sometimes called “H-BUS.” That HBUS affiliate now 
has 470 branches across the United States and 4 million customers 
here. 
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HBUS is the key U.S. nexus for the entire HSBC worldwide net- 
work. In 2008, HBUS processed 600,000 wire transfers per week; 
in 2009, two-thirds of the U.S. dollar payments that HBUS proc- 
essed came from HSBC affiliates in other countries. One HSBC ex- 
ecutive told us that a major reason why HSBC opened its U.S. 
bank was to provide its overseas clients with a gateway into the 
U.S. financial system. 

Now, add on top of that, HBUS’s history of weak AML controls, 
and you have a recipe for trouble. In 2003, the Federal Reserve and 
New York State Banking Department took a formal enforcement 
action requiring HBUS to revamp its AML program. HBUS, which 
was then converting to a nationally chartered bank under the su- 
pervision of the Office of the Comptroller of the Currency (OCC) 
made changes, but even before the OCC lifted its order in 2006, the 
bank’s AML program began deteriorating. In September 2010, the 
OCC issued a supervisory letter, 31 pages long, describing a long 
list of severe AML deficiencies, and followed in October 2010 with 
a cease and desist order requiring HBUS to revamp its AML pro- 
gram a second time. 

The OCC cited, among other problems, a massive backlog of 
unreviewed alerts identifying potentially suspicious activity; a fail- 
ure to monitor $60 trillion in wire transfers and account activity; 
a failure to examine risks at HSBC’s overseas affiliates before pro- 
viding them correspondent banking services; and a failure, over a 
3-year period, to conduct AML checks on more than $15 billion in 
bulk cash transactions with those same affiliates. 

To examine the issues, the Subcommittee issued subpoenas, re- 
viewed more than 1.4 million documents, and conducted extensive 
interviews with HSBC officials from around the world, as well as 
officials at other banks, and with Federal regulators. HSBC has co- 
operated fully with our investigation. 

The Subcommittee’s work identified five key areas of vulner- 
ability exposed by the HSBC history. The five areas involve the fol- 
lowing: 

First, providing U.S. correspondent accounts to high-risk HSBC 
affiliates without performing due diligence, including a Mexican af- 
filiate with unreliable AML controls. 

Second, failing to stop deceptive conduct by HSBC affiliates to 
circumvent a screening device designed to block transactions by 
terrorists, drug kingpins, and rogue nations like Iran; 

Third, providing bank accounts to overseas banks with links to 
terrorist financing; 

Fourth, clearing hundreds of millions of dollars in bulk U.S. dol- 
lar travelers checks, despite serious suspicious circumstances; 

And, finally, offering bearer share accounts, a high-risk account 
that invites wrongdoing by facilitating hidden corporate ownership. 

Let us take each in turn. 

First, the issue of high-risk affiliates. HSBC operates affiliates in 
80 countries, including jurisdictions facing major money-launder- 
ing, drug-trafficking, or terrorist-financing challenges as well as 
weak AML laws and oversight. Yet, until recently, HSBC’s London- 
based parent company, known as the HSBC Group, instructed its 
affiliates to assume that every HSBC affiliate met the group’s AML 
standards and automatically was told to provide it with correspon- 
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dent banking services. HBUS did as told and opened U.S. cor- 
respondent accounts for more than 80 HSBC affiliates, ignoring our 
law, the American law requiring due diligence reviews before open- 
ing U.S. accounts for foreign banks. 

HBUS’s dealings with an HSBC affiliate in Mexico illustrate the 
money laundering dangers. HSBC Mexico (HBMX), operates in a 
high-risk country battling drug cartels; it has had high-risk clients 
such as casas de cambios; and it has offered high-risk products 
such as U.S. dollar accounts in the Cayman Islands, a jurisdiction 
known for secrecy and money laundering. HBMX also has a long 
history of severe AML deficiencies. You add all that up and the 
U.S. bank should have treated HBMX, the Mexican affiliate, as a 
high-risk account for AML purposes. But it did not. 

Instead, HBUS treated HBMX as such a low-risk client bank 
that it did not even monitor their account activity for suspicious 
transactions. In addition, for 3 years, from mid-2006 to mid-2009, 
HBUS conducted no monitoring of a banknotes account used by 
HBMX to physically deposit billions of U.S. dollars from clients, 
even though large cash transactions are inherently risky and Mexi- 
can drug cartels launder U.S. dollars from illegal drug sales. Be- 
cause our tough AML laws in the United States have made it hard 
for drug cartels to find a U.S. bank willing to accept huge unex- 
plained deposits of cash, they now smuggle U.S. dollars across the 
border into Mexico and look for a Mexican bank or casa de cambio 
willing to take the cash. Some of those casas de cambios had ac- 
counts at HBMX, which in turn took all the physical dollars that 
it got, transported them by armored car or aircraft back across the 
border to HBUS for deposit into its U.S. banknotes account, com- 
pleting the laundering cycle. 

Over 2 years, from 2007 to 2008, HBMX shipped $7 billion in 
physical U.S. dollars to HBUS. That was more than any other 
Mexican bank, even one twice HBMX’s size. When law enforcement 
and bank regulators in Mexico and the United States got wind of 
the banknotes transactions, they warned HBMX and HBUS that 
such large dollar volumes were red flags for drug proceeds moving 
through the HSBC network. In 2008, after warnings from regu- 
lators, HBMX stopped taking large deposits of U.S. dollars, but for 
years, HBUS provided an easy gateway into our financial system 
for suspicious cash from their foreign affiliate in Mexico. 

Next, a second problem involves actions taken by some HSBC af- 
filiates to circumvent a U.S. ban on bank transactions involving 
designated drug traffickers, terrorists, or rogue regimes such as 
Iran. To enforce that ban, the U.S. Treasury Department’s Office 
of Foreign Assets Control (OF AC) has developed a list of prohibited 
persons which banks use to develop what is known as an “OF AC 
filter” to identify and stop prohibited or suspicious transactions. 

The Subcommittee found that for years HSBC affiliates in Eu- 
rope and the Middle East acted to circumvent the OFAC filter 
when sending U.S. dollar transactions involving Iran through their 
accounts at HBUS. Although they viewed these transactions as 
legal under a U.S. exception for so-called “U-turn” transactions, the 
affiliates did not want to trigger the OFAC filter and undergo the 
individualized reviews required to make sure that they were legal. 
So they stripped out or omitted any reference to Iran from the pa- 
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perwork. An outside auditor hired by HBUS has found that, from 
2001 to 2007, HSBC affiliates sent nearly 25,000 transactions in- 
volving Iran, worth over $19 billion, through HBUS and other U.S. 
accounts while concealing any link to Iran in 85 percent of the 
transactions. 

HSBC’s chief compliance officer and other senior executives in 
London knew what was going on, but allowed the deceptive conduct 
to continue. While some HBUS officials in the United States claim 
not to have known they were processing undisclosed Iranian trans- 
actions, documents show that key HBUS officials were informed 
early on. HBUS compliance and payment executives repeatedly told 
HSBC affiliates that they had to use fully transparent Iranian 
transactions, but when faced with evidence that the affiliates were 
secretly circumventing the OFAC filter, nobody in HBUS con- 
fronted those affiliates, brought the issue to a head, and forced the 
transactions to the light. Problems also arose when some HSBC af- 
filiates tried to circumvent the OFAC filter to send potentially pro- 
hibited transactions involving other countries like Sudan or North 
Korea. 

OFAC programs are aimed at exposing and disabling the finan- 
cial dealings of some of the most dangerous persons and regimes 
in the world, including terrorists, persons involved with weapons of 
mass destruction, drug traffickers, and rogue jurisdictions. The 
OFAC filter is the key to blocking prohibited transactions from pol- 
luting the U.S. financial system. Global financial institutions have 
a special responsibility to respect OFAC prohibitions, but that is 
not what happened here. While HSBC affiliates may have been 
aiming simply at avoiding processing delays, circumventing OFAC 
safeguards can also facilitate transactions undertaken by some of 
the world’s worst wrongdoers. 

A third issue involves the fact that HSBC is active in regions of 
the world with significant terrorism challenges while dem- 
onstrating a worrisome willingness to do business with banks that 
have links to terrorist financing. One example involves A1 Rajhi 
Bank, the largest private bank in Saudi Arabia. After the Sep- 
tember 11, 2001 terrorist attack on the United States, evidence 
emerged that the bank’s key founder was an early financial bene- 
factor of al-Qaeda and that it provided accounts to suspect clients. 

In 2005, HSBC Group told its affiliates to sever ties with that 
bank, but they made an exception for HSBC Middle East. Four 
months later, without explaining why, HSBC Group reversed itself 
and said that all of its affiliates could decide whether to do busi- 
ness with A1 Rajhi Bank. HBUS chose to close its A1 Rajhi ac- 
counts. Over the next 2 years, however, its own bankers and bank- 
ers from other HSBC affiliates pressed HBUS to resume ties with 
A1 Rajhi Bank. And in 2006, after A1 Rajhi Bank threatened to pull 
all of its business from HSBC unless HBUS reinstated its U.S. dol- 
lar banknotes account, HSBC gave in. And over the next 4 years, 
HBUS supplied A1 Rajhi Bank with nearly $1 billion in U.S. dol- 
lars, stopping only when HSBC made a global decision to exit the 
banknotes business altogether. 

The fourth area of concern involves HBUS’s willingness to clear 
suspicious bulk travelers checks for foreign banks. From 2005 to 
2008, on a regular basis, HBUS cleared $500,000 or more per day 
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in bulk travelers checks for the Hokuriku Bank of Japan. Rou- 
tinely, these checks arrived in large stacks of sequentially num- 
bered checks signed and countersigned with the same illegible sig- 
nature. Forced by the Office of the Comptroller (OCC) of the Cur- 
rency — to investigate, HBUS found the Japanese bank could not 
provide any “know your client” information or any explanation of 
why two dozen of its customers, supposedly in the used-car busi- 
ness, were often depositing $500,000 a day in U.S. dollar travelers 
checks purchased from the same bank in Russia. Under OCC pres- 
sure, HBUS stopped clearing the travelers checks in 2008, but kept 
open the correspondent account, despite the Japanese bank’s poor 
AML controls. In less than 4 years, HBUS provided over $290 mil- 
lion in U.S. dollars to a Japanese bank for the benefit of Russians, 
again, supposedly in the used-car business. 

Finally, there is HBUS’s willingness to offer accounts to bearer 
share corporations. These corporations are prime vehicles for 
money laundering and other illicit activity by providing anonymity 
through assigning legal ownership of the corporation to whoever 
has physical possession of its shares. Over a decade, HBUS opened 
accounts for 2,000 such corporations, despite warnings by internal 
auditors and outside regulators that the accounts posed high 
money-laundering risks. Documents show that the actual account 
owners deliberately pressured the bank to help hide their identi- 
ties. One such account was used by a father-son team of Miami 
Beach hotel developers who were later convicted of tax fraud for 
hiding $150 million in assets. 

Bearer share accounts, suspicious travelers checks, banks with 
terrorist-financing links, hidden transactions dodging OF AC safe- 
guards, and Mexican drug money — none of them represent the 
types of transactions we want in a U.S. bank. If the parent corpora- 
tion of a global bank cannot do a better job policing its affiliates, 
we should not be providing a bank charter to their U.S. affiliate. 
If the U.S. affiliate cannot do a better job of standing up to affiliate 
pressures and safeguarding the U.S. financial system. Federal reg- 
ulators should consider whether to pull its charter. 

HSBC Group recently issued a policy statement declaring that all 
of its affiliates would be subject to the highest AML standards 
among them; that its affiliates would start sharing information to 
strengthen their AML defenses; and that all affiliates would be 
subject to diligence reviews. HBUS has more than doubled the size 
of its AML compliance department, put in a new AML monitoring 
system, and closed over 395 high-risk correspondent accounts. 
These are all good steps, but we saw this movie before in 2003. The 
recent commitments are welcome. Apologies and commitments to 
improve are also welcome. But accountability for past conduct is es- 
sential, and that is what has been missing here. 

It is bad enough that a single bank such as HSBC exposes the 
U.S. financial system to multiple-money laundering risks. It is 
made worse when there is a failure of anti-money laundering over- 
sight by the regulator which is supposed to oversee our biggest 
banks — the OCC. It is of great concern to the Subcommittee, and 
it should be of great concern to every American, that the OCC tol- 
erated the mounting AML problems at HBUS for 5 years, without 
taking any formal or informal enforcement action. In addition. 
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when the OCC decided the prohlems had gone far enough, it low- 
ered HBUS’s consumer compliance rating instead of its safety and 
soundness rating. Every other Federal banking agency treats anti- 
money laundering deficiencies as a matter of safety and soundness 
of the bank. Only the OCC treats anti-money laundering defi- 
ciencies as if they were a matter of consumer protection law. Anti- 
money laundering safeguards are not aimed at protecting bank cus- 
tomers; they are aimed at protecting the entire American public 
from wrongdoers seeking to misuse the U.S. financial system. 

The new leadership at the OCC needs to move swiftly to correct 
the previous oversight shortfalls and to assure that promised 
changes at HSBC are implemented promptly and effectively. 

Our report contains many recommendations to address the 
abuses that we have identified. Among the most important are the 
following: 

HBUS should identify which of its sister affiliates are high risk, 
subject them to enhanced monitoring, and in particular, review 
whether it should close the account of HSBC’s Mexican affiliate. 

HBUS should beef up its OFAC compliance program by auditing 
affiliate transactions to see if they are circumventing the safe- 
guards that protect our country and other countries from terrorists, 
drug traffickers, and rogue jurisdictions. 

HBUS should close accounts with banks suspected of involve- 
ment in terrorist financing, revamp its travelers check controls, 
and eliminate bearer share accounts. 

HSBC should require affiliates to share information to strength- 
en their anti-money laundering defenses, and should continue to 
beef up its compliance program which was given short shrift in the 
past. 

At the OCC, the agency should follow the lead of other regulators 
and treat anti-money laundering compliance as a matter of safety 
and soundness of banks. 

The new OCC leadership needs to get the OCC moving against 
money laundering by identifying statutory violations, not just iden- 
tifying failures of banks as Matters Requiring Attention, in the face 
of significant anti-money laundering deficiencies. 

Global banks have caused the world a lot of heartache. Our focus 
today is one global bank that failed to comply with rules aimed at 
combating terrorism, drug trafficking, and the money laundering 
that fuels so much of what threatens the global community. I want 
to thank my staff for their extraordinary work. I want to thank 
Senator Coburn for all of his support and for the work of his staff. 
And I now turn to him for his opening statement. 

OPENING STATEMENT OF SENATOR COBURN 

Senator Coburn. Thank you, Mr. Chairman. I normally submit 
an opening statement for the record and make a few short com- 
ments. I will not do that today because of the gravity of the prob- 
lem that we face, and I want to make sure my words are heard and 
part of the record. 

I agree with most of what we heard Senator Levin say. I want 
to thank him for his tireless work on this issue. He is one of my 
favorite bulldogs in terms of when he gets a hold of something, he 
really does not let go of it. I do not always agree with the number 
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of teeth that he loses when he grabs hold of it, but the fact is that 
he does grab hold of it. 

I would also like to thank both the Office of the Comptroller of 
the Currency and HSBC Bank, and the reason I am thanking them 
is because in the years that I have been on this Subcommittee and 
this Committee, which is 8 years now, I have never seen the type 
of cooperation that we received both from a government agency and 
a private entity. OCC provided a number of people for interviews 
as well as essential documents about the regulatory process. HSBC 
Bank officials likewise sat for dozens of interviews and handed over 
millions of pages of documents. Some of today’s witnesses were 
flown in from posts around the world. 

As Chairman Levin laid out in his statement, the Subcommit- 
tee’s investigation into anti-money laundering and anti-terror fi- 
nance efforts at HSBC has covered quite a bit of ground. PSI exam- 
ined in detail the types of vulnerabilities our Nation faces from 
criminals and terrorists who want to take advantage and abuse our 
banking system and take away our freedoms. What we learned is 
that the United States faces some very unique risks, both because 
of our post-September 11, 2001 security needs and because of the 
strength of our financial system, which attracts worldwide atten- 
tion. 

Every day, countless transactions denominated in U.S. dollars 
occur around the world. This is good for our economy, which bene- 
fits from a strengthened currency and increased economic activity. 
But criminals around the globe are also drawn to U.S. banks, 
which offer the attractive option of making illicit funds look legiti- 
mate. If they can pass criminal proceeds through a U.S. bank un- 
noticed and untouched, the funds are unlikely ever to be stopped 
or ever be recovered. 

This hearing raises the big and important questions. Banks want 
to obey the law, but also grow their businesses. What happens 
when the two goals conflict? Banks want to know their customers, 
but some customers want privacy. How do we resolve this? As we 
write AML policy, we should look for ways to get all boats rowing 
in the same direction, letting banks and government each do what 
they do best as we all work to combat crime and terror. 

At HSBC, we uncovered a number of troubling examples in 
which weak AML systems may have let criminal or terrorist funds 
pass through. In Mexico, for example, as the Chairman said, bil- 
lions of U.S. dollars flowed from the HSBC affiliate in Mexico. The 
Mexico affiliate was the single largest exporter of U.S. dollars in 
Mexico to HBUS. U.S law enforcement and the regulatory entities 
have concluded that because of the volume of money, it likely came 
from proceeds of the illegal drug trade — not a far assumption. 

In another case, an Iranian bank was allowed to initiate U.S. 
dollar transactions that HSBC would process through the United 
States without explaining where they came from. At the time, how- 
ever, there were severe legal restrictions on any payments coming 
from or going to Iran, most often meaning they would be manually 
inspected. HSBC’s affiliate in London coached the Iranian bank on 
how to get the payments through the United States without inspec- 
tion and simply requested the bank send transactions that would 
not violate U.S. law. In effect, it relied exclusively on an Iranian 
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bank to comply with a law intended to catch payments from Ira- 
nian banks. The bank or the officials that made the decision were 
either naive or willfully blind. 

This is why tough AML laws are important. If illicit funds can 
be tracked and stopped, there are fewer places for criminals and 
terrorists to hide. And while our focus has been on the problems 
we found at HSBC Bank, we also have to emphasize that similar 
problems exist at other banks. For example. Citibank, Bank of 
America, Wachovia, Western Union, and others have come under 
scrutiny for laundering drug cartel profits. 

The purpose of this hearing, then, is not just to make an example 
of HSBC as if it were an anomaly. Rather, this hearing is to help 
Congress understand what kind of risks this Nation faces and what 
we should do to reduce them. If we can get a better handle on the 
risks by looking closely at the operations of a single bank, we can 
write better laws and achieve our true goals: Stopping crime and 
preventing terror. 

With that in mind, I believe there are several lessons we can 
learn from the problems that we uncovered at HSBC Bank. 

First, banks around the world operate under different laws, cre- 
ating different sensitivities to money laundering. While this seems 
apparent, it was not clear how much this would affect a bank with 
worldwide affiliates until we took a closer look. In the case of 
HSBC, its bank in the United States operated differently even than 
its own affiliates in London, Mexico, and the Middle East. Failure 
to recognize this can lull us into thinking we can rely on foreign 
banks to carry out U.S. law. 

Second, bank regulators are sometimes better at identifying 
money-laundering vulnerabilities than knowing how to fix them. 
Throughout this inquiry, it became clear the Office of the Comp- 
troller of the Currency was aware of many of HSBC’s AML weak- 
nesses, which it frequently pointed out. It was often at a loss, how- 
ever, to prescribe how HSBC could eliminate the weaknesses. And 
so its record of enforcement at HSBC resembles a lapdog rather a 
watchdog that we sorely need. 

We have also learned recently that investigators from Treasury’s 
own Office of Inspector General have cited OCC personnel for un- 
ethical practices. This, unfortunately, does not seem to be an iso- 
lated incident, and we will go into greater detail in that as we see 
the facts unfold. Taken together with our Subcommittee’s findings 
in this investigation, these conflicts are startling and suggest Con- 
gress should give closer scrutiny to the OCC’s actions. 

The purpose here is to stop criminals from hiding their illicit 
funds and preventing terrorists from having the freedom to plot 
and plan. The metrics we use to measure a bank’s AML compliance 
need to focus less on form and more on substance. How well are 
we achieving our goal? 

This Subcommittee has shown the kinds of vulnerabilities that 
we now face. Too often what we found left us very troubled, both 
for the risks to our Nation and for the level of effort we saw to 
eliminate them. HSBC made its share of mistakes, for which it is 
now being held accountable. 

But what we must all remember is that money laundering al- 
ways begins with a crime, and this ultimately is what we mean to 
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fight. To the extent that this hearing results in criminals and ter- 
rorists having fewer options to rob and harm the public, we will 
count it a success. 

It may be impossible to stop all money laundering. Most of what 
we call money laundering in a certain context is a benign trans- 
action in another. Buying travelers checks is innocent behavior for 
the tourist, but suspicious behavior when they are purchased in 
bulk by terrorists or drug lords. This does not mean we should not 
try to stop criminals from laundering their money through U.S. 
banks, but we need to do so wisely. 

I appreciate the efforts that HSBC has made thus far to improve 
their AML systems, and I sincerely hope they stick. I look forward 
to hearing from their witnesses, as well as from the OCC, and ap- 
preciate their appearance before us today. 

Thank you, Mr. Chairman. 

Senator Levin. Thank you very much. Senator Coburn. 

I would now like to call our first panel of witnesses for this morn- 
ing’s hearing: The Hon. David S. Cohen, the Under Secretary for 
Terrorism and Financial Intelligence at the U.S. Department of the 
Treasury; and Leigh Winchell, the Assistant Director for Investiga- 
tive Programs at the U.S. Immigration and Customs Enforcement 
(ICE). I very much appreciate both of you being with us this morn- 
ing. We look forward to your testimony. 

Pursuant to our Rule VI, all witnesses who testify before the 
Subcommittee are required to be sworn, so at this time I would ask 
you both to please stand and raise your right hand. Do you swear 
that the testimony you are about to give before this Subcommittee 
will be the truth, the whole truth, and nothing but the truth, so 
help you, God? 

Mr. Cohen. I do. 

Mr. Winchell. I do. 

Senator Levin. We will use a timing system today. About 1 
minute before the red light comes on, you will see the lights change 
from green to yellow. That will give you an opportunity to conclude 
your remarks. Your written testimony, of course, will be printed in 
the record in its entirety, so please try to limit your oral testimony 
to 7 minutes. 

Mr. Cohen, we are going to have you go first, followed by Mr. 
Winchell, and after we have heard your testimony, we will then 
turn to questions. Please proceed, Mr. Cohen. 

TESTIMONY OF HON. DAVID S. COHEN, i UNDER SECRETARY 

FOR TERRORISM AND FINANCIAL INTELLIGENCE, U.S. DE- 
PARTMENT OF THE TREASURY 

Mr. Cohen. Thank you. Chairman Levin and Senator Coburn. 
Thank you for inviting me to testify today. I am pleased to have 
the opportunity to discuss the importance of the Treasury Depart- 
ment’s efforts to identify and combat money laundering and ter- 
rorist financing in the U.S. banking sector. 

At the outset, it is important to recognize that the United States 
maintains one of the strongest and most effective anti-money laun- 
dering and counter-terrorist financing regimes in the world. This is 


^The prepared statement of Mr. Cohen appears in the Appendix on page 94. 
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a testament to the work of the Congress, including this Sub- 
committee, the regulators, the enforcement agencies, and the finan- 
cial institutions themselves. But the scale, efficiency, and sophis- 
tication of the United States’ financial system — particularly its 
banking sector — make it a prime target for those who seek to con- 
ceal and move illicit money. This involves not just money 
launderers, of course, but also terrorists, weapon proliferators, drug 
lords, and organized crime figures, who all at some point rely on 
the financial system to store, move, and launder the funds sup- 
porting or derived from their operations. 

Treasury’s ability to protect the integrity of the U.S. financial 
system from abuse and to combat critical threats to our national 
security and foreign policy depends to a significant extent on the 
implementation by U.S. financial institutions of robust programs to 
prevent money laundering, terrorist financing, and sanctions eva- 
sion. 

This morning I would like to briefly address why effective anti- 
money laundering, counter-terrorist financing, and sanctions com- 
pliance programs are so critical to our national security and the in- 
tegrity of our financial system, as well as some of the steps we are 
taking, along with our partners in Congress, the Executive Branch, 
and internationally, to improve the effectiveness of our anti-money 
laundering, counter-terrorist financing, and sanctions compliance 
regime. 

Although it is difficult to measure with precision, by any esti- 
mate, the total amount of dirty money moved through and con- 
cealed within the U.S. financial system is massive — in the hun- 
dreds of billions annually. The sheer volume of money moving 
through the banking system in particular makes banks both the 
most vulnerable financial institutions for money laundering and 
terrorist financing and the most important line of defense against 
money laundering and terrorist financing. Our regulatory frame- 
work, overseen by Treasury’s Financial Crimes Enforcement Net- 
work (FinCEN), along with the Federal functional regulators, was 
built to require financial institutions to implement risk-based anti- 
money laundering programs, to collect and report useful informa- 
tion to law enforcement and national security authorities for the 
purpose of combating the full range of illicit finance. This regu- 
latory framework assists banks in identifying and managing risk 
and creates the foundation of financial transparency required to 
apply targeted financial measures, such as sanctions against spe- 
cific actors or prohibitions against specific activity. 

To implement targeted financial sanctions, banks must screen 
clients and transactions against the Specially Designated Nationals 
(SDN) list, maintained by the Treasury’s Office of Foreign Assets 
Control. This is a list of drug traffickers, weapons proliferators, ter- 
rorists, officials from rogue regimes, and other threats to our na- 
tional security whose U.S. assets are frozen and who are generally 
forbidden from engaging in any transactions in the U.S. financial 
system. 

Despite the importance of robust anti-money laundering and 
sanctions compliance programs, recent civil enforcement actions by 
OF AC, FinCEN, and the Federal banking regulators illustrate that 
sometimes financial institutions fail to implement adequate pro- 
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grams, exposing the U.S. financial system to significant risks of 
money laundering and resulting in illicit actors gaining access to 
the U.S. financial system. 

We have seen, for example, an instance where a bank failed ef- 
fectively to monitor its correspondent banking relationship with 
high-risk customers, resulting the processing of $420 billion in 
cross-border financial transactions with 13 high-risk Mexican casas 
de cambio from 2004 to 2007. We have also seen several cases 
where foreign banks stripped out the names of Iran or other sanc- 
tioned entities in wire transaction messages routed through the 
United States, resulting in billions of dollars of benefits to sanc- 
tioned parties. 

These and other similar cases have resulted in criminal fines and 
forfeitures of more than $4.6 billion over the past 6 years. These 
cases raise important questions about vulnerabilities in the frame- 
work of anti-money laundering and counter-terrorist financing re- 
quirements that require immediate attention. As a result. Treasury 
is working closely with our interagency partners and the private 
sector to better understand the compliance challenges faced by fi- 
nancial institutions, clarify U.S. Government expectations of finan- 
cial institutions, and strengthen the overall anti-money laundering 
and counter-terrorist financing regulatory structure. 

In addition to continuing to impose sanctions on weapons 
proliferators, narcotics traffickers, transnational criminals, human 
rights abusers, and terrorist financiers, my office is also focused on 
improvements to our regulatory framework. One of our most impor- 
tant initiatives is to examine whether the customer due diligence 
rules, the foundation of financial transparency, should be improved. 

Earlier this year, FinCEN issued an Advance Notice of Proposed 
Rulemaking suggesting ways to clarify, consolidate, and strengthen 
customer due diligence requirements for financial institutions, in- 
cluding an obligation to collect beneficial ownership information. 
We are also focused on combating the use of shell companies and 
other opaque legal structures that facilitate illicit financial activity. 
We strongly support legislation requiring disclosure of beneficial 
ownership information in the company formation process. And be- 
cause strengthening anti-money laundering and counter-terrorist 
financing regimes internationally directly benefits the integrity of 
the U.S. financial system, my office works with others in the IJ.S. 
Government through the Financial Action Task Force, the Inter- 
national Monetary Fund, the World Bank, and the United Nations 
to encourage foreign jurisdictions to implement measures to combat 
illicit finance. 

I began my testimony this morning by noting that the United 
States is home to one of the strongest anti-money laundering and 
counter-terrorist financing regimes in the world. In order to con- 
tinue as the world leader in financial integrity, something we can 
and must do, we are obligated to push ourselves to identify where 
we can do better and to work tirelessly to get there. Today’s hear- 
ing is one important step on this road, and I look forward to con- 
tinuing to work with this Subcommittee to achieve this critical 
goal. Thank you. 

Senator Levin. Thank you very much, Mr. Cohen. Mr. Winchell. 
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TESTIMONY OF LEIGH H. WINCHELL,i ASSISTANT DIRECTOR 

FOR PROGRAMS, HOMELAND SECURITY INVESTIGATIONS, 

U.S. IMMIGRATION AND CUSTOMS ENFORCEMENT, U.S. DE- 
PARTMENT OF HOMELAND SECURITY 

Mr. WiNCHELL. Good morning, Chairman Levin and Senator 
Coburn. Thank you for the opportunity to appear before you today 
and discuss the efforts of the U.S. Immigration and Customs En- 
forcement to combat transnational criminal organizations and the 
illicit proceeds used to fund their criminal activities. 

Over the past two decades, transnational organized crime has 
transformed in size, scope, and impact, posing a significant threat 
to the national and international security. While the globalization 
of organized crime is not new, the magnitude, pace, and violence 
accompanying the illicit activities is alarming. 

For example, in the past 5 years, we have seen an unprecedented 
level of drug-related violence south of our border which has claimed 
over 47,000 lives since 2006. 

The fight against transnational organized crime is one of the 
highest priorities of ICE. With the most expansive investigative au- 
thority and the largest investigative force in the Department of 
Homeland Security (DHS), we work closely across agency and 
international boundaries with our law enforcement partners, cre- 
ating a united front to disrupt and dismantle transnational crimi- 
nal organizations. This is aided by our expansive global footprint. 
With a force of nearly 7,000 special agents assigned to more than 
200 U.S. cities in 71 offices in 47 countries worldwide, our domestic 
and international network of agents all work in concert to target 
transnational crime. 

One of the most effective methods of dismantling a transnational 
criminal organization is to attack the criminal proceeds that is the 
lifeblood of their operations. In fiscal year 2011, Homeland Security 
Investigation special agents initiated nearly 4,300 financial inves- 
tigations, resulting in nearly 1,800 arrests, over 1,000 criminal con- 
victions, more than 7,700 seizures worth approximately $359 mil- 
lion, including $331 million in currency and monetary instruments. 

In 2010, ICE initiated a financial investigative project in the 
State of Arizona following an increase in cash activity at financial 
institutions along the U.S. and Mexican international border. As a 
result of recent changes in Mexican financial regulations, many 
criminal organizations were forced to explore new ways to exploit 
legitimate financial systems in order to launder their proceeds. A 
new trend emerged, known as the repatriation of the U.S. dollar, 
and coupled with the Mexican black market peso exchange, has led 
to an increase in identified U.S. currency along the southwest bor- 
der region, in the last year and a half or so, approximately two- 
thirds of $1 billion in the form of outbound international wires or 
cashier’s check purchases from border branches of U.S. financial in- 
stitutions, mostly to Mexico. 

In 2005, ICE initiated Operation Firewall as an effort to raise 
worldwide awareness of the dangers posed by the cross-border 
movement and smuggling of illicit funds. Operation Firewall tar- 
gets methods used to move and smuggle currency by focusing on 
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all aspects of illicit cash movements. Since its inception, Operation 
Firewall has resulted in more than 5,700 arrests, totaling more 
than $553 million, and the arrest of 1,182 individuals. These efforts 
include 367 international seizures totaling nearly $258 million and 
253 international arrests. 

In August 2009, ICE officially launched the National Bulk Cash 
Smuggling Center (BCSC) as a 24/7 investigative support and oper- 
ations facility. Since its inception, the BCSC initiated over 500 
criminal investigations, resulting in millions of dollars seized. The 
center has also provided training and outreach to over 21,000 Fed- 
eral, State, and local law enforcement. 

ice’s interaction with the financial institutions from an anti- 
money laundering perspective is multilayered. Through our Corner- 
stone Outreach Initiative, ICE HSI special agents share lessons 
learned, best practices, and money-laundering typologies with the 
AML personnel from financial institutions throughout the world. 
As part of these outreach efforts, special agents show how the bank 
systems and processes can and are being exploited. By sharing this 
information, the financial institutions are better able to understand 
the threats, inherent vulnerabilities, and build counter measures 
into their training and automatic monitoring systems. These out- 
reach presentations take place at local branch bank locations as 
well as through speaking engagements at AML conferences such as 
those hosted by the Association of Certified Anti-Money Laun- 
dering Specialists (ACAMS). 

In late 2009, HSI expanded their working relationship with the 
private sector through ACAMS to assist bank AML specialists to 
better identify and monitor financial activity related to non-tradi- 
tional criminal groups. This expanded working relationship allows 
the members to learn more about current active financial indica- 
tors related to those crimes. The members can then incorporate 
what they have learned into creating models and filters within 
their AML software to more accurately identify financial trans- 
actions indicative of those crimes. The CAMS certification, obtained 
through ACAMS, is the most widely recognized AML certification 
among compliance professionals worldwide. 

Since its inception, HSI special agents have conducted over 
11,800 Cornerstone presentations and trained over 243,000 partici- 
pants worldwide. This outreach has resulted in the initiation of 
over 447 criminal investigations, led to the arrest of approximately 
330 individuals, 280 indictments, and over $666 million seized. 

Recognizing the magnitude of transnational organized crime, ICE 
will continue to work closely with our law enforcement partners as 
well as with the industry to identify potential vulnerabilities that 
could be exploited by terrorists and other criminal organizations to 
earn, move, and store their illicit proceeds. 

I want to thank you again for the opportunity to appear before 
you today, and I would be pleased to answer any questions at this 
time. 

Senator Levin. Thank you both. Let us start with a 7-minute 
first round. 

Mr. Winchell, in your prepared testimony you talk about bulk 
cash, and we will be seeing a lot of discussion of that, about drug 
cartels smuggling U.S. dollars from the United States into Mexico, 
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finding a Mexican bank or a casa de cambio willing to accept the 
cash, after which the financial institution brings or tried to bring 
the dollars back to the United States. 

Now, why would a drug cartel bother to smuggle U.S. dollars 
across the border into Mexico only to send those dollars or try to 
send those dollars back here again for deposit in our bank? Explain 
that circle. And why is it that process takes place? I tried in my 
opening statement to do it, but I would like to hear you try it also. 

Mr. WiNCHELL. The laws that were initiated in Mexico involving 
the banking industry set certain limits on the amount of U.S. cur- 
rency that could go into banks in any particular period of time; 
$7,000 for a business and $4,000 per individual per month, I be- 
lieve, are what the figures are. Bulk cash is moved south across the 
border as the proceeds of their illicit activity in the United States 
and pooled in Mexico. They are sold then to money brokers any- 
where between 4 to 7 percent discounted rate. That may be casas 
de cambios and others that they use then to move in bulk cash 
back across the United States border into U.S. institutions and 
then wired back into Mexico and exchanged at the current rate be- 
tween Mexican dollars and pesos, and in essence completing the 
laundering process of cleaning the money. 

Senator Levin. But to put it simply, they cannot just directly de- 
posit these drug sales money into U.S. banks because we have a 
Know Your Customer requirement. Is that correct? 

Mr. WiNCHELL. That would be correct, sir. They have to find 
someone in Mexico that would be complicit with their activity. 

Senator Levin. But they want that money to be in U.S. banks, 
to get there and to be laundered. 

Mr. WiNCHELL. Yes, sir. 

Senator Levin. So the short answer is they cannot do it directly, 
so they have to go through this process of sending it to a Mexican 
bank, if they can, and then having it returned cleansed. Is that cor- 
rect? 

Mr. WiNCHELL. That is correct. 

Senator Levin. Now, what is the relationship between the 
strength of a drug cartel and the ability of that drug cartel to laun- 
der money? Is it clear that the more it is able to launder its money, 
the stronger the cartel is? 

Mr. WiNCHELL. Their profits fuel their activity. The more profit 
they have, in other words, the more legitimate money they can ap- 
pear to have, the more they can fuel their illicit activity and then 
diversify their criminal activity. So the larger the cartel, the richer 
the cartel, the more powerful they get. 

Senator Levin. But also they will be more powerful if they can 
launder that money so that they can then diversify? 

Mr. WiNCHELL. Absolutely. 

Senator Levin. All right. So that, again, we have all this huge 
violence on the border. We have drug cartels down in Mexico and 
drug groups here as well fighting for power, bringing violence to 
their streets and to our streets. And if they can successfully laun- 
der money, they are stronger. Is that accurate? 

Mr. WiNCHELL. That would be very accurate. 
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Senator Levin. OK. Mr. Cohen, would you agree that the more 
a terrorist can get their money through our system, the stronger 
a terrorist group will be? 

Mr. Cohen. I would, Mr. Chairman. 

Senator Levin. All right. Now, even though they have new rules 
down in Mexico, as you have just pointed out, I think starting in 
2010, are illicit drug proceeds still being laundered into U.S. finan- 
cial institutions, Mr. Cohen? 

Mr. Cohen. I think there is no question that there continues to 
be a problem with money laundering in U.S. financial institutions 
coming from Mexico, from the casas de cambio and other institu- 
tions in Mexico, as well as from other sources where illicit proceeds 
are placed into the U.S. financial system. 

Senator Levin. And, therefore, even though there have been 
changes in the laws, for instance, in Mexico and other efforts made 
to clamp down on the ability to launder money for these groups, 
the terrorist groups or drug cartels, it is still going on, and the ef- 
forts have continued. Can you give us some of the new efforts that 
are being made, the new challenges, Mr. Cohen, in this area of 
money laundering? 

Mr. Cohen. Well, to pick up on what Mr. Winchell was dis- 
cussing earlier, with respect to Mexico, obviously there is a sub- 
stantial amount of legitimate trade with Mexico and a substantial 
amount of legitimate U.S. dollars that are spent in Mexico. And 
what we see is these Mexican financial institutions working with 
casas de cambio and then working with U.S. financial institutions 
to take in U.S. dollars from the Mexican economy. Dirty money is 
layered in with legitimate funds and placed into U.S. financial in- 
stitutions. That continues to be a serious problem even after the 
really very important and aggressive steps that the Mexican Gov- 
ernment has taken to restrict the ability of businesses and individ- 
uals to deposit U.S. dollars directly into Mexican financial institu- 
tions. 

We have also seen some displacement of the money-laundering 
cycle, so instead of the drug dollars just moving into Mexico, be- 
cause of the steps the Mexican Government has taken, we have 
seen some of these dollars move further south in coming back into 
the U.S. financial system from countries further into Central Amer- 
ica. 

Senator Levin. Now, when law enforcement or bank regulators 
see a bank in a country with drug-trafficking challenges trans- 
porting large volumes of U.S. dollars to the United States, is a red 
flag that illegal drug proceeds might be involved? 

Mr. Cohen. I think financial institutions have in their anti- 
money laundering programs a whole series of factors that they look 
at to determine whether what is happening is normal, typical be- 
havior or something out of the ordinary and whether it spikes in 
the amount of bulk cash coming in or other sort of anomalous ac- 
tivity. Those are the sorts of things that a well-tuned anti-money 
laundering program should identify and cause a financial institu- 
tion to look at more carefully. 

Senator Levin. OK. Senator Coburn. 

Senator Coburn. Thank you. 
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Mr. Cohen, in your testimony, you stated that when safeguards 
are not stringently enforced, illicit actors are able to take advan- 
tage of the U.S. financial system. If they were all enforced 100 per- 
cent of the time, basically what I am hearing is they would still be 
able to take advantage of the U.S. financial system because when 
you blend good with bad from a legitimate organization — so what 
are the next steps to limit that down? 

Mr. Cohen. Well, Senator Coburn, I would draw a distinction be- 
tween the OFAC list, the SDN list, and anti-money laundering pro- 
grams in responding to this question. A properly functioning com- 
pliance program with respect to the SDN list should prohibit any- 
body on that list from getting access to any U.S. financial institu- 
tion because banks can run the filter, run the names, and if a 
transaction is coming through from someone who is on the SDN 
list, it should be stopped. 

Preventing money laundering is a more difficult task, and the 
regulatory structure that we have implemented and that Congress 
has legislated through the Bank Secrecy Act and the PATRIOT Act 
and other amendments to Title 31 require a risk-based approach by 
financial institutions to have an anti-money laundering program 
that is appropriate given the risk that the bank faces across the 
range of its activities. 

Every bank is going to approach this in a slightly different way, 
and every bank has a slightly different risk profile given its cus- 
tomer base domestically and how they interact with affiliates and 
non-affiliates overseas. 

I do not think anyone expects to ever achieve a financial system 
where there is absolutely no money laundering, but it is also the 
case that when financial institutions do not implement robust anti- 
money laundering programs across the range of their activities that 
is appropriately tuned to the risk that they face, there is a greater 
opportunity for illicit acts to get access to 

Senator Coburn. So whose responsibility is it to see that the 
banks do just that? 

Mr. Cohen. Well, I think it is all of our responsibility 

Senator Coburn. No, but it is specific to the Treasury, right? 

Mr. Cohen. Sure. 

Senator Coburn. It is the Treasury Department. Who in the 
Treasury Department is responsible for that? What agency? 

Mr. Cohen. Well, my office is responsible for helping to set pol- 
icy. We have obviously the OCC, which is part of the Treasury De- 
partment, that is a bank regulator. It undertakes its regulatory ac- 
tivities independently from the Secretary of the Treasury by stat- 
ute. 

Senator Coburn. Right. 

Mr. Cohen. There are obviously other bank regulators as well 
that regulate other financial institutions. 

Senator Coburn. But it is not necessarily that we do not have 
enough good regulations. Part of the problem is that the regula- 
tions we have are not being monitored and enforced properly. 
Would you agree with that statement? 

Mr. Cohen. Senator, I think as we continue to work on the issue 
of money laundering, I think we need to look both at the regulatory 
structure itself and see whether there are modifications that would 
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be appropriate. And I also think we need to look at how effectively 
the regulators are overseeing financial institutions 

Senator Coburn. Well, I think we have seen that. Our investiga- 
tion is going to show a lot of lack of effectiveness. As a matter of 
fact, it does show a lot of a lack of effectiveness. So the point I am 
trying to get to is we can write all the rules and regulations in the 
world, but if they, in fact, are not carried out by the bureaucracy 
assigned to do that, it does not matter. So the whole point is: Do 
we write a whole bunch more regs? Do we make it even more com- 
plicated? 

One of the questions I had for you I am not going to ask. I will, 
if I may, Mr. Chairman, send supplemental questions to both of 
these witnesses. Of the people that are doing it right — and I am 
going to ask HSBC this, too. What is the cost of compliance with 
this as a percentage of the volume in their banks? And is there 
going to become a point at which it is not worth dealing with us? 
In other words, can we do it more effectively and more efficiently? 
And are we doing the right things? 

Mr. Cohen. Well, Senator, I think we are looking at, as I said, 
whether the regulatory structure needs some modification, not to 
make it more complicated but to make it more effective. I think we 
are looking at whether the financial institutions themselves need 
to do a better job in complying with the regulations. And we are 
working very closely with the bank regulators across the spectrum 
of regulators, both bank regulators and the regulators in the secu- 
rities industry, to talk about how we all can do a better job of over- 
seeing compliance in the regulated industries. 

Senator Coburn. Thank you. 

Mr. Winchell, just one question. I am going to submit my ques- 
tions for the record to both of you, if I might, and have you respond 
to them, hopefully in a timely fashion. You talked about your out- 
reach efforts have resulted in the initiation of 950 criminal inves- 
tigations. Did HSI agents identify the illicit funds or did the banks? 

Mr. Winchell. It was usually the banks that — I would think I 
would be safe in answering that question. Our outreach efforts are 
an attempt to educate them on the red flags, and then they would 
bring those to our 

Senator Coburn. So you are getting some response? 

Mr. Winchell. Yes, sir. 

Senator Coburn. All right. And does your Trade Transparency 
Unit include partnerships with countries other than Central and 
South America? 

Mr. Winchell. Our Trade Transparency Unit continues to grow. 

Senator Coburn. But where is it now? Is it mainly Central and 
South America? 

Mr. Winchell. It is primarily Central and South America, but 
it is expanding towards the Philippines and others, now. 

Senator Coburn. And one thing I will ask you. Prepaid cards 
and stored value devices seems to be a new, novel method. I would 
love in the response to my questions from both of you on that, how 
are we going to handle that one? That one seems even more dif- 
ficult. 

Mr. Winchell. That one is a bit of a challenge for us; particu- 
larly as the individual crosses back and forth across the border in 
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bearer form, it is basically a bearer instrument. Of greater concern 
to us are the loadable and reloadable cards. 

Senator Coburn. All right. Thank you, Mr. Chairman. 

Senator Levin. Thank you very much. Senator Coburn. 

I just have one more question. You touched on this in the answer 
to Senator Coburn’s question. Just explain for us, if you would, Mr. 
Cohen, very simply, what the SDN list is, what the OFAC filter is, 
and how the OFAC filter relates to the SDN list and why these are 
important. 

Mr. Cohen. Sure. The SDN list is the compilation of individuals 
and entities that have been subject to sanctions under the range 
of sanctions programs that OFAC and the Treasury Department 
implement. These sanctions programs cover illicit actors like ter- 
rorist financiers, weapons proliferators, transnational organized 
criminal groups, narcotics traffickers, as well as rogue regimes — 
Iran, North Korea, Syria, and others. Everybody who is subject to 
sanctions under those sanctions programs appears on the SDN list. 
This is a list that is published by OFAC, available to every finan- 
cial institution, and by and large, financial institutions incorporate 
this list into their compliance programs and screen transactions 
coming through their financial institutions against this list, be- 
cause everybody who appears on that list is forbidden from dealing 
with any U.S. person, including any U.S. financial institution, and 
their assets are to be frozen. 

It is critically important that financial institutions run the OFAC 
list in their filters so that our sanctions programs are effectively 
implemented. We rely on financial institutions to ensure that those 
for whom we have applied sanctions are not able to access the U.S. 
financial system. That makes our sanctions programs, which at 
root are designed to pursue our most important national security 
and foreign policy objectives, as effective as they can be. 

Senator Levin. How effective is the OFAC filter, in your judg- 
ment? 

Mr. Cohen. There are some notable examples of situations where 
financial institutions have taken steps to try and evade the OFAC 
filter. We have over the course of the last 5 or 6 years entered into 
a number of significant settlements with major financial institu- 
tions that all have essentially the same fact pattern, which is that 
the foreign financial institution was stripping information from 
transaction messages running through the United States as a 
means to evade their U.S. partners’ OFAC filter. Those are very 
important cases for us and I think illustrate how seriously we take 
this issue. But, at the same time, I think by and large, U.S. finan- 
cial institutions do a good job of incorporating into their compliance 
programs the list of names and entities that are on the OFAC SDN 
list and screening transactions to prevent access to their institu- 
tions by those who are subject to sanctions. 

Senator Levin. Will you put in your words now — I asked Mr. 
Winchell this before. Put in your words why it is that these entities 
we are trying to keep out of our financial system try to get into our 
financial system. Why is it that they make this effort, in your 
words? 

Mr. Cohen. I think the simple answer is if you can run money 
through the United States, it helps to create an air of legitimacy 
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to those funds that makes it easier for you to then make use of 
those funds for whatever purpose you want to put them to. And if 
this is dirty money that you are trying to portray as clean funds, 
being able to run it try the U.S. financial system helps you achieve 
that objective. 

Senator Levin. And makes you stronger. 

Mr. Cohen. It helps you achieve whatever illicit objective it is 
that you are trying to achieve, whether it is weapons proliferation, 
terrorist financing, or any of the other activities that are the sub- 
ject of our sanctions, all of which we are trying to combat by weak- 
ening their financial support. 

Senator Levin. It helps you achieve the very activities that we 
are trying to stop. 

Mr. Cohen. It does. 

Senator Levin. Do you have any additional questions? 

Senator Coburn. No, but I would make one observation. The bet- 
ter we get, the more they are going to want to be here. That is one. 
And number two is it is hard for us to know what an excellent anti- 
money laundering system is because we can always do better. But 
I would remind us that the cost of that is borne by the banks, 
which is ultimately the American consumer. And so efficiency in 
how we do this and the worry about too much — in other words, for 
the next regulation, what are we achieving for it? Cost-effective- 
ness has got to be part of our concern as we look to handle this. 

Thank you, Mr. Chairman. 

Senator Levin. Thank you very much. Senator Coburn. 

There will be additional questions for the record for you both, 
and that will be true with all of our panelists this morning and 
afternoon. And talking about this afternoon, I think we have talked 
to your staff about it. Senator Coburn. The likelihood is that we 
will need to break at some point here for lunch. We will see how 
quickly the next panel goes. 

We thank you both. We thank you and your agencies for the 
work that you do. It is critically important to our Nation’s security, 
and you are excused. 

Mr. Cohen. Thank you, Mr. Chairman. 

Senator Levin. We will now call our second panel of witnesses 
for this morning’s hearing: David Bagley, the head of Group Com- 
pliance of HSBC Holdings in London; Paul Thurston, Chief Execu- 
tive for Retail Banking and Wealth Management at HSBC Hold- 
ings in Hong Kong; Michael Gallagher, the Former Executive Vice 
President and Head of PCM North America for HSBC Bank USA 
in New York; and, finally, Christopher Lok, the Former Head of 
Global Banknotes at HSBC Bank USA in New York. 

We appreciate all of you being here this morning. We look for- 
ward to your testimony. And as you heard, we have Rule VI, which 
requires that all witnesses who testify before the Subcommittee are 
required to be sworn, so we would ask each of you to please stand 
and raise your right hand. Do you swear that the testimony that 
you are about to give will be the truth, the whole truth, and noth- 
ing but the truth, so help you, God? 

Mr. Bagley. I do. 

Mr. Thurston. I do. 

Mr. Gallagher. I do. 
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Mr. Lok. I do. 

Senator Levin. The timing system that we will he using today 
will give you a warning 1 minute before the red light comes on, and 
than it will shift from green to yellow. It will give you an oppor- 
tunity to conclude your remarks. Your written testimony will be 
printed in the record in its entirety. Please try to limit your oral 
testimony to no more than 5 minutes each. 

Before you start, I want to thank HSBC for their cooperation. As 
I said in my opening statement, HSBC was totally cooperative with 
this investigation. We appreciate that. 

So, Mr. Bagley, I guess we are going to have you go first followed 
by Mr. Thurston, then Mr. Gallagher, and then Mr. Lok. And then 
we will turn to questions. So, Mr. Bagley, please proceed. 

TESTIMONY OF DAVID B. BAGLEY, i HEAD OF GROUP 
COMPLIANCE, HSBC HOLDINGS PLC, LONDON, ENGLAND 

Mr. Bagley. Thank you. Good morning. Chairman Levin, Sen- 
ator Coburn, and Members of the Subcommittee. My name is David 
Bagley. Thank you for the opportunity to be here today. I have sub- 
mitted written testimony, but in the interest of time, I have con- 
fined my remarks to a few points. 

Since 2002, I have been the head of Group Compliance at HSBC 
Holdings pic, which is the global parent of HSBC. Having been a 
compliance officer for 13 years in a bank that operates in approxi- 
mately 80 jurisdictions worldwide, I have dedicated my career — not 
only within HSBC but through my broader industry work as well — 
to meeting the significant challenges that confront global banking 
institutions in the world we live in. I have followed the work of this 
Subcommittee and have seen how your work has advanced impor- 
tant dialogues and helped the international banking community, 
including HSBC, identify and address potential vulnerabilities. 

My chief focus as the head of Group Compliance at HSBC has 
been promoting the values that we, as a bank, have set for our- 
selves and the values that you and our regulators, both in the 
United States and around the world, rightly expect from a global 
bank like HSBC. And while there have been successes on many 
compliance issues, I recognize that there have been some signifi- 
cant areas of failure. I have said before and I will say again: De- 
spite the best efforts and intentions of many dedicated profes- 
sionals, HSBC has fallen short of our own expectations and the ex- 
pectations of our regulators. This is something that a bank seeking 
to conduct business in the United States and globally must ac- 
knowledge, learn from, and, most importantly, take steps to avoid 
in the future. 

The group has always had as a core element of its compliance 
policy a focus on both the letter and the spirit of laws and regula- 
tions, not just what is permissible but what is prudent and respon- 
sible. 

In hindsight, as I reflect on the dialogue from 2002 to 2007, and 
specifically the wider lessons learned out of both the OFAC and 
Mexico issues, I think we all sometimes allowed a focus on what 
was lawful and compliant to obscure what should be best practices 


^The prepared statement of Mr. Bagley appears in the Appendix on page 111. 
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for a global bank. Transparency is a principle that HSBC and every 
bank should always make a top priority, even when it is not legally 
required. I think that with our revised structure and approach, this 
is where we are today. 

Indeed, we have learned a number of valuable lessons, and the 
bank is well along the way of converting those lessons into solu- 
tions. As I expect my colleague, Stuart Levey, to describe in some 
detail, HSBC is in the process of shedding the historical compliance 
model that the bank has outgrown. This departure from the old 
model is very significant. Our former compliance structure was a 
product of historical growth by acquisition, and it was a major fac- 
tor behind some of the issues that I expect we will be discussing 
today. 

Under the former model, my mandate was limited to advising, 
recommending, and reporting. My job was not to ensure that all of 
our global affiliates followed the group’s compliance standards, and 
I did not have the authority, resources, support, or infrastructure 
to do so. Rather, final authority and decisionmaking rested with 
local line management in each of the bank’s affiliates. 

Now a major overhaul is underway. The new compliance model 
is a product of deep reflection and is tailored to address today’s 
challenges as well as the inevitable challenges of tomorrow. Signifi- 
cantly, the Group Compliance function now for the first time has 
authority over the compliance departments at every one of the 
bank’s affiliates. This is a stark break from the past. Now Group 
Compliance has both the mandate and the resources to ensure that 
affiliates are compliant. In other words, for the first time. Group 
Compliance is an advisory and a control function. In addition, per- 
sonnel at the affiliates are now accountable to Group Compliance 
for their conduct. 

Second, under the new model. Group Compliance oversees the 
bank’s nearly 3,500 compliance officers worldwide and takes the 
lead on decisions about resource allocation, compensation, objec- 
tives, strategy, and accountability. 

Last, while I do not have the time to describe all of the recent 
enhancements, I would like to emphasize the creation of our assur- 
ance function. In short, the authority of the head of Group Compli- 
ance and, therefore, the function as a whole is greatly increased. 

As I have thought about the structural transformation of the 
bank’s compliance function, I recommended to the group that now 
is the appropriate time, for me and for the bank, for someone new 
to serve as the head of Group Compliance. I have agreed to work 
with the bank’s senior management towards an orderly transition 
of this important role. 

Thank you for your time. I welcome this opportunity to answer 
any questions. 

Senator Levin. Thank you very much, Mr. Bagley. Mr. Thurston. 


VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00036 Fmt6633 Sfmt 6633 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



23 


TESTIMONY OF PAUL THURSTON, i CHIEF EXECUTIVE, RETAIL 

BANKING AND WEALTH MANAGEMENT, HSBC HOLDINGS 

PLC, HONG KONG 

Mr. Thurston. Thank you and good morning, Chairman Levin, 
Senator Coburn, and Members of the Subcommittee. My name is 
Paul Thurston. I am the Chief Executive of Retail Banking and 
Wealth Management for the HSBC Group. I have submitted writ- 
ten testimony, but in the interest of time today, I will confine my 
comments to a few points as well. 

I have worked in the banking industry for 37 years, and I have 
served at various roles in HSBC around the world. I was the Chief 
Executive of HSBC for 14 challenging and stressful months begin- 
ning in Eebruary 2007. 

When I arrived in Mexico, I set out to find out the most impor- 
tant business issues and risks that there were in the business. I 
met with business heads, risk management, audit, and also with 
the regulators, and it became clear that a number of group systems 
and policies had been put in place by that time but that this was 
not HSBC as I knew it. There were significant weaknesses in the 
control infrastructure, and these weaknesses existed in Know-Your- 
Client (KYC) and AML management and in other areas of the bank 
as well, including credit risk management, card fraud prevention, 
technology, and management information. 

As I investigated these issues and tried to assess why the prob- 
lems persisted, I came to learn that they were exacerbated by a 
business model and a performance management system that we 
had inherited from the former Bital Bank that was heavily focused 
on business growth rather than control. 

I should add that we were operating in an external environment 
in Mexico that was incredibly challenging. Bank employees faced 
very real risks of being targeted for bribery, extortion, and kidnap- 
ping. And, indeed, there were many kidnappings during my tenure, 
and high levels of security were required for staff working in Mex- 
ico. In addition, unlike the United States, Mexico was a data-poor 
environment, making it difficult to verify the identity of customers. 

Some of the things I found, frankly, took my breath away. But 
every time I found a weakness, I tried to ensure that we took ac- 
tion, not just in dealing with the immediate issues but also in set- 
ting up programs to improve the infrastructure, processes, and 
business model for the future. I frequently requested audit and 
group compliance reviews to be scheduled so that I would have an 
independent review of progress, and I kept the board, the regional 
audit committee, and group management informed of everything 
that I saw and did. And I also ensured that we cooperated fully 
with the regulators, as indeed the group has done with this inves- 
tigation. 

Effective AML depends upon properly knowing your customers, 
and this was a major area of concern to me, with substandard files 
and KYC documentation housed across a network of 1,300 
branches. I committed to invest in technology and people, to cen- 
tralize the review of all files for all new and existing accounts, and 
to keep central records that could be used for ongoing alert man- 


^The prepared statement of Mr. Thurston appears in the Appendix on page 116. 
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agement. I recognized that this would take time to develop and in- 
stall, but it would give us a more robust platform, provide more re- 
liable reports, and improve the quality and speed of remediation 
once implemented. 

I believe that we made real progress at HSBC Mexico during my 
short tenure. We changed the business model, the performance 
management systems, and we enhanced our compliance systems. 
But, clearly, after only a short period of time, there was still much 
work to be done upon my departure in April 2008, and the scale 
of the remediation work alongside an escalating drug war in Mex- 
ico and ever more adept criminals continued to raise challenges 
and new issues. 

After I left, further steps continued to be taken. Decisions were 
made to stop U.S. dollar cash handling in Mexico. We closed 
branches in areas where there was a high risk of money laun- 
dering. We are now in the process of closing all the HSBC Mexico 
accounts in the Caymans. We will continue to scrutinize our busi- 
ness in Mexico to determine how we can further mitigate compli- 
ance risk. 

We know that criminals operate globally, and as an international 
bank, we will be a target. We have to be sure that we have the best 
and strongest defense in place in every business, in every market 
in which we operate, regardless of the local challenges, and we are 
committed to doing this. We know we should have done this better, 
sooner. 

There are many learnings in our experience in Mexico for us and 
others, and I will be pleased to answer any questions that you 
have. 

Senator Levin. Thank you very much, Mr. Thurston. Mr. Galla- 
gher. 

TESTIMONY OF MICHAEL GALLAGHER, i FORMER EXECUTIVE 

VICE PRESIDENT, H EAD OF PCM NORTH AMERICA, HSBC 

BANK USA, N.A., NEW YORK, NEW YORK 

Mr. Gallagher. Good morning. Chairman Levin, Senator 
Coburn, and Members of the Subcommittee, my name is Michael 
Gallagher, and I reside in Lincroft, New Jersey. From 2001 until 
last year, I was an Executive Vice President at HSBC Bank USA, 
also referred to as “HBUS,” and I was responsible for the Payments 
and Cash Management Business in North America. On November 
21, 2011, I was subject to a reduction in force at the bank and, 
therefore, have not been a member of the bank for the past 8 
months. 

During my time at HSBC, PCM developed and marketed pay- 
ments and cash management services to corporate middle-market 
clients as well as financial institutions, including HSBC -affiliated 
banks. While PCM generally did not manage the various oper- 
ational units within PCM processing PCM products, we worked 
very closely with our operations colleagues to manage and main- 
tain the expected standards of quality and control. 

I understand the Subcommittee is interested in HBUS’s anti- 
money laundering efforts. During my tenure at HBUS, my team 


^The prepared statement of Mr. Gallagher appears in the Appendix on page 124. 
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and I took compliance matters very seriously. We were active par- 
ticipants in the efforts of the compliance department to ensure 
safety and soundness. PCM assisted the compliance department op- 
erations as well as relationship managers in this regard. In in- 
stances, when PCM became aware of negative information regard- 
ing the client, PCM worked closely with the compliance department 
operations and the relationship managers to ensure that they re- 
ceived the information they needed. 

PCM also made resources available to relationship managers and 
the compliance department to assist in any way that we could. At 
various times, PCM made staff available or seconded these staff to 
different departments to assist in various projects and problem res- 
olution. 

In summary, I would like to thank the Chairman of the Sub- 
committee for allowing me to speak at the hearing on these critical 
matters. Anti-money laundering, terrorism financing, and global 
access to the U.S. financial systems are issues of critical impor- 
tance to the banking industry, to national security, and to me. 

HSBC and the banking industry as a whole have learned many 
important lessons over the past decade or so. I believe that HSBC’s 
experience, especially in light of its uniquely global footprint, can 
add real value to understanding more broadly the risks and oppor- 
tunities for enhance safety in this industry. 

During my time at HSBC, there were steps taken to tighten anti- 
money laundering controls, and I understand that significant 
progress has been made in this regard since my departure. But 
with hindsight, it is clear that we did not always fully understand 
the risks of our businesses or the challenges of the global, cross- 
border nature of the business. It is clear that we could have done 
much more and done it more quickly. 

I appreciate the opportunity to provide this information to the 
Subcommittee, and I am prepared to answer any additional ques- 
tions that the Subcommittee may have at this hearing. Thank you. 

Senator Levin. Thank you very much, Mr. Gallagher. Mr. Lok. 

TESTIMONY OF CHIU HON “CHRISTOPHER” LOK,i FORMER 

HEAD OF GLOBAL BANKNOTES, HSBC BANK USA, N.A., NEW 

YORK, NEW YORK 

Mr. Lok. Good morning. Chairman Levin, Senator Coburn, and 
Members of the Subcommittee, I appreciate the opportunity to be 
here today. My name is Christopher Lok, and from 2001 until 2010 
I served as the global head of the banknotes business at HSBC. 

In my statement today, I will cover three topics. First, I will pro- 
vide my background. Second, I will provide an overview of the 
banknotes business at HSBC. And, third, I will address some of the 
specific problems and issues that I believe the Subcommittee is in- 
terested in. 

For me, it is painful and embarrassing to talk about the areas 
where, in hindsight, we fell short. At the same time, it is valuable 
to do so in order to find constructive solutions and so that others 
do not make the same mistakes going forward. 


^The prepared statement of Mr. Lok appears in the Appendix on page 127. 
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I was born and raised in Hong Kong. In 1981, I started working 
in the banknotes business, and that is what I did for 29 years. Dur- 
ing the entire time from 1981 through 2010, I worked for HSBC 
or a predecessor institution. For most of my career I was based in 
Asia, but I was privileged to have lived and worked in New York 
for a brief period in the 1990s and again from 2001 until 2010. 
Even though I am not a U.S. citizen, I had a wonderful experience 
living and working in this country, and I have a great admiration 
and affection for the United States. 

I would like to provide a brief overview of the banknotes busi- 
ness. In essence, the business is about the buying and selling of 
physical currency at the wholesale level. Our clients were banks 
and other financial institutions around the world. We employed 
about 275 people, including traders, back office staff, and people 
who focused on operations and logistics. We dealt with approxi- 
mately 800 customers in over 100 countries, and we transacted in 
about 75 different currencies. These customers have natural de- 
mand for and supply of currency banknotes, driven by various eco- 
nomic activities. To them, HSBC was a safe and reliable 
counterparty, and I believe that we provided them with a valuable 
service. 

I understand that the Subcommittee is focused on some of the 
compliance challenges that we faced in the banknotes business. 

Let me start by emphasizing that compliance was a critical part 
of the HSBC banknotes business. Over a period of years, there 
were some occasions when I communicated with my colleagues in 
compliance in a manner that was unnecessarily aggressive and 
harsh. These communications were unprofessional, and I deeply re- 
gret them. 

In reality, the business line and compliance shared the same ob- 
jective: To avoid the bank being used by inappropriate people for 
improper transactions. Despite my overly critical emails, I believe 
banknotes business and compliance people actually had a good 
working partnership. While I did not always communicate this, I 
had great respect for my colleagues in compliance, and I valued 
their work. 

With respect to banknotes transactions with customers in Mex- 
ico, up until December 2008 I was under the impression that 
HSBC’s Mexican affiliate, HBMX, was operating under HSBC 
group standards. In December 2008, HBMX announced that it 
would no longer be accepting U.S. currency in Mexico. I was sur- 
prised by this announcement, and I tried to find out what was the 
reason behind it. It was not until early 2009 that I learned, as a 
result of my own inquiries, that HBMX had gotten into problems 
because their anti-money laundering controls were seriously com- 
promised. I was surprised and concerned about this news. I was 
not previously aware of the AML problems at HBMX. If we had 
known of these problems, I am certain that we, in the banknotes 
business, would have done things differently. 

As time went by, some questions were raised about the bank- 
notes business in Mexico. In retrospect, we did not adequately ap- 
preciate the concerns being raised about the business environment 
in Mexico. While we did our best to deal with these inquiries, I am 
sorry to say that I did not understand what later became apparent. 
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With the benefit of hindsight, it is now clear that we did not per- 
ceive the extent of the anti-money laundering deficiencies and the 
risks present in Mexico. Thank you very much. 

Senator Levin. Thank you very much, Mr. Lok. 

Let us have a 10-minute first round, if that is all right. Does that 
give you enough time? 

Senator Coburn. Yes. 

Senator Levin. Because we will have more than one round. 

Mr. Thurston, HBMX was a bank that had a longstanding severe 
money-laundering problem, and we describe this at length in our 
report. The bank was purchased in 2002. You did not arrive until 
2007. Take a look, if you would, at the exhibit book, Mr. Thurston, 
in front of you there. Exhibit Ib.^ What we have done here is we 
have put together a chart summarizing some of the exhibits. Just 
a few highlights from those exhibits, which are really a litany of 
money-laundering deficiencies at HBMX from 2002 to 2009. 

The first reference is to 2002 in this exhibit. Here is what the 
audit found: “There is no recognizable compliance or money laun- 
dering function” at Bital. That is the bank that you bought. That 
is 2002. 

Then in 2005, 3 years later now, “senior persons within the com- 
pliance function fabricated records of certain mandatory anti- 
money laundering meetings.” This quote is taken from Exhibit 12,^ 
but we put together these quotes on this Exhibit lb. 

Now, the fabrications were ordered by the head of the anti- 
money laundering compliance program who was asked then to 
leave the bank. This email was sent by Mr. Bagley to Stephen 
Green, who was then CEO of the HSBC Group. 

Next, 2007. This is a quote from a July 7, 2007, email from a 
senior compliance person at HSBC Group, John Root. It is taken 
from Exhibit 19.^ It is an email to the head of HBMX compliance 
after finding out that the anti-money laundering committee allowed 
three different high-risk accounts with suspected illegal drug pro- 
ceeds to stay open, and he writes, “What is this, the School of Low 
Expectations banking?” 

Then in 2008, this is a statement from HBMX’s own AML direc- 
tor who was leaving that Mexican affiliate, and he was partici- 
pating in an exit interview with Mr. Bagley, and he said the fol- 
lowing: That there were allegations of 60 percent to 70 percent of 
laundered proceeds in Mexico going through HBMX. He also stated 
that HBMX executives did not care about AML controls. That 
comes from Exhibit 30. This is 2008. 

And then another quote from Mr. Bagley in 2008: “What I find 
most frustrating is the way in which new issues constantly 
emerged, however much time is spent with HBMX.” 

In 2009, a statement from an email from Mr. Bagley to the CEO 
of HSBC Latin America, Mr. Alonso: “The inherent anti-money 
laundering risk in Mexico is still very high.” 

So this had been going on for 7 years, money-laundering prob- 
lems at the HBMX bank, the Mexican affiliate. 


^See Exhibit No. lb, which appears in the Appendix on page 576. 

2 See Exhibit No. 12, which appears in the Appendix on page 634. 

3 See Exhibit No. 19, which appears in the Appendix on page 673. 

^See Exhibit No. 30, which appears in the Appendix on page 703. 
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So, Mr. Thurston, when you arrived in 2008, you began imme- 
diately making some changes. The problems that you faced had 
been longstanding. They were not corrected before you got there, 
and some of them, plenty of them, were not corrected until you got 
there, and then some remained and they were corrected, some of 
them, after you left. 

Why did you discover that these had festered for so many years? 
What was there about that bank, that culture that you discovered 
that allowed these things to go on and on and on? These are not 
thing which were discovered later. These were known at the time. 
Emails show that they were known at the time. A number of you 
have talked about hindsight. These are contemporaneous emails. 
This is not something discovered in hindsight or learned in hind- 
sight. This is something that people knew was going on at that 
bank. Why was it allowed to continue? What did you find when you 
got there? 

Mr. Thurston. Thank you, Mr. Chairman. My assessment was 
that starting from before the acquisition, this bank had been a fast- 
growth bank. In fact, that was the reason why it got into trouble, 
and that was the reason that we were able to acquire it. It grew 
fast, but it had no controls. The business model was completely de- 
centralized. All the files, all the decisions were taken in a distrib- 
uted branch network. It was very difficult from the center to get 
controls, and there was a very strong incentive scheme that backed 
continued volume growth rather than quality of controls. 

A number of steps were taken to install group processes and 
group systems, but if you are confronted with that, as I said in my 
opening remarks, you need to address the business model that is 
underneath it and put something systemic in. So one of the steps 
that I took was to create this centralized platform where, instead 
of relying on 1,300 branches to do the KYC, we would have all of 
those papers imaged to a central site where we could check and see 
that we had all the documents, that we had all the papers, and if 
we did not, then we would not open the accounts. 

But that kind of investment takes time, and there was a signifi- 
cant remediation task to be done to put right the files from the 
past. So there were multiple problems that existed in the bank, as 
I saw it when I was there. 

Senator Levin. These were problems which were known for 
years. This is not something which was looking back. This is some- 
thing which year after year after year, starting in 2002, was known 
by this bank. And yet these problems festered for years. 

Here is another email. Exhibit 36. ^ This was an HSBC Group 
deputy head of compliance, a 2008 email. Now, he had been sent 
to Mexico to try to get a handle on money-laundering problems 
there. One of the problems discussed was a backlog of 3,600 ac- 
counts that were supposed to be closed but were not, including 675 
which had been identified as potentially involving money laun- 
dering that had been ordered closed by HBMX’s anti-money laun- 
dering committee, known as CCC, or Triple C. Here is what the 
email noted, and this is Exhibit 36: That of the 675 accounts, 16 


^ See Exhibit No. 36, which appears in the Appendix on page 726. 
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had been ordered closed in 2005, 130 in 2006, 172 in 2007, 309 in 
2008. So it took 3 or 4 years to close a suspicious account. 

Now, is there any way that should have been allowed to have 
happened at the time? Forget the business case and anything else. 

Mr. Thurston. No, Senator. 

Senator Levin. Now, another problem involving HBMX was the 
committee at the bank which was mandated under Mexican law 
and is composed of both business and compliance personnel 
charged with resolving anti-money laundering issues, such as what 
accounts should be closed. 

In July 2008, after the CCC committee decided to allow several 
suspect accounts to remain open, a senior compliance official at 
HSBC Group, John Root — so now this is the group now — sends a 
blistering letter to HBMX compliance head, Mr. Garcia, at Exhibit 
19.1 I am going to read from this exhibit. “A number of items jump 
out from your most recent weekly report . . . but everything pales 
in comparison with the [money-laundering] items on page 4,” he 
writes. “It looks like the business is still retaining unacceptable 
risks and the AML committee is going along after some initial 
hemming and hawing. I am quite concerned that the committee is 
not functioning properly. Alarmed, even. I am close to picking up 
the phone to your CEO.” 

“What on earth is an ‘assumption responsibility letter’ and how 
would it protect the bank if the client is a money launderer? Please 
note,” he writes, “that you can dress up the USD 10 million to be 
paid ... to the U.S. authorities as an ‘economic penalty’ if you 
wish but a fine is a fine is a fine, and a hefty one at that. What 
is this, the School of Low Expectations Banking? (‘We didn’t go to 
jail! We merely signed a settlement with the Feds for $10 mil- 
lion!’)” 

“So,” he said, one problem was “strike one.” Another is “strike 
two. Let’s now look at strike three,” he writes. “(I hope you like 
baseball.)” 

“The same person who is giving” — this is his writing — “the sac- 
rosanct ‘assumption responsibility letter’ ... is being asked by the 
CEO to explain why he retained Casa de Cambio Puebla relation- 
ship after USD 11 million was seized by the authorities in Puebla 
in an account with Wachovia in Miami. What?! The business was 
OK with this?” 

And then he says, “The [anti-money laundering] committee just 
can’t keep rubber-stamping unacceptable risks merely because 
someone on the business side writes a nice letter. It needs to take 
a firmer stand. It needs some cojones. We have seen this movie be- 
fore, and it ends badly.” 

Why is it that the bank — the bank that is the group bank — that 
sees these kind of problems just does not flat out hold some folks 
accountable and fire some folks? I mean, they can write this kind 
of a letter, and they did, and we dug this out of the emails. Why, 
if the folks running this bank are so bad, why isn’t action taken 
against them by the parent bank? 

Mr. Thurston. Mr. Chairman, in the time that I was in Mexico, 
we were very firm on discipline. We took strict disciplinary action 


^See Exhibit No. 19, which appears in the Appendix on page 673. 
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against many members of staff, even at senior management levels, 
including dismissals. So we were certainly taking it seriously with- 
in Mexico. 

Senator Levin. My time is up. Thank you. Senator Coburn. 

Senator Coburn. I want to go to Mr. Bagley for a moment, if I 
might. I think your testimony was that you were in charge of com- 
pliance, but you had no essential line authority to enforce that 
compliance. Is that correct? 

Mr. Bagley. That is right. The core responsibility of Group Com- 
pliance was to set policy, to report, to escalate issues when they 
were reported to us, but we did not manage and control the indi- 
vidual compliance departments in each one of the affiliates or sub- 
sidiaries. 

Senator Coburn. Those individual compliance departments in 
those subsidiaries reported to the head of whatever that subsidiary 
was, correct? 

Mr. Bagley. There were two reporting lines: One to the Group 
Compliance team for reporting and other reasons, and then another 
line to the local CEO or business head. 

Senator Coburn. And I think it was also your testimony that 
had now been changed and that there is a line function for compli- 
ance from corporate HSBC all the way down to every bank. Is that 
correct? 

Mr. Bagley. It has fundamentally changed in that the hardest 
line of reporting is now through the function, so I am accountable, 
responsible, and have authority over the whole function globally, 
3,500 people across the group, and that means I control resource, 
allocation, budget, remuneration, the performance and the func- 
tion, and can ensure that the adequate resources, the right amount 
of money is spent on this effort. It is a radical shift, a significant 
change. 

Senator Coburn. There is the answer to the question you asked. 
In other words, there is no line authority — you can have a compli- 
ance officer all you want. If they have no line authority to cause 
people to change actions and the same people they are guiding 
have a line authority that says here is your profit, how well our 
affiliate or our subsidiary does, one of those is going to have more 
power than the other. Thank you. 

Mr. Gallagher, you said in your testimony, “But with hindsight, 
it is clear that we did not always fully understand the risks of our 
businesses” and “that we could have done much more and done it 
more quickly.” 

Looking at the whole of this, that to me is almost an unbeliev- 
able statement when you have things going on in Mexico, things 
going on elsewhere. It is almost like you were not aware that these 
things were happening? 

Mr. Gallagher. It is a fact that there are certain things that we 
were not aware were happening. Within certain entities that is 
true. 

Senator Coburn. What were the efforts made to try to become 
aware of what was happening? My natural inclination is to say you 
were not — did not fully understand the risk or you ignored reality, 
based on the testimony and the data that we have collected from 
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inside your own operations. Would you just expand on that a little 
bit so I can gain a clearer understanding? 

Mr. Gallagher. Yes, I appreciate the question, and I share your 
concern on this matter. One of the lessons we have certainly 
learned is the sharing of information not only throughout the orga- 
nization across various operations and silos, as it were, but across 
geography is something that requires significant improvement. I 
am led to believe that has improved significantly since I left, and 
even during my time there, there was improvement in the process. 
But heretofore it was not easy to move information across organiza- 
tions and to filter it down to the appropriate levels to get action. 

Compliance and monitoring was our first level of finding issues 
and looking after them, and whenever we found issues, in my expe- 
rience, I believe we inquired, we reacted, and we pursued. So I 
think we did a lot at the time, but as has been said by others this 
morning, we have learned a lot as we have gone along. 

Senator Coburn. OK. Thank you. 

Mr. Thurston, in early 2007, right when you started, one of 
HBMX’s clients was Zhenli Ye Con, a reported drug lord who got 
caught selling precursor chemicals for methamphetamine produc- 
tion for La Familia and the Sinaloa cartels. When you learned that 
Mr. Ye Con was a client of HBMX, what was your reaction? What 
did you do? 

Mr. Thurston. Well, I was horrified by the case, and this really 
exposed a whole series of weaknesses within the bank. So I person- 
ally conducted an investigation. I brought in the audit team. I 
brought in the security and fraud team. I brought in the compli- 
ance team. And we made a number of changes. This is where I 
found, for example, the business heads were overriding the people 
in the Compliance Department on decisions on accounts. So I put 
up an escalation process so that Compliance had a route to the 
chief operating officer and then to me if they were not comfortable 
with the decisions that were being made through that legal com- 
mittee. 

I looked at the fact that we had here a business account that was 
being managed in the personal consumer part of the bank, which 
would make it very hard for people then to spot the underlying ac- 
tivity and compare it with normal activity. So we made a number 
of changes about that, and that is where we started to — we dis- 
missed a number of people who had falsified visit records, not been 
to visit the premises when they said they had. That is when I real- 
ized that practice existed. 

We looked to see if there was any sign whatsoever of any collu- 
sion. We investigated all the staffs accounts. And as a result of 
that, we found some incidents of staff lending to each other, so we 
created policies on that. 

So there were a whole series of actions that stemmed out of find- 
ing that incident. 

Senator Coburn. There was, in fact, significant attention from 
the compliance officer at that time, correct? Prior to your knowl- 
edge of it, that had been raised as an issue. 

Mr. Thurston. That is correct. Senator Coburn. 

Senator Coburn. All right. Thank you. 
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During your tenure at HBMX, I understand that law enforce- 
ment in Mexico raised concerns about high-risk money laundering 
at HBMX. Why was it that the Mexican legal authorities think now 
today that your record was worse than any other bank in Mexico? 
Is it a fact or is there some assumptions there that the Sub- 
committee should know about? 

Mr. Thurston. They found that whenever they wanted informa- 
tion from the banks, HSBC was one of the slowest to respond. So 
when they were conducting investigations, HSBC took longer to 
produce documents and had more challenges producing documents 
than most of the other banks. When we investigated that, again, 
we looked to see is this collusion, is this people deliberately trying 
to hold information from the authorities, and we found no sign of 
that whatsoever. But what we did find was a process where these 
things would go out to branches. Because all the files were held out 
in all the branches around the country and the quality was so poor, 
it would take a long time to collate effective information and get 
it back, and there were things that were missing, which is why the 
centralized program we had was so important. But we were also 
swamped with information requests. We had on average 1,000 a 
week coming from the regulators, not distinguishing between dif- 
ferent types. 

So we then set up a direct line with the financial intelligence 
unit within Mexico so that where they were conducting urgent in- 
vestigations, they could come through straight to the bank so that 
we could respond more quickly. 

Senator Coburn. OK. Thank you. I will yield back for right now. 

Senator Levin. Thank you. 

Mr. Thurston, you were at the bank there for a year, you have 
testified, and while there, you made some improvements. But the 
problems continued, and part of the reason was the nature of high- 
risk products and clients that the bank had, and I want to get to 
some of that issue by discussing with you the Cayman accounts. 

Now, when you bought the Mexican bank, when HSBC bought 
the Mexican bank, it found that HBMX kept open a so-called 
branch office in the Cayman Islands. Now, I say “so-called branch 
office” because my understanding is there was no actual building, 
no office, no employees. It was just a shell operation that offered 
U.S. dollar accounts. 

The branch, so-called, in the Caymans was run by HBMX itself 
using its own employees in Mexico. Any HBMX branch could open 
a U.S. dollar account for a client, and at one point 50,000 clients 
had these Cayman accounts, holding $2.1 billion in assets. 

Now, we have spent a lot of time on this Subcommittee raising 
questions about Caymans and other tax havens for tax avoidance 
purposes, but this is a little bit different, and this Subcommittee 
has a lot of interest in these issues involving the Caymans because 
they are shell corporations, and they pose significant money-laun- 
dering problems, and they do it as soon as they are organized be- 
cause nobody knows who is behind those corporations. And here 
are a few of the highlights relative to the Caymans. 
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Exhibit 9 1 is a 2002 audit of HBMX, and that audit notes that 
41 percent of the accounts in the Cayman Islands had no client in- 
formation. 

Exhibit 31^ is a 2008 email by Mr. Root saying that “15 percent 
of the customers there did not even have a file.” 

“Eixing the Cayman accounts will be a huge struggle.” He says, 
“How do you locate clients when there is no file?” 

Exhibit 32 3 is a July 2008 email noting that HBMX has discov- 
ered “significant U.S. dollar remittances being made by a number 
of HBMX Cayman customers to a U.S. company alleged to be in- 
volved in the supply of aircraft to drug cartels.” 

A later email, November 2008, which is Exhibit 34, ^ describes 
the Cayman accounts as having been frozen “due to massive mis- 
use of them by organized crime.” 

So, Mr. Thurston, first of all, did you know that the Cayman 
branch was fictitious, just a shell? 

Mr. Thurston. It is what is called a cat B license, I believe. 

Senator Levin. But did you know that it was just a shell com- 
pany? There were no employees there, no office there. Were you 
aware of that? 

Mr. Thurston. I know now, sir. 

Senator Levin. And did you know about the problems at the Cay- 
man accounts that I have just read? 

Mr. Thurston. Mr. Chairman, no, I did not during the time that 
I was there, and on reading your report, I was really angry to find 
there had been an audit report on these in the previous year, but 
that it had been closed off with no action. So when I got there and 
went through what are the top risks and the big audit outstanding 
items, these were nowhere to be seen. 

Senator Levin. All right. So you were unaware of the Cayman 
accounts at the time that you were head of that office? 

Mr. Thurston. Correct, sir. 

Senator Levin. Now, Mr. Bagley, you indicated to the Sub- 
committee during an interview that although you were aware of 
the accounts since 2002, the Cayman accounts, you focused on 
them only after a July 2008 incident involving funds going to buy 
planes for drug cartels. Now, I do not know, given the history here, 
how you could possibly not know of the severity of the problems in- 
volving the Caymans until that time, but in any event, after that 
incident, the new head of HBMX decided — and this is, I think, 
2008 now — Mr. Pena decided to suspend opening new Cayman Is- 
land accounts. 

So under Mr. Pena, HBMX initiated a review of the accounts, 
eventually closed 9,000 of them. But as of the beginning of 2012, 
there were still about 20,000 accounts with $670 million in assets. 
So two-thirds of the money-laundering risk continues. 

So, Mr. Bagley, this Subcommittee really has found out that 
these kind of shell corporations in the Caymans and other places 
create all kinds of tax avoidance problems, but this is a different 
kind of an issue here. This is a money-laundering issue, and we 


^See Exhibit No. 9, which appears in the Appendix on page 607. 

2 See Exhibit No. 31, which appears in the Appendix on page 708. 

3 See Exhibit No. 32, which appears in the Appendix on page 711. 

^See Exhibit No. 34, which appears in the Appendix on page 720. 
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have now two-thirds of those accounts which were in the Caymans, 
with that many assets apparently still sitting there. What are you 
going to do about it? 

Mr. Bagley. Thank you. The point is that when we became 
aware of those Cayman accounts, the ones that remain have all 
been fully remediated. So when we became aware and focused on 
the Cayman accounts themselves, what we did as a group, what 
HBMX did was work through each and every one of those accounts, 
revised and refreshed the KYC to satisfy ourselves that there was 
an explanation for the monies and that we were satisfied with the 
source of the funds. And, therefore, what is left has been subject 
to revised and enhanced due diligence and a refreshment of all of 
the information that we are holding. 

Senator Levin. Does that mean 20,000 accounts now that you 
are going to keep there? 

Mr. Bagley. Well, actually, the group has recently arrived at a 
decision, which I support, which is to actually close all of those 
Cayman accounts. 

Senator Levin. “No.” Well, that is the short answer, a very wel- 
come answer, and particularly I think this Subcommittee can really 
look at its work as contributing to this kind of pressure on you to 
do the right thing. 

Mr. Bagley. Sorry to interrupt. I should just be very clear that 
we are in the process of closing those accounts. They are not yet 
closed, but they will all be closed. 

Senator Levin. That is good news. 

Now, HBMX did not inform HBUS about the Cayman U.S. dollar 
accounts for many years. Is that correct, Mr. Gallagher? 

Mr. Gallagher. Yes, sir, that is correct. 

Senator Levin. So these transactions were run through the U.S. 
dollar correspondent account that HBMX had at HBUS. Would 
HBUS have wanted to know about these high-risk accounts in a se- 
crecy jurisdiction? Would you have wanted to know that? 

Mr. Gallagher. Absolutely. 

Senator Levin. Do you know why you were not informed? 

Mr. Gallagher. No, sir, I cannot answer that question. 

Senator Levin. Maybe Mr. Bagley or Mr. Thurston. Why 
wouldn’t HBUS have been informed of those accounts? 

Mr. Bagley. It is a very appropriate question. I think there are 
two or three reasons. One is that at that stage neither HBUS, as 
your report reflects, was conducting affiliate due diligence. Second, 
we at that time did not do affiliate due diligence across the rest of 
the group. And as a consequence, the questions that you would nor- 
mally expect to be asked by one affiliate of another, one cor- 
respondent bank of another, were not asked. They are now. 

Senator Levin. Under your new rules now, you are going to be 
notifying each of the affiliates of this kind of action? 

Mr. Bagley. What we are doing and have introduced and are in 
the process of rolling out is affiliate due diligence across the whole 
group, so every affiliate will do due diligence on its own affiliates. 
That will be to the same standard as we apply to an entirely inde- 
pendent third party. 

In addition, we have put in place a process that ensures that if 
there is a material AML deficiency or issue or risk in one affiliate. 
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that will be reported on a mandatory basis across the group and 
will automatically go to the head of compliance for each region. So 
what that will mean, when that work is complete, is that each affil- 
iate will treat its affiliates at arm’s length, will ask all of the ap- 
propriate questions, will know everything that it needs to know 
about the risk profile that one affiliate presents to another. 

Senator Levin. And when will this be put in place? You said it 
is being put in place. When will this be accomplished? 

Mr. Bagley. We are rolling out — it will take a while, obviously, 
to complete those due diligence profiles. We will use the ones we 
have already completed for the United States in response to the 
cease and desist orders. We will do it as fast as we can. We have 
already put in place the mandatory reporting of AML deficiencies, 
and we have that up and running as a process. 

Senator Levin. When will it be completed, do you know? 

Mr. Bagley. I do not know exactly when it will be completed, but 
we will do the highest risk as quickly as we can. 

Senator Levin. All right. Will you let the Subcommittee know 
when it is completed? 

Mr. Bagley. I would be very happy to. 

Senator Levin. Thank you very much. Senator Coburn. 

Senator Coburn. Mr. Gallagher, if you would turn to Exhibit 
40.1 The Bank Melli in Iran, prior to September 11, 2001, HSBC 
had a relationship with this bank in Iran which, because of its 
home country, would get more scrutiny in the United States. HSBC 
in Europe helped coach Bank Melli to send payments through the 
United States without getting slowed down. 

Why was HSBC interested in doing business with this bank? 

Mr. Gallagher. I cannot speak specifically for all of the reasons. 
The business desire was coming out of Europe and the Middle 
East, not coming out of the United States. There was a memo that 
described some opportunities that they saw for growth in business 
generally, but HBUS was not driving that business decision. 

Senator Coburn. What was it exactly that made you say in this 
email, “I wish to be on the record as not comfortable with this piece 
of business”? 

Mr. Gallagher. Yes, thank you. That is a very important ques- 
tion. I was very concerned about the lack of transparency in the 
proposal that had been put forward that described how the pay- 
ments would flow. So in this particular case, there seemed to be 
an inability for the bank — that is to say, Melli — to describe in ad- 
vance who its primary beneficiaries would be. That caused me to 
say we should not want to engage in business with a client who 
cannot provide that level of transparency to our system. 

Senator Coburn. So there was really no Know Your Customer 
here? 

Mr. Gallagher. I cannot speak to that because Know Your Cus- 
tomer would have been done on the European side. But when I be- 
came aware that there was seemingly a lack of transparency in one 
of my roles, I thought that was inappropriate and very strongly 
suggested we should not proceed. 

Senator Coburn. And so what was the response to that? 


^See Exhibit No. 40, which appears in the Appendix on page 755. 
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Mr. Gallagher. Well, ultimately the transaction never was ap- 
proved. 

Senator Coburn. And do you know why? 

Mr. Gallagher. Discussion went on for some time back and 
forth across the regions and the world. I do not recall the specific 
reason, but I was delighted to know that my recommendation was 
part of the solution. 

Senator Coburn. Did you raise other concerns other than in this 
email that we have documented under Exhibit 40? ^ 

Mr. Gallagher. About Bank Melli specifically? 

Senator Coburn. Yes. 

Mr. Gallagher. I do not recall. 

Senator Coburn. OK. If you would turn to Exhibit 57, ^ Iranian 
U-turn payments, in November 2004. This email suggests that 
some inside HSBC thought that all Iranian payments through the 
United States should be fully disclosed. Nonetheless, many pay- 
ments still went through without full transparency, sometimes be- 
cause information was removed by HBEU. This email says, “HBEU 
would be advised to not alter the payment details in any way.” 

Was it well understood within HSBC that information was being 
removed from payments before they arrived in the United States? 

Mr. Gallagher. I do not know how well understood it was, and 
I do not recall specifically some of these exchanges. But if I had to 
speculate, consistent with my earlier position, which was un- 
changed, regarding the importance of transparency in these mes- 
sages, I am quite comfortable that the proper people were alerted 
and it was in the proper hands for resolution. But specific details 
on this I do not recall. 

Senator Coburn. But the decision went really against your ad- 
vice? 

Mr. Gallagher. Yes. 

Senator Coburn. Because, in fact, they were altered, correct? 

Mr. Gallagher. It would seem so, yes. 

Senator Coburn. OK. Do you have any idea how HSBC intended 
to make sure all these payments complied with U.S. law? 

Mr. Gallagher. There was a view at the time that the team in 
London and/or subsequently elsewhere was going to ensure that 
the payments were going to be U-turn compliant b^efore they got to 
the United States. 

Senator Coburn. Do you think they were? 

Mr. Gallagher. I do not honestly know specifically that they 
were not. Some of this information is slightly new to me in being 
involved in this investigation and catching up. So I do not know the 
specific answer to that question. 

Senator Coburn. Who would know the answer to that question? 

Mr. Gallagher. I would suggest either operational staff doing 
the work on the other side and/or possibly somebody in Compli- 
ance. 

Senator Coburn. Should they have relied on people in Iran to do 
that? 


^See Exhibit No. 40, which appears in the Appendix on page 755. 
2 See Exhibit No. 57, which appears in the Appendix on page 844. 
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Mr. Gallagher. No. Certainly, in retrospect, we should not have 
relied on anybody but ourselves to ensure the soundness of the pay- 
ments coming into our system. 

Senator Coburn. Mr. Lok, in your testimony, you said compli- 
ance was a critical part of the HSBC banknotes business. 

Mr. Lok. Correct, sir. 

Senator Coburn. Can you explain to me exactly what you mean 
by this? And tell me what it looked like. 

Mr. Lok. We have a system in place whereby customers are risk- 
rated, and they are rated according to different categories, and 
then, therefore, the high-risk customers, we need to make sure that 
there is a process in place whereby the information about a client 
is laid out in the open so that people can come in, including the 
relationship managers, the business people, as well as compliance, 
so that we can evaluate the risk. And, finally, compliance has to 
be the final sign-off so that we can do business with these people. 
In other words, we consider compliance a very important partner 
in our business. 

Senator Coburn. Did you recognize certain vulnerabilities in 
your compliance strategy in the banknote business? 

Mr. Lok. At that moment, honestly, no. 

Senator Coburn. You would agree that there were, though, in 
hindsight? 

Mr. Lok. In hindsight, yes. Looking at all these documents, yes. 
The answer is definitely yes. 

Senator Coburn. Just for our educational purposes and given 
your broad experience, are there certain challenges that are dif- 
ferent in the banknote business related to specific currencies over 
other currencies? 

Mr. Lok. I am sorry. Can you repeat the question? 

Senator Coburn. Are there specific challenges in the banknote 
business in terms of compliance related to one currency over an- 
other, not necessarily in terms of geographic location, but, for ex- 
ample, is it easier to run a scam or play the game with the U.S. 
dollar, the British pound, the euro, the Japanese yen, the 
renminbi? In other words, does the same compliance vulnerabilities 
that you see now in hindsight apply differently to different cur- 
rencies and different geographic locations? 

Mr. Lok. At that moment, no, it did not strike me that there is 
a difference in terms of compliance risk because the policy itself 
spells out exactly how we run it, analyzing the risk. No, we were 
not — no. The answer is no. 

Senator Coburn. All right. I will yield back. 

Senator Levin. Let me ask some questions about the Sigue Cor- 
poration, which was a U.S. money service business that trans- 
mitted funds from U.S. clients to Mexico and Latin America. The 
Drug Enforcement Association undertook a sting operation in 2007 
in which its agents told Sigue’s operators that they wanted to send 
drug proceeds to Mexico, and more than two dozen of those Sigue 
operators obliged. 

In January 2008, Sigue entered into a deferred prosecution 
agreement with the U.S. Department of Justice, admitting the 
facts, for failing to have adequate money-laundering programs. 
HBUS determined that in 2007 alone it had processed 159 U.S. dol- 
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lar wire transfers for Sigue involving about half a billion dollars, 
and they were all sent through the HBMX correspondent account 
with HBUS. 

Then if you would look at Exhibit 18a, ^ Mr. Gallagher, this was 
a memo that was prepared by HBUS after a 2008 Wall Street Jour- 
nal article on the Wachovia case. It talks about the Sigue case and 
its use of the HBMX account, but it also notes that Sigue was not 
added to the HBUS filter so that it could be subjected to enhanced 
anti-money laundering to identify suspicious activity. 

Now, you were the head of PCM at that time, Mr. Gallagher, and 
that handles wire monitoring. Do you know why HBUS did not 
subject Sigue to enhanced monitoring after the 2008 deferred pros- 
ecution agreement? 

Mr. Gallagher. No, Mr. Chairman, I do not know. Looking at 
the memo, I note that I am not addressed on the memo. I cannot 
honestly recall if I saw the memo. But the decision as to whether 
or not to add any name to enhanced monitoring or to a filter, etc., 
is a decision that would be taken in Compliance, not in PCM. 

Senator Levin. But you do not know why. You are saying it is 
not your department, but you just do not know why it was not 
added. Should it have been added? 

Mr. Gallagher. Seemingly, absolutely it should have been 
added. I do not know why it was not. 

Senator Levin. OK. In 2007 — this is Exhibit 30 ^ — a man named 
Mr. Barroso, who was head of the HBMX anti-money laundering 
program, was leaving the bank. He had an exit meeting with you, 
Mr. Bagley, I believe, and according to a meeting summary that 
you wrote, Mr. Barroso told you that there were allegations that 
“60 to 70 percent of laundered proceeds in Mexico went through 
HBMX,” and he did not think that senior management had any 
commitment to robust anti-money laundering controls. 

That memo, I believe. Exhibit 30, was written to you, Mr. Thur- 
ston, if I have that correct. 

Mr. Thurston. That is correct. Chairman. 

Senator Levin. What was your reaction when you got that 
memo? 

Mr. Thurston. Mr. Chairman, I was incredibly distressed. I do 
not think anybody wants to hear those sorts of things coming 
through, so we made sure that we investigated. We made sure that 
we took the points that were there. We had recently had discussion 
with the regulators in Mexico, and we made sure that we took ac- 
count of those points within the remediation program that we were 
looking at in Mexico to make sure there was nothing new that we 
had missed. It also caused us to question whether our head of com- 
pliance was sufficiently good for the role as well. 

Senator Levin. All right. Let me now turn to the Iranian issue, 
which Senator Coburn asked some questions about as well. 

Now, Iran had been subject to sanctions in the United States for 
a long time as a rogue nation. It had long been on the U.S. SDN 
list, as we heard about this morning, as a prohibited country. Our 
laws consistently prohibited U.S. persons from doing business di- 


1 See Exhibit No. 18a, which appears in the Appendix on page 654. 

2 See Exhibit No. 30, which appears in the Appendix on page 703. 
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rectly with Iran, but until 2008, U.S. banks were allowed to process 
transactions that might involve Iran but which were sent to the 
United States by foreign banks located outside of Iran. Now, those 
transactions were called “U-turns” because they went from Iran to 
a non-Iranian bank, a foreign bank, then to a U.S. bank and then 
back to a different non-Iranian foreign bank and then to the final 
party. So there was a U-turn that was made through the U.S. 
bank. 

The issue with HBUS is that the HSBC affiliates in Europe and 
the Middle East wanted to send U-turn transactions through their 
accounts at HBUS without triggering that OF AC filter or an indi- 
vidualized review to make sure that they were permissive U-turns. 
They wanted to remove any reference to Iran and to go through the 
HBLJS systems without any manual or more detailed review. So 
this was a battle over transparency. 

The United States wanted full transparency so that it knew it 
was dealing with an Iranian U-turn and could make sure it com- 
plied with U.S. law. The affiliates did not want to trigger these re- 
views or to take the time for those reviews. So HBUS and the affili- 
ates fought over this issue for 3 years, from 2001 to 2004. But 
while they were arguing, the overseas HSBC affiliates were send- 
ing undisclosed Iranian U-turns through their HBUS accounts, 
anyway. And to do that, the HSBC affiliate in Europe, HBEU, 
stripped out the references to Iran. Senior employees at HBEU pro- 
tested in 2003 and 2004 — and I believe one of these protests was 
read by Senator Coburn — that they did not want to be altering wire 
transfer documents for Iran. They even set two deadlines in 2004 
when they said that they would stop doing it, but both deadlines 
were ignored. 

HSBC issued group-wide policy statements on Iran in 2005 and 
2006, but neither resolved the U-turn issue. The issue was resolved 
only in 2007 when HSBC made a global decision to exit Iran. 

Now, I believe that Exhibit 41 was referred to by Senator 
Coburn, and if so, I will not read it again. 

Senator Coburn. I did Exhibit 40. 

Senator Levin. OK. So Exhibit 40 was read by Senator Coburn, 
which made reference to the statement about, “I wish to be on 
record as not comfortable with this piece of business.” 

Exhibit 411 ^as, “With the amount of smoke coming off of this 
gun, remind me again why we think we should be supporting this 
business?” So that is another HBUS employee describing the Ira- 
nian business. But at HBEU, the Europe branch, they were strip- 
ping payment information, so the United States was unaware of 
these Iranian payments. 

Senior officials at HSBC, at the headquarters in London from 
2001 to 2007, knew that affiliates in England and the Middle East, 
the HBEU and HBME, were sending undisclosed payments 
through their HBUS accounts but did not stop them or inform 
HBUS of the extent of the activity. So they knew that their affili- 
ates were hiding key information from each other. 

Now, at HBUS, senior compliance officials were on notice as 
early as 2001 that this stripping was occurring but took no decisive 


^See Exhibit No. 41, which appears in the Appendix on page 760. 
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action to stop it. They stopped occasional wire transfers from Iran 
with the words, “Do not use our name in New York.” 

So, first, Mr. Bagley, didn’t the European and Middle East affili- 
ates — why weren’t those affiliates told, why wasn’t HBUS told, 
what possible justification is there for not telling an affiliate that 
key information to them so that they can comply with their own 
laws has been removed? 

Mr. Bagley. It is a very fair question. Senator. My under- 
standing of the position was that HBEU was checking each one of 
those transactions to ensure that they were U-turn compliant, that 
I was always advised that they were U-turn compliant. When I 
first focused on this issue, which was, I think, in mid-2003, al- 
though there were indications in emails before that, I emphasized 
and recommended that there should be full transparency given to 
HBUS so that they could check the U-turn compliance — compliance 
with the U-turn themselves. 

Senator Levin. Was it? 

Mr. Bagley. It was not. 

Senator Levin. So as Exhibit 55 says so simply and eloquently 
and dramatically, your own people “were being asked to ‘fudge’ the 
nature of the payments to avoid the U.S. embargo and seizure.” 
That is Exhibit 55. ^ 

Then you were not the only one that was uncomfortable, Mr. Gal- 
lagher, with this piece of business. People in this bank, this global 
bank, were being asked to fudge the nature of the payments to 
avoid the U.S. embargo and seizure. And it is pretty shocking stuff. 

Now, in 2002 and 2003, HSBC affiliates continued to send thou- 
sands of these undisclosed Iranian transactions through HBUS. Ex- 
hibit Ic^ is a chart that shows the numbers. So even though the 
HSBC Group was on notice as early as 2001 that HSBC affiliates 
were sending these hidden Iranian transactions through their ac- 
counts in the United States, nobody did anything to stop it for 
years. 

Mr. Bagley, in 2003, you had recently become head of compliance 
for the entire HSBC Group. Earlier that month, the Middle East 
affiliate, HBME, sent HBUS a memo laying out the business case 
for it to process Iranian transactions. Why were they processing 
them? Because there was a substantial income opportunity, and 
here is what you wrote in 2003, Exhibit 45:^ “The business case in- 
cludes a number of express references to practices which may con- 
stitute a breach of U.S. sanctions.” But then in October 2003 — and 
this is Exhibit 48"^ — one of your attorneys in Group Compliance, 
John Root, wrote to you that six banks were processing U.S. dollar 
payments and that these payments were being altered by HBEU 
before going to HBUS. He said HBEU was removing the remitter’s 
name. Breaching these U.S. sanctions is a serious matter, and as 
the head of Compliance, you were making that point. 

When you learned that HBEU was removing the names of Ira- 
nian banks, why was not the practice simply stopped right then? 
Why did it take so long to fix? 


^See Exhibit No. 55, which appears in the Appendix on page 840. 

2 See Exhibit No. Ic, which appears in the Appendix on page 577. 

3 See Exhibit No. 45, which appears in the Appendix on page 784. 

^See Exhibit No. 48, which appears in the Appendix on page 801. 


VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00054 Fmt6633 Sfmt 6633 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



41 


Mr. Bagley. Mr. Chairman, that is an absolutely appropriate 
question, and with the absolute benefit of hindsight, this clearly 
took far too long to resolve. 

What I can say is that when it came to my attention, I very 
clearly recommended that all transactions should be compliant, 
should be transparent, and should be made in a way which HBUS 
was comfortable with, and that recommendation went to the rel- 
evant parts of the group and ultimately was escalated to senior 
management within the group. 

Senator Levin. How long did it take? 

Mr. Bagley. I think as you have indicated, there were then var- 
ious discussions between different parts of the group, and I think 
we progressively started to introduce transparency into the pay- 
ments in 2006. 

Senator Levin. So that would be about what, 3 years? 

Mr. Bagley. Far too long. 

Senator Levin. But about 3 years? 

Mr. Bagley. Yes. 

Senator Levin. Senator Coburn. 

Senator Coburn. If a U-turn transaction is fully compliant and 
fully transparent, I would make the point it is legal, and nobody 
here is claiming illegality. But if one of these — and this is for you, 
Mr. Bagley. If one of these U-turn payments was not compliant 
with U.S. law, who is responsible? 

Mr. Bagley. Ultimately I anticipate that the transaction passing 
through the U.S. bank may expose the U.S. bank to risk. And if 
there was malign intent, then it could expose somebody else to risk 
as well. 

Senator Coburn. So in this great big organization called HSBC, 
is it fair for one profit center to put another profit center at that 
kind of risk? Not only is it fair, is it the right thing to do? 

Mr. Bagley. I neither think it is fair nor the right thing to do, 
which is why I urged transparency so that HBUS could satisfy 
itself But I would like to stress that at all times we were told and 
believed that those transactions were compliant and lawful and 
that there was a process where people seriously tried to ensure 
within HBEU that the transactions that were sent were compliant. 

Senator Coburn. So it is your feeling — and you cannot know this 
for a fact because you have not looked at all of them. But it is your 
feeling that none of these transactions that HBUS saw no trans- 
parency on, it is your testimony that you feel that they all met the 
intent that our government says if you are going to run it through 
U.S. dollar banks, that you actually met that expectation? 

Mr. Bagley. I do not think I can say that all of those trans- 
actions were. What I was always told was that people were seeking 
to ensure they were compliant 

Senator Coburn. Who are those people? 

Mr. Bagley. The processing unit within HBEU. 

Senator Coburn. And who are those? Who is the head of the 
processing unit at HBEU? 

Mr. Bagley. I cannot recall the name. 

Senator Coburn. Who could recall the name? 

Mr. Bagley. I am sure we could find that name. 
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Senator Coburn. Would you do that for the Subcommittee, 
please? 

Mr. Bagley. Absolutely. 

Senator Coburn. I would love to have that name during our 
questioning this afternoon because that is a key point. Either they 
were legitimate U-turns or they were not. 

Mr. Bagley. I believe that the results of the lookback that has 
been conducted by Deloitte indicates that most, if not all, of those 
transactions were compliant, or a significant number, I believe. 
That is not a report I have seen, but that is my understanding. 

Senator Coburn. OK. And who has that report? 

Mr. Bagley. I believe the results of that report have been dis- 
closed to the Subcommittee. 

Senator Coburn. OK. Thank you. 

Mr. Lok, on A1 Rajhi Bank, Exhibit 78, ^ if you would take a look 
at that. You were interested in carrying on a business relationship 
with this bank to sell it banknotes, as this email shows. Page 2 of 
the email also shows that one of your compliance people wrote, “I 
am not trying to be difficult,” but that she did not want to approve 
the business. 

What was your impression at the time why she would be con- 
cerned about being difficult? 

Mr. Lok. The way I read her message, “difficult” refers to her re- 
luctance to sign off the profile, and she is saying here that she is 
not comfortable signing it because she does not know the client. 

Senator Coburn. Did she feel like she was being difficult because 
somebody was pressing her to approve something that she did not 
feel comfortable with? 

Mr. Lok. No, that is not my interpretation. It is just because she 
was asked, and then she turned it down. That could be interpreted 
as difficult. I think that is what she is referring to. 

Senator Coburn. All right. She also states, “I cannot answer 
questions ifiwhen the A1 Rajhi name appears in the U.S. media.” 
What kind of concerns were you aware of that would rise to that 
level? 

Mr. Lok. I know that this name had appeared numerous times 
in the papers, negative reports about the family members, and all 
sorts of allegations. So it is a very controversial name. 

Senator Coburn. All right. You also, on page 1 of this email, 
wrote it is compliance that is the key. Were you suggesting that 
you needed to convince somebody in compliance to approve the deal 
or that you were willing to submit to whatever compliance said? 

Mr. Lok. Because this is a very difficult case, it is not simple at 
all. When it was passed on to me by my colleague, on the one hand, 
there were these negative news in the paper, etc. But, on the other 
hand, there was this very supportive report coming out from the 
RMs based in Saudi Arabia. And at the same time, the Group Com- 
pliance had actually reversed its decision saying that they were 
happy to let individual entities resume doing business. 

So, to me, it is a balancing act where you have some very bad 
news, but, on the other hand, you cannot ignore the news that ap- 
peared to be favorable. So that is why I presented this to the com- 


^See Exhibit No. 78, which appears in the Appendix on page 937. 
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pliance so that we can engage in an open dialogue, show it to a few 
more people for elevating the issue, so that more people who know 
this thing a lot better than me can engage in and arrive at a deci- 
sion. 

Senator Coburn. And ultimately you did not do this deal? Is that 
correct? 

Mr. Lok. I am sorry. No. I think after a very long period of time. 
New York Compliance had agreed to letting us resume the relation- 
ship. I mean the U.S. side. But it took a long time, because I had 
read this file before coming here, the dialogue first started in May, 
and then a decision was made in New York that we could resume 
for trading, that this was in December 2006. 

Senator Coburn. OK. Thank you. 

Senator Levin. Thank you. 

Mr. Gallagher, take a look at Exhibit 50a, ^ if you would, when 
Denise Reilly of HBUS writes to Teresa Pesce at HBUS, anti- 
money laundering director, that the so-called Eastwood memo, 
which was referring to alterations to remove references to Iran, 
that the memo was discussed at a meeting with you, Mr. Galla- 
gher. 

This is dated December 17, 2003, so the question is — when you 
learned that HBEU was sending these hidden Iranian payments 
through their HBUS account, you saw it as a problem, you said so, 
and the real question is: What steps did you take to stop the prac- 
tice? You objected to it. But what did you do beyond that? 

Mr. Gallagher. Yes, thank you for that. I have reread these 
documents as well, and while I do not recall the specific meeting 
that is discussed there, mentioned there, I feel very comfortable 
about two things: First, that my position on this with respect to the 
necessity for transparency and full compliance was unchanged 
throughout the process; and, second, that this was really in the 
right hands. Denise Reilly at the time was in Compliance, I believe 
already, and Terry Pesce was the head of AML Compliance. So all 
the right hands from an HSBC Bank USA perspective into which 
this needed to be elevated were, in fact, contained in this memo. 
I do not recall my specific discussions here, but I would have to 
speculate they would be consistent with my prior positions, which 
is an abundance of caution. 

Senator Levin. So you objected in 2001 to the practice. By 2003, 
you were the head of the HBUS’s Payments and Cash Management 
Division. Why not just pick up the phone in 2003, call the CEO of 
HBUS or somebody in the HSBC Group and just raise hell? Why 
not do that? 

Mr. Gallagher. Well, certainly with 

Senator Levin. I think you knew whoever was supposed to be 
taking care of it was not taking care of it. 

Mr. Gallagher. Yes. With the benefit of hindsight, that is ex- 
actly what I should have done, and I think we have all learned the 
lesson that we should have been louder sooner and more broadly 
in the organization. 


^See Exhibit No. 50a, which appears in the Appendix on page 807. 
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Senator Levin. Mr. Lok, let me ask you about Exhibit 84b. ^ You 
were the head of HBUS’s global banknotes business that supplied 
physical U.S. dollars to financial institutions around the world. 
Some of your clients, to put it mildly, did not inspire confidence 
and were either opposed by HBUS’s Compliance, the division there, 
or they sought to subject them to special anti-money laundering 
monitoring. But you often opposed those recommendations, and 
here are a few examples, 84b is one. 

This is an email exchange in 2005. This was about whether to 
classify a particular HBUS banknotes client as a special category 
client (SCC), which means that is a high-risk client that undergoes 
additional scrutiny. 

HBUS Compliance described the foreign bank as one in which, 
“the bank’s senior management and employees have been involved 
in numerous significant instances of corruption, fraud, and embez- 
zlement over the past few years,” and recommended that it be clas- 
sified as a SCC. 

You responded as follows: “Yes, corruption can be rampant in 
this bank, but it is not unique” to that bank. So you opposed the 
SCC designation. 

Now, the HBUS compliance officer for banknotes, Daniel Jack, 
described a bank as “government-owned, in a high-risk country 
with a politically exposed person,” which is someone who requires 
enhanced due diligence, “and reputational risk due to corruption, 
etc.” This is now Exhibit 84a. ^ And he recommended an SCC des- 
ignation, and your response: “. . . this is such a large bank hence 
malfeasance is expected.” 

“However,” you wrote, “I do not agree that just on these numer- 
ous breaches that the bank should be classified.” 

So your position was that malfeasance is to be expected at a 
large bank so do not even bother to do additional anti-money laun- 
dering monitoring. 

And then Exhibit 82 ^ — this is from 2007 — in this email chain, an 
HBUS banknotes colleague asks if you — and, Mr. Lok, we are refer- 
ring to you — would be willing to help open a banknotes account for 
Islami Bank Bangladesh, which was partly owned by A1 Rajhi 
Bank, a Saudi Arabian bank whose account was closed by HBUS 
in 2005 for terrorist-financing reasons, although in part in 2007, 
because of your urging, HBUS reopened that account. 

Here is what you wrote: “I am happy to be the relationship man- 
ager if this is an account worth chasing. How much money can you 
expect to make from this name?” 

And then when you were told the account would produce about 
$75,000 in revenues per year, you wrote: “One, the money is there, 
and we should go for this account. Two, I will jump in and wear 
the [global relationship manager] hat.” 

So your test, apparently, for opening an account was, first, how 
much revenue it would produce, but what about the second test, 
Mr. Lok? What about a test is the bank involved in wrongdoing, 
whether it is terrorist financing, corruption, or malfeasance? Why 


^ See Exhibit No. 84b, which appears in the Appendix on page 964. 
2 See Exhibit No. 84a, which appears in the Appendix on page 958. 
^See Exhibit No. 82, which appears in the Appendix on page 949. 
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weren’t those factors enough for you to say we are not going to do 
it? 

Mr. Lok. Mr. Chairman, let me try to explain what had hap- 
pened. Exhibit 84b, 1 that was about classifying that particular cli- 
ent in China as a SCC. The thinking was China is a different coun- 
try from a lot of other countries. It has its own characteristics. And 
this bank actually shared the same characteristics of the other big 
banks as well. So it is not one just on this particular bank. So my 
point at that time was if FIG, which is a unit within Compliance, 
wants to say that this should be SCC, that means the other banks 
should also be subject to the same rating. 

Senator Levin. Well, why not all banks that, in your words, 
where corruption is rampant? Why shouldn’t they all be subject to 
that rating? 

Mr. Lok. First of all, I have to apologize the colorful words I used 
that. It was not the appropriate 

Senator Levin. Apologize to whom? 

Mr. Lok. Well, that email give the impression that I was very 
tolerant of this malfeasance. That is why I said that the word itself 
is not the right word to use. 

Senator Levin. I am afraid it was the right word to use if you 
believed it. Corruption was rampant at that bank. Did you believe 
it was rampant? 

Mr. Lok. Well, it is a very large organization. I think just like 
other organizations, when you have such a large bank, yes, there 
are bound to be cases of malfeasance. 

Senator Levin. You did not really mean what you said, that it 
was rampant? Is that what you are saying? At the time you wrote 
it was rampant and that it was not unique to that bank. So were 
you inaccurate in your email? Did you express what you believed 
at the time? 

Mr. Lok. At that time, yes, but I need to qualify that statement, 
which is the email came forward, I was overwhelmed by this feel- 
ing that if this bank were to have been SCC, that means the other 
banks need to be SCC. And at that time China was a country that 
the group itself looked at as a very important market. So I wanted 
to elevate the issue. That is why I copied my colleagues in London, 
bring in Group Compliance, take a look at this. That was what I 
was trying to do at that time. 

Senator Levin. What about your Exhibit 84a? ^ Here you are rec- 
ommending you proceed despite the fact that the compliance officer 
for banknotes, Daniel Jack, described this as a government-owned 
bank in a high-risk country with politically exposed persons that 
require enhanced due diligence and a reputational risk — that is to 
you, to your bank — due to corruption. And your recommendation 
was go ahead anyway. “It is a large bank. Hence” — your word — 
“malfeasance is expected. I do not agree,” you said, “that just on 
these numerous breaches the bank should be classified” — in other 
words, given enhanced review. 

Did that reflect your view at the time? Did you believe what you 
wrote at that time? 


1 See Exhibit No. 84b, which appears in the Appendix on page 964. 

2 See Exhibit No. 84a, which appears in the Appendix on page 958. 
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Mr. Lok. At that moment, yes. 

Senator Levin. OK. What about this Bangladeshi bank? When 
you said — all you seemed to be interested in is how much money 
will it make for us, how much money can we expect. Then $75,000 
in revenues. And then you say, “We ought to go for it.” You will 
be happy to wear the hat, the global relationship hat. 

You are head of the Banknotes Department, and when your em- 
ployees see those kinds of remarks in your emails from their boss, 
what kind of an impact do you think it has on their willingness to 
consider compliance issues when deciding whether to open an ac- 
count for a potentially lucrative but a high-risk client? What do you 
think the effect of those words are on your employees? 

Mr. Lok. Mr. Chairman, I agree that this is not portraying a 
right image, not giving the right message, looking at the message 
right now. 

Senator Levin. Senator Coburn. 

Senator Coburn. Just for the record, the email that Mr. Lok sent 
did not say it was rampant. It actually said “can be rampant.” And 
some of the realism of the world we live in in global commerce, if 
you take this particular bank — and this is not a defense, but if you 
look at their own bank in Mexico, I would tell you it looked like 
it could be rampant there as well. And I think that Mr. Thurston 
certainly found that, that corruption could be rampant in that. 

I think we have a better understanding, Mr. Chairman, of what 
went on. Someone taught me a long time ago that greed tends to 
conquer all technologic difficulties, and so we are about anti-money 
laundering. That is what this hearing is about. And it is not the 
accusation of illegality. It is the accusation of poor judgment and 
mistakes and not good line authority inside a very large and very 
successful organization. 

I would just say, one, I appreciate the candor of the witnesses 
today. It is a very difficult issue. I am still concerned even though 
Deloitte said there are 79 accounts they could not account for in 
terms of U-turns. I still think it is a difficult issue when the world 
is dealing with a terrorist state like Iran and we are allowing them 
the flexibility. So my hope is that we can learn some things, and 
I know HSBC certainly has, and I appreciate our witnesses’ testi- 
mony. 

Senator Levin. Thank you. Senator Coburn. I think I read the 
email correctly. I will read it again. ‘Yes, corruption can be ramp- 
ant in this bank, but it is not unique to” the bank.” And so I think 
it speaks for itself. If I at one point said that he said it is rampant 
instead of, “Yes, it can be rampant” and “it is not unique,” then 
your quote is exactly right, and the one I just read I think is also 
exactly right. But there is not much difference between “it can be 
rampant” and “it is not unique” to what the point was of this ques- 
tion and Mr. Lok’s answer. 

[Pause.] 

Senator Levin. We thank our witnesses, and, again, we appre- 
ciate the cooperation with this investigation of your bank. 

We are going to recess now until 2 o’clock. We thank our wit- 
nesses, and you are discharged. 

[Whereupon, at 12:34 p.m., the Subcommittee was recessed, to 
reconvene at 2 p.m., this same day.] 
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Senator Levin. The Subcommittee will now come back to order. 

I would like to call our third panel of witnesses for this hearing, 
Irene Dorner, the President and Chief Executive Officer of HSBC 
Bank USA and HSBC North America Holdings in New York; and 
Stuart Levey, the Chief Legal Officer of HSBC Holdings in London. 

We welcome you both. We appreciate both of you being with us 
this morning. We look forward to your testimony, and we also want 
to tell you that we appreciate the cooperation of your bank. It has 
been consistently cooperative with us and we are grateful for that. 

Pursuant to Rule VI, all witnesses who testify before the Sub- 
committee are required to be sworn, so I would ask you both to 
please stand and raise your right hand. 

Do you swear that the testimony you will give before this Sub- 
committee will be the truth, the whole truth, and nothing but the 
truth, so help you, God? 

Ms. Dorner. I do. 

Mr. Levey. I do. 

Senator Levin. The timing system that we have will give you a 
red light after 5 minutes, but a minute before that it will shift from 
green to yellow to give you an opportunity to conclude your re- 
marks. Your entire written testimony will be printed in the record. 
And we would, again, appreciate that you attempt to limit your 
oral testimony to 5 minutes each. 

Ms. Dorner, we will have you go first, followed by Mr. Levey, and 
then we will proceed to questions. But first, let me turn to Senator 
Coburn. 

Senator Coburn. Thank you. I privately greeted our witnesses 
and I would apologize. This afternoon, I will be in and out, but I 
will be here to ask my share of the questions. So if you are in the 
midst of your testimony and I leave, please forgive me. 

Senator Levin. Thank you very much. Senator Coburn. Ms. 
Dorner. 

TESTIMONY OF IRENE DORNER, i PRESIDENT AND CHIEF EX- 
ECUTIVE OFFICER, HSBC BANK USA AND HSBC NORTH 

AMERICA HOLDINGS, INC., NEW YORK, NEW YORK 

Ms. Dorner. Thank you. Chairman Levin and Senator Coburn. 
My name is Irene Dorner and I serve as President and CEO of 
HSBC Bank USA and HSBC North America Holdings, Inc. I have 
led the bank in the United States since January 2010. 

I fully appreciate why we are here and believe that the discus- 
sion about controls at global banks is an important one to have. We 
deeply regret and apologize for the fact that HSBC did not live up 
to our own expectations, the expectations of our regulators, our cus- 
tomers, our employees, and the general public. 

HSBC’s compliance history as examined today is unacceptable. 
HSBC has learned some very hard lessons from the experience of 
the past few years, but we have taken very substantial steps to ad- 
dress the problems that we, our regulators, and this Subcommittee 
have identified. We have made fundamental changes in govern- 
ance, culture, training, and funding to ensure that we can effec- 
tively deter illicit use of our bank in a manner that will be embed- 


^The prepared statement of Ms. Dorner appears in the Appendix on page 130. 
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ded and sustained going forward. The process is ongoing and re- 
quires vigilance. 

As you know, these issues and challenges do not end at the 
water’s edge, so we are combining our efforts with reforms that 
apply throughout HSBC’s global businesses, and I am joined today 
by our new Chief Legal Officer, Stuart Levey, who is here on behalf 
of the HSBC group, and who will describe HSBC’s global compli- 
ance commitment. 

Given my experience working for HSBC in other parts of the 
world, I am cognizant of the risks and obligations that come with 
serving our customers who have a need for global banking services, 
and at an absolute minimum, we must have the proper controls 
and systems in place to ensure that we are doing the right business 
in the right places with the right customers and that our cus- 
tomers’ transactions are properly monitored. If, for any reason, a 
transaction appears to be unlawful or suspicious, then we scruti- 
nize the customer and report this information to the authorities in 
a timely manner. 

As the Subcommittee has documented, we have fallen short in a 
number of serious ways. In October 2010, the U.S. bank entered 
into a consent order with the OCC. With the full support of our 
board and of the HSBC group, I took the lead in overseeing our re- 
mediation efforts and we have taken significant steps. 

First, we have worked hard to foster a new culture that values 
and rewards effective compliance and that starts at the top. By the 
end of 2010, we had a new U.S. senior management team in place. 
We overhauled our AML compliance function, improving the qual- 
ity, coverage, and strength of our AML program through additional 
staffing and training. We have increased spending in AML compli- 
ance nine-fold from 2009 to 2011. And today, we have 892 full-time 
AML compliance professionals. 

Second, we have undertaken an enterprise-wide risk assessment 
and have exited customer relationships and businesses that do not 
represent acceptable manageable risks. This is an ongoing process 
and we continue to do a formal risk assessment twice a year. 

Third, we have made changes to our “know your customer” poli- 
cies because proper KYC must be robust to be effective. We must 
know a significant amount about our customers to be satisfied that 
we want their business. Our new KYC policy delivers a critical look 
at each customer, including our own HSBC affiliates. We have also 
implemented a new customer risk rating methodology which takes 
a holistic view of customer risk. I chair the project to apply our new 
KYC standards to our entire customer base. Many of the changes 
we are making are being adopted as HSBC Global best practices. 

And finally, we have made significant investments in technology 
and we have built better controls around our automated monitoring 
system, although we recognize that there is more to be done. The 
intended consequence of these changes is to embed a new culture 
of responsibility, accountability, and deterrence within our U.S. 
bank. It has been my mission and the mission of my new senior 
team to make sure that compliance is on every employee’s mind at 
every level in the organization. 

In closing, let me say that I do appreciate this Subcommittee’s 
efforts to examine and improve the steps taken by industry and 
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government to address these challenges and the recommendations 
you have made. We are committed to fulfilling our responsibilities 
in an effective and sustained manner. 

Thank you, and I am happy to address any questions. 

Senator Levin. Thank you very much, Ms. Dorner. Now, Mr. 
Levey. 

TESTIMONY OF STUART A. LEVEY, i CHIEF LEGAL OFFICER, 
HSBC HOLDINGS PLC, LONDON, ENGLAND 

Mr. Levey. Thank you, Mr. Chairman and Senator Coburn. My 
name is Stuart Levey. I am the Chief Legal Officer of HSBC, a po- 
sition I have held for the past 6 months. I am pleased to be here 
at the Subcommittee’s request to participate in today’s hearing, 
and I would also like to express the appreciation to the Sub- 
committee staff for its hard work and professionalism. 

Some of the information discussed earlier today and in the Sub- 
committee’s report is sobering. It highlights serious historical prob- 
lems at HSBC, and we have not shied away from that. In fact, we 
have gone to great lengths to cooperate, not only to be helpful to 
you, but to help us diagnose the problems and identify solutions. 
We obviously have a great deal of work to do. 

I know from experience that it is critically important to our safe- 
ty and security to stop illicit actors from gaining access to the fi- 
nancial system. At HSBC, we must do everything in our power to 
prevent that access through our bank and we embrace that respon- 
sibility. That is why we are taking action not only to address the 
specific deficiencies the Subcommittee identified, but also to imple- 
ment a global strategy to tackle their root causes. This is a complex 
undertaking, given the scale of our institution and our multi- 
national footprint. But if we get this right, it will make a dif- 
ference. 

At the beginning of 2011, there was a transition at HSBC to a 
new CEO, Stuart Gulliver, and our new Chairman, Douglas Flint. 
Our new leadership team understands these challenges and they 
approached me to join them to help drive the necessary changes. 
My views on these issues were public and well known and HSBC’s 
leadership wanted me to bring my experience and commitment to 
bear on their challenges. 

I would like to outline for you the path that we are on. First, be- 
ginning in January 2011, we have reorganized HSBC around four 
global businesses and 10 global functions. This means for the first 
time that the global head of a function, like myself, has authority 
over the operations and personnel of that function wherever we op- 
erate. This makes it easier to manage our risk globally. The histor- 
ical decentralized corporate structure that concentrated authority 
on country heads has been replaced. 

Second, we have simplified our business model to make HSBC 
easier to manage. We are reducing our footprint and product lines. 
We have focused on selling and exiting non-core businesses, such 
as our global banknotes business. Over the past 18 months, we 
have sold or exited 31 businesses and are already withdrawing 
from nine countries. 


^The prepared statement of Mr. Levey appears in the Appendix on page 137. 
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Third, we have elevated and strengthened the role of group com- 
pliance so it is now in power to set standards across the organiza- 
tion and has the necessary authority to ensure that those stand- 
ards are enforced. Our new Chief Risk Officer, Marc Moses, is also 
providing fresh leadership in this area. 

Fourth, on April 30 of this year, our CEO issued a directive to 
the entire bank requiring adoption of high uniform standards 
across the firm. We are adopting a highest common denominator 
approach, applying everywhere the highest standard that we must 
apply anywhere. That will most often mean that we will be apply- 
ing U.S. standards globally. This means that instead of the United 
States taking on risk from abroad, as you discussed in your open- 
ing statement, Mr. Chairman, instead, high U.S. standards will be 
exported globally, thereby promoting the integrity of the financial 
system. 

Among other things, that directive, or group circular letter, also 
requires that we maximize information sharing for risk manage- 
ment purposes and that we apply a globally consistent approach to 
knowing and retaining our customers. The CEO has also directed 
the Chief Risk Officer and me to co-chair a steering committee, on 
which Ms. Dorner also sits, to drive implementation of this new ap- 
proach. 

We have already begun our work. For example, we adopted a 
new global sanctions policy. We ordered global application of the 
obligation to conduct affiliate due diligence. And we adopted a new 
risk filter to reduce and better control the business we do in any 
high-risk country where we operate. This is the process under 
which we decided to close the Mexican Cayman accounts that were 
discussed this morning. 

This is the beginning of the journey and we have a long way to 
go, and we agree with you, as you say in your report, that the bur- 
den of proof is on HSBC to demonstrate progress on these reforms. 

In addition, in 2011, our CEO introduced a new values program 
under which all senior executives are evaluated on whether they 
adhere to the bank’s core values, including respect for compliance. 

In the end, sustainability of these reforms depends critically on 
the commitment of HSBC’s top leadership. I have confidence be- 
cause I know our board and senior leadership are committed to see- 
ing these reforms through. We understand that this is something 
that absolutely must be done for the long-term success of the bank. 

I appreciate the opportunity to speak to you today and I look for- 
ward to answering your questions. 

Senator Levin. Thank you very much, Mr. Levey. 

Let me start. We will have, I think, a 10-minute round. 

Senator Coburn. You may go 20 minutes. 

Senator Levin. OK. In 2003, HBUS was the subject of a formal 
enforcement order by its regulators at the time, the Federal Re- 
serve of New York and the New York State Banking Department, 
and it required the bank to revise and revamp its AML program 
due to some very serious deficiencies. HBUS made a commitment 
at that time to correct the problems. And after 3 years, in 2006, 
the Office of the Comptroller of the Currency (OCC), lifted the en- 
forcement action despite a host of unresolved issues. 
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Four years later, in 2010, the bank was right back in the soup, 
the subject of another enforcement action by its regulator, this time 
the OCC, requiring the bank to revamp its AML program due to 
severe deficiencies. And many of those were similar to the problems 
that had been identified in 2003, including many violations of Fed- 
eral AML law, a backlog of over 17,000 un-reviewed alerts regard- 
ing possible suspicious activity, failure to conduct any anti-money 
laundering monitoring of $60 trillion annually in wire transfer ac- 
tivity by customers domiciled in countries rated by HBUS as lower 
risk, and failure to conduct any due diligence of HSBC affiliates. 

Now, on April 30 of this year, the HSBC group, as you have testi- 
fied, issued a new group-wide policy that applies to all of its affili- 
ates around the world, and that is Exhibit 2b. ^ Now, this group cir- 
cular letter requires all HSBC affiliates to meet the most stringent 
standards anywhere in the group, and it states that, “The bank 
and its affiliates will adopt and enforce the adherence to a single 
standard globally that is determined by the highest standard that 
we must apply anywhere. Often, this will mean adhering globally 
to U.S. regulatory standards. But to the extent another jurisdiction 
requires higher standards, then that jurisdiction’s requirements 
must shape our global standard.” 

That new policy statement could be a groundbreaking commit- 
ment that will force the entire HSBC network to improve, and I 
hope it does. I understand, Mr. Levey, that you are co-chairing a 
committee — ^you have just testified about that — aimed at imple- 
menting the new group circular letter. 

But here is what HSBC said in 1993. “Group members should 
comply with both the letter and spirit of all relevant laws, codes, 
rules, regulations, and standards of good market practice in each 
jurisdiction around the world where they conduct business.” 

The 2012 and the 1993 compliance policy statement have good 
sentiments and they sound very similar in a lot of regards. They 
promise the bank will adhere to high standards, and as I have said 
before, commitments and promises are welcome. But accountability 
for previous failures and conduct that has already taken place is 
essential as a deterrent, and it is that accountability that has been 
missing. 

My first question is the following, and either one of you can an- 
swer. Let me try you first, Ms. Dorner. Do you agree that given 
past commitments that have not been kept that the bank has a 
heavy burden of proof that they mean what they say, or you mean 
what you say, both as to changing behavior and as to changing the 
culture? 

Ms. Dorner. Thank you, Mr. Chairman. I can entirely under- 
stand these concerns. It is quite clear that we have had failures in 
the past, which we deeply regret, and I would agree that we have 
some way to go to regain the trust of our regulators and of your- 
selves on this Subcommittee. 

Senator Levin. Thank you. 

Exhibit 7 Id 2 is a chart which was prepared by an outside audi- 
tor at HBUS’s request. It lists accounts that are held by HSBC af- 


^See Exhibit No. 2b, which appears in the Appendix on page 583. 

2 See Exhibit No. 7 Id, which appears in the Appendix on page 923. 
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filiates in the United Kingdom and Hong Kong for banks in rogue 
regimes subject to U.S. sanctions, such as Iran, Iraq, North Korea, 
and Sudan, a total of 55 suspect banks with IJ.S. dollar accounts 
made possible by the HSBC affiliates’ correspondent accounts at 
HBUS. 

Basically, how could HSBC affiliates accept such clients and do 
you know whether HSBC told HBUS that it was servicing these 
type of clients? 

Ms. Dorner. Mr. Chairman, clearly, this predates my tenure of 
being in the United States and so I cannot comment specifically on 
this. I can tell you now that HBUS does not hold accounts for any 
of these names. 

Senator Levin. Thank you. 

One of the accounts that was in an HSBC affiliate is a U.S. dol- 
lar account for an Afghan bank on the SDN list from October of 
1999 through February 2002. It was on the SDN list because of its 
ties to the Taliban. It is incredible to me that an affiliate of HSBC, 
an affiliate which is located in the United Kingdom, could even 
consider owning an account for a Taliban-affiliated organization 
and continue the relationship after the September 11, 2001 attack. 

Now, there is another extraordinary example here, as well, and 
that is Exhibit 50d.^ That is an exchange of emails in 2008 be- 
tween HSBC employees in the U.S. and the Cayman Islands. An 
AML compliance officer at HBUS received an inquiry from OF AC 
regarding a trust account in the HSBC Cayman affiliate which was 
administered by HSBC Geneva and which had been established to 
benefit a well-known international terrorist named Rami Makhlouf 
He is from Syria. The exchange is stunning, if you will take a look 
at this one. 

The Internal Control Officer for Compliance in the Cayman Is- 
lands admits that the trust for Makhlouf exists and the Cayman 
affiliate is the trustee. In a subsequent email, she informs the 
HBUS AML officer that a year earlier, in 2007, concerns about this 
client were raised and the relationship was viewed at the group 
level, which decided to maintain it. In other words, people at HSBC 
headquarters made a conscious, knowing decision to maintain the 
account for the benefit of an international terrorist. 

So how is it that HSBC Geneva or its Cayman affiliate, or any 
affiliate in the HSBC system, could have maintained a trust bene- 
fitting a terrorist or gotten permission from group headquarters to 
service such an individual, and if you wish to comment, as well, on 
that account that was being held for a Taliban-affiliated organiza- 
tion, you can do so at the same time. Ms. Dorner. 

Ms. Dorner. Mr. Chairman, I am afraid I am not able to assist 
you on the account for Mr. Makhlouf because he is not a customer 
of HBUS and I am not acquainted with this chain of events. 

Senator Levin. Could you become acquainted and then give us 
your comment for the record? 

Ms. Dorner. I can look at the chain of emails, yes. 

Senator Levin. Will you do that? 

Ms. Dorner. I can do that. 

Senator Levin. OK. Mr. Levey, do you have a comment? 


^ See Exhibit No. 50d, which appears in the Appendix on page 823. 
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Mr. Levey. Naturally, this is long before my tenure. I do know 
who this individual is. He is someone that we designated when I 
was in the government. He was designated in 2008, I am pretty 
sure, under the sanctions program by the United States. I do not 
think this is the kind of thing that we need to change. I do think 
this is the kind of thing that we need to change. 

Senator Levin. You made reference to your service with the U.S. 
Government. If I remember, you were the Under Secretary of the 
Treasury for Terrorism and Financial Intelligence. Do I have it 
right? 

Mr. Levey. Yes, sir. 

Senator Levin. How would you have reacted if you knew that 
HSBC was engaged in such a practice and that an HSBC affiliate 
knew of the HSBC account and did not report it? 

Mr. Levey. I think that would be unacceptable. 

Senator Levin. Would it not be even stunningly unacceptable? I 
mean, a lot of things are unacceptable. But on degrees of 
unacceptability, is this not kind of shocking? 

Mr. Levey. I am not going to quarrel with you. Senator. Of 
course, this is exactly the kind of thing, I should say, that we are 
trying to change, where we are trying to make important compli- 
ance information mandatorily shared to compliance officers around 
the world. This would be the kind of thing that would, in my view, 
fall into that category. 

Senator Levin. Senator Coburn. 

Senator Coburn. Thank you. 

Ms. Dorner, as I understand from the report, you arrived to run 
the U.S. affiliate or the U.S. organization in 2010 and were handed 
a pretty good sized mess. But why, irrespective of these challenges, 
does HSBC choose to have a presence in the United States in the 
first place? I mean, what is the value to HSBC? You are in all 
these countries. You are worldwide. What is the value? Why are 
you here? 

Ms. Dorner. Senator, that is a great question. This is a terrific 
place to do business. There are more than 10,000 U.S. head- 
quarters of international companies based here in the United 
States. We, as an international bank, it is our business to help our 
customers realize their aspirations. And so we have many United 
States companies who want to grow internationally and they use 
us and we help them to do that. We connect them with inter- 
national business. 

And then there is incoming business, and, of course, as you 
know, we do have businesses in other parts of the world, and I am 
thinking particularly here of Asia and emerging markets, where 
many companies wish to do business and wish to invest in the 
United States. And it is the role of HSBC as an international bank 
to facilitate that. The United States is the biggest trading Nation 
in the world. It is a massive opportunity. 

Senator Coburn. So given the mess you have had and what you 
have seen, the consequences, both financial and from a business 
standpoint, as a result of the consent order with OCC, would you 
outline what the impacts have been on your organization, the latest 
consent order? 
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Ms. Dorner. The latest consent order has had a massive impact. 
Clearly, it happened just after I arrived, and I can tell you that 
what we have done is that we have changed the senior manage- 
ment here in the United States. We have changed our General 
Counsel. We have changed our Head of Compliance. We changed 
our AML Director. We have had a top-to-bottom overhaul of the 
way that we actually do AML compliance. We are burning the 
bridges to make sure nobody can get back to the way it was before. 
We have new governance in place. We have new structures. We 
have new policies. 

But actually, the processes and the policies are never enough. 
This is actually about the people. And so it is my job to make sure 
that the right way down the whole organization, the DNA of 
HBUS, we actually get compliance on the front foot in everybody’s 
mind. 

And in terms of fixing it, that is what CEOs do. I am clearly ab- 
solutely committed to fixing this. But the reality is, the change that 
will take place and is taking place is that this has to be fixed for 
the future. This has got to be BAU. So business as usual is not just 
about fixing the consent order. It is driving this through into the 
future as a full-scale remediation that will last. 

Senator Coburn. So you put all these steps forward and all these 
changes, but the real thing that you have to change is the culture. 

Ms. Dorner. That is correct. Senator. 

Senator Coburn. So how are you doing that? I mean, you have 
outlined the steps, but where is the leadership that is going to 
change the culture? Where is the example so far since you have 
been there changing the culture? When somebody has violated 
some of these policies, what has been the consequence? The only 
way you change a culture is if everybody in the organization sees 
when you violate the core values of the institution that there is a 
consequence. 

Ms. Dorner. Senator, I can tell you unequivocally since I have 
been here that I have fired people for not complying, that I have 
clawed back in terms of future remuneration, and I have reduced 
compensation. Of course, that is the negative side of things. Equal- 
ly, we have celebrated success. We have examples of compliance of- 
ficers who have been put onto our Internet to show people that this 
is where it is at that they should be looking at, these kind of stand- 
ards to drive the way that we do business. It is quite clear that we 
need to make further changes. There is never enough done. We can 
always improve. But this has got to be on everybody’s lips, from top 
to bottom of the organization. 

And I would just say that one of the big changes that has helped 
me in this is that this group has changed in terms of how it wishes 
compliance to be viewed, and compliance now has a control func- 
tion role within the whole group. And so I am totally supported by 
the HSBC group in this and by the HSBC group’s senior manage- 
ment. 

Senator Coburn. OK. I just have one more question for you. You 
mentioned the changes you made to “Know Your Customer” poli- 
cies have enabled you to make better decisions about whether a 
customer fits your risk appetite. Would you describe what your risk 
appetite is at HSBC or HBUS? 
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Ms. Dorner. I can do that. I think that the thing about risk is 
it has to be taken at the highest level. You are trying to find the 
right customer, and so it is about understanding customers’ busi- 
ness, where they do business, why they do business, and what they 
want to do with us. And, therefore, when you put a KYC process 
in place, those are the things that you are looking for throughout, 
and not only are we looking for that in our future customers, we 
are actually remediating the existing customer base we have to 
make sure that the customers that we already have fit within the 
risk appetite that we have. And I can tell you now that we have 
exited, as a result of rolling out this remediation, in the order of 
14,000 customers because they simply did not fit our risk appetite. 

Senator Coburn. OK. Thank you. 

Mr. Levey, this was a 300,000 person organization. You have an 
impressive resume, but there is just one of you. And you have en- 
tered into an organization that has an admittedly poor record and 
presumably a poor culture for compliance to match that poor 
record. When you leave here today and resume business as usual, 
go back, what is going to be the impact of a hearing like this or 
a meeting with the government like this in terms of how it affects 
the bank, the bank operations, the structure, and the culture? 

Mr. Levey. Well, Senator, I can assure you that the top leader- 
ship of this company is very focused on your report, on this hear- 
ing, on all the information that has been developed in the course 
of this investigation. In fact, it was not just when the report was 
issued or we were coming to testify today that there was engage- 
ment from the top. As I said, the change began when the new CEO 
took office at the beginning of 2011 and they reached out to me 
soon thereafter to ask if I would come and help drive the change 
that they were pursuing. 

I believe that the culture and the tone at the top is excellent. We 
have risk management meetings where the top executives of the 
firm sit around the table and we share the information in ways 
that apparently did not happen as robustly before and make the 
kinds of decisions that are necessary for controlling these sorts of 
risks. 

I believe that this whole experience is one in which, as our CEO 
has said, we are going to be judged by how we respond to this sort 
of adversity, and he is absolutely committed to getting this right — 
in large part, because we think it is critical to our success. If we 
are going to be a successful, the leading international bank, which 
is our aspiration, we have to be successful at this. We have to lead 
in this area, as well. 

Senator Coburn. Is there a conflict within your board to — I am 
trying to think of the best way to phrase this — compliance here 
does not necessarily have to be difficult, but it has to be right, and 
there are some variables that affect that. How well do the regu- 
lators do? Are they fair? But are they trying to do the right thing, 
not just be right? Is there a conflict or tension between the poten- 
tial, as Ms. Dorner outlined, of being a global bank with a large 
number of multinational countries here, and the cost of compliance, 
because I actually see that is where things really went awry. How 
do you manage that tension so that when they are looking — if this 
is a great business opportunity for HSBC, is this too much of a 
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compliance hurdle or cost given the potential capital appreciation 
opportunities for your organization? 

Mr. Levey. Senator, I do not believe we view this as a tension 
or a tough call. We are going to have to get this right, whatever 
it takes to get this compliance in order. I do not think there is any 
ambivalence about that on our board. And we view it as our re- 
sponsibility — quite aside from the regulators, candidly — it is our re- 
sponsibility to get this right and we appreciate the help we have 
had from the Subcommittee and the recommendations, but we 
have — it is our responsibility to look at those and improve and also 
identify the improvements ourselves that we need to make. 

Senator Coburn. With the changes that Ms. Dorner has put in 
and with your expertise, is it your opinion that not only will you 
be better in terms of compliance, but you will be a better organiza- 
tion and a more profitable organization as a result of it? 

Mr. Levey. I agree with that entirely. Senator. I think that there 
is no conflict in the long run between those two things. Being com- 
pliant, having the right controls in place, is in our long-term finan- 
cial interest. 

Senator Coburn. Thank you, Mr. Chairman. 

Senator Levin. I want to go back just for a moment to that situa- 
tion with the Syrian terrorist. There was an inquiry from OFAC. 
We want to start with that. It was an inquiry regarding a trust ac- 
count in the HSBC Cayman affiliate that was administered by 
HSBC Geneva. What happened then is that an AML officer at 
HBUS — and this, again, is Exhibit 50d ^ — an AML officer at HBUS 
wrote the following, “that we have determined that accounts held 
in HSBC Cayman are not in the jurisdiction of and are not housed 
on any systems in the United States. Therefore, we will not be re- 
porting this match to OFAC.” 

So HBUS knew the account existed, knew that there had been 
a request about this account from OFAC, knew that an HSBC affil- 
iate maintained it, but was not going to get that information to 
OFAC based on this jurisdictional line. In effect, what the AML of- 
ficial decided to do is to use the affiliates’ separate entity status as 
a reason to not report a Syrian terrorist’s HSBC account to OFAC. 

So we have HSBC crossing international lines to establish and 
service the trust, to protect its assets, and to facilitate Makhlouf s 
transactions. And this is 2008, by the way. And yet they rely on 
that technicality not to report the information to OFAC. 

And so my question to you folks is, if this same thing happened 
today, would you get that information to OFAC? 

Mr. Levey. Mr. Chairman, I am — obviously, this is, again, sev- 
eral years before I arrived. I do not know the details of what hap- 
pened here. What I can tell you is that one thing we have done 
that would handle this kind of situation is that we have now adopt- 
ed a global sanctions policy so that anyone who is designated by 
OFAC will be — we will search across the entire bank in all jurisdic- 
tions and all currencies to ensure that we catch all those situations 
and either freeze accounts if we are permitted to, because in 
some — if it is a U.S.-only designation, we may not be able to freeze 


^ See Exhibit No. 50d, which appears in the Appendix on page 823. 
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the account — or exit or reject transactions. I am not in a position 
to go into the details of transaction. 

Senator Levin. Well, I think you have answered the question, 
without going into details. You are saying that, first of all, every 
affiliate is going to apply the same catch mechanism. So, presum- 
ably, they would have caught this. 

Mr. Levey. Yes. What I do not know 

Senator Levin. If it would have been caught by HBUS, it would 
have been caught by Cayman. 

Mr. Levey, feght. 

Senator Levin. Right? OK. Presumably. 

Mr. Levey. Presumably, yes. 

Senator Levin. It should be. 

Mr. Levey. What I do not know is when Rami Makhlouf was ac- 
tually designated. I do not have the date in my head. 

Senator Levin. Well, putting aside that, the question is, presum- 
ably, it will be caught by the same mechanism being applied in 
every one of your banks, wherever they are located. My question, 
though, is if for some reason it fails and if one bank knows that 
information is being sought by OFAC, will it make sure that the 
information is provided? 

Mr. Levey. Again, my view on this would be that we would give 
to any government as much information as we are legally per- 
mitted to do when we had a valid request. So I cannot tell you 
whether there will be some legal restriction, but we would do ev- 
erything we could to get them the information. 

Senator Levin. Well, when you say what you are legally per- 
mitted to do, were you legally permitted by the Caymans, by their 
law, to provide this? Do you know. Cayman law will not allow this. 
They are a secrecy jurisdiction. 

Mr. Levey. I do not know. Senator. 

Senator Levin. Well, but you need to find out. 

Mr. Levey. Will I find out? 

Senator Levin. Are you going to be bound by a secrecy jurisdic- 
tion’s law that says you cannot share that information, or are you 
going to be carrying out your commitment here that you are going 
to treat all of your affiliates as though they are in one place glob- 
ally and you are going to respond to law enforcement with their re- 
quest? I mean, if you are going to say, if legally permitted by the 
Caymans or by any other country, you have tax havens, and so 
forth with secrecy jurisdictions. Caymans being one of them. Are 
you bound by that? Are you going to work with law enforcement 
or are you going to be bound by Caymans? 

Mr. Levey. We are going to do everything we can to cooperate 
with law enforcement. 

Senator Levin. Well, you say, though, that if it is legally per- 
mitted. That is your hedge word. U.S. law binds you to report to 
OFAC. What are you going to do, live up to Cayman law or U.S. 
law? 

Mr. Levey. I do not know if there would be a conflict there. 

Senator Levin. There is. Assume there is. 

Mr. Levey. If there is, we do everything we can to get it to 
OFAC. 

Senator Levin. To comply with U.S. law? 
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Mr. Levey. Yes. 

Senator Levin. Now, sharing information across international 
lines is not just an ancient problem at HSBC, it is still a current 
problem, and I am going to give you what has happened recently 
involving this Subcommittee. In 2010, in a hearing before this Sub- 
committee, we reviewed an incident in which an HSBC affiliate in 
the Bahamas was asked to open an account for the Central Bank 
of Angola. Email exchanges obtained by the Subcommittee made it 
clear at that time that the Angolan Central Bank wanted to use 
an offshore secrecy jurisdiction — that is the Bahamas — to hold its 
funds in order to avoid court orders that might lead to a freezing 
of its funds. At the 2010 Subcommittee hearing, I asked HSBC if 
the account was ever opened, and not surprisingly, HSBC refused 
to answer, citing jurisdictional constraints. 

Last week, HSBC informed us that the account had been opened 
and was opened at the time of our 2010 hearing, but that it was 
closed 45 days ago. HSBC also revealed that the only reason it 
could provide that information to the Subcommittee was because 
HSBC had received permission from the Central Bank of Angola. 
HSBC Bahamas could not release it to HBUS without the client’s 
permission, so that is the problem with what you are telling us 
today. It is the problem with HSBC’s word, the subject of being le- 
gally permitted, that description, which is a real big loophole, and 
it is a problem with other international banks. 

The international banking system established a financial system 
that enables them to facilitate financial transactions and move 
around the globe across jurisdictional lines in a matter of seconds, 
but when it comes time to sharing critical information with U.S. 
authorities about clients and their accounts and transactions, then 
things begin to grind to a halt and banks point to jurisdictional 
rules and local laws, sometimes using that argument disingen- 
uously. But putting that aside, that is the reason given by HSBC 
not to share that information. 

Now, in the most recent group-wide policy, your GCL, on April 
30, you say that you will “maximize the sharing of information for 
risk management purposes amongst group companies and amongst 
global businesses and functions.” You have noted that HSBC is 
going to maximize the sharing of information to “the extent per- 
mitted by laws.” And that, again, is the rub. 

What policies are you going to enact or implement to ensure that 
you provide law enforcement and governmental officials in this 
country which has given HBUS a charter — rather than using juris- 
dictional constraints as the excuse to avoid sharing information, 
what are you going to do with your new rules and regulations to 
make sure that this government and the proper authorities are 
given information upon request? 

Mr. Levey. Mr. Chairman, as you indicate, we have committed 
within the company in the GCL to maximize the sharing of infor- 
mation for risk management purposes among our companies and 
functions. We have decided that is the value that we are going to 
pursue, which is that we need to share information. I think your 
report highlights the serious consequences that occur when we do 
not. 
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We have also decided through this policy that when there is — we 
are going to do everything we can to share information across bor- 
ders. We have found, as you indicated in your question, that some- 
times the secrecy jurisdiction was being used as a comfort, in a 
way. Well, no, we cannot share the information because of the ju- 
risdictional rules. 

It is my job as the Chief Legal Officer to look at that, right, and 
to try to work that out and make sure that we are not using it as 
an excuse. But in the end, of course, we have to abide by the law 
wherever we operate. That is true of any multinational company. 
All we can commit to do is — whenever there is any discretion, to 
exercise it in favor of sharing information. I do not know that we 
can do more than that or that any multinational organization can 
do more than that. 

Senator Levin. Senator Coburn. 

Senator Coburn. Ms. Dorner, in how many locales does HSBC 
now have operations that have such agreements as the Bahamas? 
In other words, what percentage of HSBC’s locations throughout 
the world are tax havens or isolated places where jurisdictional dif- 
ferences preclude the sharing of information? 

Ms. Dorner. I am sorry. Senator. I cannot actually put a number 
on that for you. 

Senator Coburn. We have seen changes in Liechtenstein, for ex- 
ample, from pressure from this Subcommittee and others, where 
they have actually changed their laws. But could you get that to 
us? 

Ms. Dorner. I am sure that we could. I think it is fair to say 
that all countries have privacy rules of one sort or another. 

Senator Coburn. I understand, but we are talking about those 
countries that have privacy rules intended to not be transparent in 
the commission or the suppression of information that may or may 
not be, in fact, in the best interest of the global economy as a whole 
and may be associated with illicit activity. 

Ms. Dorner. I understand. I am sure we could do that. 

Senator Coburn. Thank you. 

Do you know of any history in your experience where a bank 
charter has been pulled for cross-jurisdictional violations or what 
was perceived as a violation, but what was also perceived as in the 
best interest of your company as a whole or in the best interest of 
transparency in terms of fighting illicit activity? 

Ms. Dorner. I am not aware of any. 

Senator Coburn. OK. Thank you. 

Back to Mr. Levey just for a minute. Do you believe there is suf- 
ficient oversight of the affiliates that make up the group compli- 
ance right now in your organization? 

Mr. Levey. I think we are on the path to getting there. Senator, 
but I do not think I can sit here today and tell you that we are 
at the end of the road. I think we are at the beginning of the jour- 
ney and we do have our work cut out for us, but we are on the 
right path. 

Senator Coburn. As I said, I believe you have the best of inten- 
tions. This is not to question the new management at all, but I 
think some questions need to be asked. Do you know of any affili- 
ates now that are not complying with the set standards? 
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Mr. Levey. Senator, I do not have knowledge of such a thing, but 
I also cannot sit here and tell you I am comfortable with the scope 
of this whole 

Senator Coburn. One further question along that line. If today 
you found out an affiliate that was not in compliance, what are the 
consequences? 

Mr. Levey. The consequence is they would have to improve im- 
mediately, and the new thing, though, is that information would be 
shared with all other affiliates so that Ms. Dorner here in the 
United States would not be blind to it in the ways that we saw in 
the examples in the report. 

Senator Coburn. You have powerful experience in the govern- 
ment and now applying that in the private sector. Do you have a 
recommendation for Senator Levin and I in terms of what we could 
do to make us both more effective, less burdensome, and more effi- 
cient as — even though you stated it is in your own best interest to 
be compliant, the point is, are there ways that we can help do that 
in a more efficient way that gets a better result. 

Mr. Levey. I have to say, that sounds like a dangerous question. 
I did not come here to give you recommendations. 

Senator Coburn. I have a reputation of being a straight shooter. 
I am asking that because I really want to know. I actually like to 
try to fix what is wrong with government rather than pile on an- 
other program that is supposed to do the same thing that is going 
to fail again. So if you would like to think about that and shoot me 
a short note, I would love to hear from you, but that was not meant 
in jest or as a trap 

Mr. Levey. No, I did not intend that. 

Senator Coburn. It is my intent to try to make government 
work, and too often, it does not. Having been on both sides of the 
wall, you have a perspective that not many people have and I think 
you could offer us lots of suggestions on how we might be better 
at what we are doing, much like we have made recommendations 
in our report. 

Mr. Levey. Well, I appreciate that. Senator. Of course, we have 
a lot to do to fix ourselves, but I do think that there are ways in 
which the sharing of information, which is the key here, right? The 
sharing of information is the key to these kinds of controls being 
effective and there are ways to improve that. There are changes 
that can be made in the way governments share information with 
the private sector and in which the private sector shares informa- 
tion amongst itself That is ultimately what needs to be done. If we 
are going to really get these illicit actors, we are going to have to 
have better visibility. But I would be happy to try to follow up. 

Senator Coburn. Thank you. Which would mean you need better 
information from us on illicit conduct. You need a more robust PA- 
TRIOT ACT in the areas of this illicit conduct. And you also need 
access to beneficial ownership information from us. 

Mr. Levey. I agree with all of that. 

Senator Coburn. OK. Thank you. Mr. Chairman, I yield back to 
you. 

Senator Levin. I want to go back to the question about an affil- 
iate that does not share information with you because of a local law 
that says that secrecy is the order of the day. These are the secrecy 
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jurisdiction entities, and Ms. Dorner, I guess you are going to give 
us how many of those jurisdictions there are affiliates in, is that 
correct? You were asked to do that and you are going to give us 
that for the record, I believe. 

Now, you are committed to do a whole bunch of things. You are 
going to police the HSBC affiliates that use your accounts. You are 
going to audit so-called cover payments sent by HSBC affiliates to 
see if they are circumventing the OFAC filter. I think you prepared 
in your new approach to look at affiliates’ internal audit findings 
to look for those with weak AML controls. I think you were just 
asked by Senator Coburn, what are you prepared to do if an affil- 
iate does not provide information to you or to a law enforcement 
entity in a country that you have a charter, the United States. 

I guess one of the ways you could enforce it would be to deny a 
U.S. correspondent account to an affiliate. Do you know whether or 
not that has ever been done? Has HBUS ever said no to an HSBC 
affiliate? 

Ms. Dorner. The direct answer to your question is no, we have 
not. But we now have KYC at a level for all of our affiliates that 
we use for third parties and I can assure you that in the event that 
one of our affiliates did not pass the KYC as it stands now, I would 
have no hesitation in not opening an account or, indeed, closing an 
account. 

Senator Levin. And what about if they do not share information 
with you? That was the question which I believe Senator Coburn 
was asking. Is not one of the remedies you just simply say, we are 
not going to let you have a correspondent account with us? 

Ms. Dorner. The same rules would apply for any third party. If 
we asked for information and did not get it, we would close the ac- 
count. 

Senator Levin. But you will apply that test to an affiliate? 

Ms. Dorner. We would. 

Senator Levin. OK. Talking about secrecy jurisdictions and bene- 
ficial owners, I think you and I talked about this issue before, but 
let me get you on the record in this setting, Mr. Levey, and that 
is should the U.S. Government get the beneficial ownership infor- 
mation for U.S. corporations? 

Mr. Levey. I believe so, Mr. Chairman, and it would also be 
helpful to banks — it would be helpful to us so that we could better 
know our customers because, as you know and you probably better 
than anyone, this is one of the obstacles that we sometimes face. 

Senator Levin. That is very helpful and we will be sure to be 
quoting you for that in different places. [Laughter.] 

I want to talk to you both about bearer shares. Bearer share cor- 
porations, so-called, are notorious vehicles for money laundering 
and for other illicit activity because they provide anonymity 
through assigning legal ownership of the corporation to whoever 
has the physical possession of its shares. There is no paper trail. 
There is no way of knowing who owns those corporations, just the 
way there is no way of knowing who is the real beneficial owner 
of a bank account unless we require people owning the accounts to 
tell us who the beneficial owners are. 

But at times over the last decade, HBUS maintained over 2,000 
bearer share accounts despite warnings by internal auditors and 
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outside regulators that the accounts posed high money laundering 
risks. Internal bank documents show the account owners delib- 
erately pressured the bank to help hide their identities, and Ex- 
hibit 95 1 is one example of that, of a phone conversation between 
a man named Mauricio Cohen and an HBUS banker in Miami. I 
made reference to that in my opening statement. 

I know that HBUS has reduced the total number of bearer share 
accounts, and I guess my question is why have any? 

Ms. Dorner. Mr. Chairman 

Senator Levin. Could I interrupt your answer, and forgive me for 
this. I want to just read one thing to you before you answer, and 
that is what the World Bank has had to say about these bearer 
share accounts in its report last year. It said that no bank with any 
sort of due diligence standards is willing to conduct business with 
a company that has free-floating bearer shares. That is what the 
World Bank said. So, now, please. 

Ms. Dorner. Thank you, Mr. Chairman. Entirely understand the 
concern with bearer shares, a matter of great concern to me. It is 
always very important for us to know our customer. We have 
changed our policy here in the United States. We have toughened 
it up. We do not really want to do this business. To the extent we 
do it at all, it is going to be done under very limited circumstances, 
only when we can hold the shares ourselves or get them into a cus- 
todial agent that we know so that we can actually understand the 
movement of the shares. 

I think that because this is such a matter of general concern, the 
group — we are considering, or the new Group Standards Com- 
mittee, on which I sit with Mr. Levey, they are looking, or we are 
looking at the U.S. policy with a view to extending that around the 
world. 

Senator Levin. OK. That is really a step forward. 

Another issue that I raised in the opening statement was 
HBUS’s willingness to clear suspicious bulk travelers’ checks for 
foreign banks. From 2005 to 2008, on a regular basis, HBUS 
cleared up to a half-million dollars or more a day in bulk travelers’ 
checks from the Hokuriku Bank of Japan. They routinely arrived 
in large stacks of sequentially numbered checks signed and 
countersigned with the same signature, which was unreadable. 
HBUS found that the Japanese bank could not provide any “know 
your client” information or explain why two dozen of its customers 
were often depositing large stacks of U.S. dollar travelers’ checks 
all purchased from the same bank in Russia, allegedly for the used 
car business people. 

Now, this was under OCC pressure. HBUS stopped clearing the 
travelers’ checks in 2008, but it kept open the correspondent ac- 
count despite that Japanese bank’s poor AML controls, and in less 
than 4 years, HBUS provided over $290 million in U.S. dollars to 
a Japanese bank for the benefit of unknown clients dealing with 
unknown Russians who, again, were allegedly in the used car busi- 
ness. 


^See Exhibit No. 95, which appears in the Appendix on page 1062. 
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So I guess the real question is, would that happen again? Would 
that correspondent account be kept open again under your new 
rules? 

Ms. Dorner. Mr. Chairman, first, may I say I entirely under- 
stand the issue with travelers’ checks and I have asked the AML 
Director immediately to do a full review. 

As regards Hokuriku, they failed our new KYC standards in 
2012, which is why we have closed the account, and I have now 
exited, or we have now exited 326 correspondent banking accounts 
since we instituted the new KYC procedures. And, therefore, I 
would hope that we would close any bank such as this because they 
would fail the new KYC procedures. 

Senator Levin. A number of money laundering problems identi- 
fied by the OCC in 2010 related to inadequate monitoring for sus- 
picious activity. Among other problems, the failure to monitor for 
suspicious activity for the $60 trillion in wire activity, failed to 
monitor the bank notes accounts held by its affiliates, used poor 
procedures to identify who could get enhanced monitoring, and a 
backlog of alerts that were not reviewed, and the OCC provided 
several pages of criticism related to the weak parameters that the 
bank used to review wire and account activity. 

Now, one of the key provisions in that cease and desist order of 
the OCC in 2010 required HBUS to install a new AML monitoring 
system to replace its old one, called CAMP. The new one is called 
NORKOM, I believe, and the bank is supposed to ensure that it 
has useful parameters to identify potentially suspicious activity for 
review. Can you tell us whether or not that effort has been com- 
pleted and whether you have fully met the requirements of the 
cease and desist order with respect to a new AML monitoring sys- 
tem? 

Ms. Dorner. Thank you. Chairman. The whole point about the 
system, and this is, I know, why you are interested in it, the whole 
point about installing a system is it has to be absolutely fit for pur- 
pose. It absolutely has to fit the parameters of the business. It 
must identify the correct risks. And we must be able to monitor it. 

We have installed NORKOM. It has been a huge investment. I 
would be the first to say that with all systems, as usual, improve- 
ments can always be made, and it has been pointed out to us that 
there are two ways that we need to improve this system. We en- 
tirely agree. We are on the front foot. We are taking these as a pri- 
ority and we will fix it. I would imagine that we will be improving 
this system going forward forever b^ecause there are always new 
ways to fix these systems in such a way that they can deter illicit 
actors. 

Senator Levin. As I understand the history here, when this was 
not working properly by the deadline of 180 days, rather than seek- 
ing an extension of the 180 days, the implementation plan was 
modified and then ended up in noncompliance with the consent 
order. Is that accurate? 

Ms. Dorner. There are two MRAs that have been raised and 
they are very technical. They are very important because they are 
about the validation of the model and we will have to fix those two 
things. To the extent that the OCC have raised other issues, we 
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have replied in full and I believe that you have a copy of that let- 
ter. 

Senator Levin. Is there a new deadline? 

Ms. Dorner. There is not, to my knowledge, a deadline as such, 
but it is closely monitored and we are in day-to-day contact, lit- 
erally, with the OCC, who are clearly very interested in getting 
this fixed. 

[Pause.] 

Senator Levin. OK. We have a vote on now, and I think what 
we will do is we will release this panel. We sure hope that you are 
going to carry out the commitments which have been made by this 
bank because our report raises just a lot of serious issues about 
international banking and this particular bank. Again, the bank 
has been cooperative, but we hope this visibility will actually help 
reform efforts at the bank. 

Again, as I have said a couple of times this morning, we welcome 
the commitments. We welcome the apologies. It is the change in 
culture and actions which are critical. But there is that nagging 
question of accountability which others are going to have to judge. 
We are not in the prosecution business here. We are in the over- 
sight business. Others will have to judge the accountability issues. 
But it has been significantly missing, not just in this situation, but 
generally in a whole lot of other banking situations and other situ- 
ations in modern times. We hope that, somehow or other, the hear- 
ing and the investigation will also lead to some greater account- 
ability. 

But we will now release you and thank you. 

Ms. Dorner. Thank you very much. 

Mr. Levey. Thank you, Mr. Chairman. 

Senator Levin. And we are going to stand adjourned for 10 min- 
utes or until Senator Coburn gets back, whichever comes earlier. 

[Recess.] 

Senator Levin. The meeting will restart. I am told Senator 
Coburn will be coming back, but he told me we should start if he 
was not back, so here we go. 

Let me now call on our next panel of witnesses, Thomas J. 
Curry, the Comptroller of the Currency; Grace E. Dailey, the 
former Deputy Comptroller for Large Bank Supervision at the Of- 
fice of the Comptroller of the Currency; and finally Daniel Stipano, 
the Deputy Chief Counsel at the OCC. 

Mr. Curry, I am sure this is the first time that you have ap- 
peared before this Subcommittee and we welcome you and look for- 
ward to your testimony. 

Mr. Stipano, I believe you appeared before us about 8 years ago 
at our hearing on money laundering and foreign corruption. 

Mr. Stipano. Yes, sir. 

Senator Levin. We welcome you back, and I think this is Ms. 
Dailey’s first appearance here. We welcome you, as well. We appre- 
ciate all of you being with us and we look forward to your testi- 
mony. 

I think as you have heard or are familiar with our rules, all wit- 
nesses who testify before this Subcommittee are required to be 
sworn, so I would ask that each of you stand and raise your right 
hand. 
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Do you swear that the testimony that you will give before this 
Subcommittee will be the truth, the whole truth, and nothing but 
the truth, so help you, God? 

Mr. Curry. I do. 

Ms. Dailey. I do. 

Mr. Stipano. I do. 

Senator Levin. Under our timing system, you will get a red light 
a minute before a 5-minute — well, I guess now we are going to 
have a 10-minute testimony as the limit, so a minute before the 10 
minutes is up, it will go from green to yellow and then you could 
conclude your remarks, and we would ask that you do limit your 
oral testimony to no more than 10 minutes. I believe, Mr. Curry, 
you are going to be presenting the statement, of course, for the 
OCC, so please proceed. 

TESTIMONY OF HON. THOMAS J. CURRY, i COMPTROLLER OF 
THE CURRENCY, U.S. DEPARTMENT OF THE TREASURY 

Mr. Curry. Thank you. Chairman Levin, Senator Coburn, and 
Members of the Subcommittee. I appreciate the opportunity to ap- 
pear before you today to discuss the OCC’s work in ensuring com- 
pliance with the Bank Secrecy Act and the work we are doing to 
improve our Bank Secrecy Act (BSA) and AML compliance pro- 
gram. 

The Subcommittee’s staff report has identified important con- 
cerns with the activities of HSBC and with oversight and enforce- 
ment of BSA and AML requirements by the OCC in the case of 
HSBC. As I will describe below, we agree with the concerns re- 
flected in the report’s recommendations concerning the OCC and 
will fully implement those recommendations. 

In one of my first speeches after becoming Comptroller of the 
Currency just a little more than 3 months ago, I highlighted the 
importance of BSA compliance. I also noted that this is an inher- 
ently difficult area. It requires banks to sift through large volumes 
of transactions to identify those that are suspicious, a task that is 
complicated by the ingenuity that criminal and terrorist elements 
bring to bear in finding new ways to conceal the true nature of 
their transactions. 

In my speech on operational risk, I emphasized, and I want to 
reaffirm today, that no matter how difficult compliance is, I expect 
institutions we supervise to have effective programs in place to 
comply fully with the requirements of the BSA. We will insist on 
that. 

Our testimony today provides details about the OCC’s BSA and 
AML supervisory policies and practices. It further describes how 
the OCC monitors compliance with BSA requirements and ongoing 
supervision that we provide at the largest national banks and 
thrifts, as well as our current enforcement process when problems 
or concerns are identified through our supervision and our enforce- 
ment record for BSA. 

As requested in the invitation to this hearing, our written state- 
ment also discusses our supervision of HSBC. In 2010, the OCC 
issued a comprehensive cease and desist order against HSBC. As 


^The prepared statement of Mr. Curry appears in the Appendix on page 150. 
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our written statement details, with the benefit of hindsight, the 
OCC could have and should have taken this action sooner. But the 
issuance of this order does not conclude our activities with respect 
to the matters covered by the cease and desist order. We are now 
actively evaluating the bank’s compliance with the order and con- 
sidering the assessment of monetary penalties. 

The Subcommittee’s report contains three specific recommenda- 
tions focused on the OCC’s BSA/AML supervision. I agree with the 
concerns reflected in each of the recommendations and the OCC 
has begun taking actions in response. 

First, we have already identified a new approach that we will im- 
plement to assure that BSA/AML deficiencies are fully considered 
in the safety and soundness context and are taken into account as 
part of the management component of a bank’s CAMELS rating. 
We will direct our examiners to view serious deficiencies in a 
bank’s BSA/AML compliance area, including program violations, as 
presumptively adversely affecting a bank’s management component 
rating. We will also provide guidance on how to document applica- 
tion of this approach in determining the management component 
rating. 

Second, we are revising and clarifying the operation of our Large 
Bank BSA Review Team to enhance our ability to bring different 
perspectives to bear and to react on a more timely basis to cir- 
cumstances where a bank has multiple instances of matters requir- 
ing attention or apparent violations of the required components of 
its BSA/AML program. We will also explore how we track and re- 
view relevant information in this regard and whether new initia- 
tives are appropriate in that area, as well. 

Third, we will also revamp our current approach to citing BSA/ 
AML violations to provide more flexibility for individual pillar vio- 
lations to be cited and we will identify what steps we can take in 
our examinations to obtain a holistic view of a bank’s BSA/AML 
compliance more promptly. One of the reasons for the current OCC 
approach is that it requires the OCC to focus on determining 
whether the deficiencies in a bank’s program amount to a BSA 
compliance program violation, which requires a mandatory cease 
and desist order. Therefore, in implementing changes on this point, 
it will be important not to create disincentives to making the nec- 
essary tough calls when there are BSA compliance program viola- 
tions mandating the issuance of a cease and desist order. 

Finally, we will review other areas, such as training, staffing, re- 
cruitment, policies, and interagency coordination to make improve- 
ments in our BSA/AML supervision program. 

I am joined today by Dan Stipano, Deputy Chief Counsel, and 
Grace Dailey, who served as the Deputy Comptroller for Large 
Banks from 2001 until November 2010. The three of us share a 
commitment to a rigorous BSA/AML supervisory and enforcement 
program at the OCC and we are continually seeking ways to im- 
prove our supervision in this important area. 

I have asked Ms. Dailey and Mr. Stipano to introduce themselves 
to the Subcommittee, and then we will be pleased to answer your 
questions. Ms. Dailey. 
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TESTIMONY OF GRACE E. DAILEY/ FORMER DEPUTY COMP- 
TROLLER FOR LARGE BANK SUPERVISION, OFFICE OF THE 

COMPTROLLER OF THE CURRENCY 

Ms. Dailey. Chairman Levin, Senator Coburn, my name is Grace 
Dailey and I have been with the OCC for 29 years as an examiner. 
I am currently the Examiner in Charge of a large bank in Min- 
neapolis, where I oversee a team of examiners responsible for that 
bank’s supervision. 

From the end of 2001 through late 2010, I served as one of three 
Deputy Comptrollers in the OCC’s Large Bank Division. In that 
role, I oversaw the supervision of a portfolio of large national 
banks. That portfolio changed over time, but included HSBC Bank 
USA, N.A., from July 2004 through November 2010. Prior to be- 
coming Deputy Comptroller for Large Banks, I held a variety of 
roles supporting bank supervision, including serving as Examiner 
in Charge and other field positions in Minneapolis, Chicago, and 
New York. 

I look forward to answering your questions. 

Senator Levin. Thank you very much, Ms. Dailey. Mr. Stipano. 

TESTIMONY OF DANIEL P. STIPANO, ^ DEPUTY CHIEF 
COUNSEL, OFFICE OF THE COMPTROLLER OF THE CURRENCY 

Mr. Stipano. Chairman Levin, Senator Coburn, and Members of 
the Subcommittee, my name is Daniel P. Stipano and I am one of 
two Deputy Chief Counsels at the Office of the Comptroller of the 
Currency. I have spent 27 years at the OCC, with the majority of 
that time working in enforcement and compliance. In my current 
role, I supervise the OCC’s enforcement and compliance, litigation, 
community and consumer law, and administrative and internal law 
divisions, as well as the OCC District Counsel staffs in the OCC’s 
Southern and Western Districts. 

Prior to becoming Deputy Chief Counsel, I served as the Director 
for Enforcement and Compliance at the OCC, where I was respon- 
sible for taking administrative enforcement actions against na- 
tional banks and their institution-affiliated parties. From 1989 to 
1995, I was an Assistant Director in the Enforcement and Compli- 
ance Division after joining the OCC in 1985 as a Staff Attorney in 
the Division. 

Senator Levin. OK. We thank you all. 

Let us try 10 minutes for our first round of questions. 

Let me start with a question for you, Ms. Dailey. You were the 
OCC Deputy Comptroller for Large Banks from 2001 to 2010 and 
were in charge of the OCC’s supervision of a number of large inter- 
national banks, including HBtJS. When the OCC became HBUS’s 
primary regulator in July 2004, the bank was already under a for- 
mal enforcement action by the Federal Reserve Bank of New York 
and the New York State Banking Department for having an inad- 
equate AML program. As a condition for allowing HBUS to become 
a nationally chartered bank, the OCC required HBUS to complete 
all of the corrective actions set out in the written agreement that 
was the result of the enforcement action. 


^The prepared statement of Ms. Dailey appears in the Appendix on page 150. 

2 The prepared statement of Mr. Stipano appears in the Appendix on page 150. 
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In 2006, the OCC determined that HBUS had fulfilled the re- 
quirements and terminated that agreement. Were you involved, 
first of all, in the decision to terminate the agreement? 

Ms. Dailey. I was one of the recommending officials. I was not 
the final decisionmaker. 

Senator Levin. OK. Did you recommend that it he terminated? 

Ms. Dailey. Yes, I did. 

Senator Levin. All right. Now, the Subcommittee has prepared 
a chart. Exhibit la,i that tracks the 44 AML examinations con- 
ducted by the OCC at HBUS from 2004 to 2010. As you can see 
from the chart in your book — ^you will not be able to follow that 
one, but it is also in your book — the OCC conducted seven exams 
before it voted to terminate the 2003 agreement in 2006. Those 
seven exams all took place in about 1 year, from 2005 to 2006, and 
identified 35 matters requiring attention, or MRAs, which are prac- 
tices that the OCC defines as deviating from sound fundamental 
principles and “may adversely impact earnings or capital, risk pro- 
file or reputation,” or “result in substantive non-compliance with 
laws.” 

First, are 35 MRAs, matters requiring attention, a high number 
for a bank to accumulate in 12 months? 

Ms. Dailey. Yes, it is a high number to accumulate in 12 
months. 

Senator Levin. So the 35 MRAs identified in those first seven ex- 
aminations found that in most instances that the bank was not fol- 
lowing its policies, was not monitoring properly, was not conducting 
appropriate due diligence, that written policies were not adequate, 
and that staff needed training, all of that while the bank was still 
under the 2003 enforcement actions. So all of those are matters 
that the Bank Secrecy Act specifically identifies as pillars or key 
components that a bank must have for an effective Bank Secrecy 
Act program. So how could that bank, with all of those outstanding 
problems in 2006, be considered to have an effective AML program? 

Ms. Dailey. Well, we did a lot of work in that time period, as 
you have pointed out by the chart, and we did find a lot of issues. 
Many of those issues — in fact, I think most of those issues — were 
corrected quite soon after they were detected. So some of the issues 
were not longstanding problems from the standpoint that it would 
take the institution a long time to fix, so they were corrected and 
when we made our determination, we went through the WSRC 
process. So it is a process to determine when we think a bank is 
in compliance with the articles, how to go about lifting that. Our 
examiners felt that the bank did have an adequate program at that 
time, was in technical compliance with the conditions, and we pro- 
ceeded through our process, which is to take that through our 
WSRC process, which is members of management, and there was 
a recommendation and then a final decision was made. But I un- 
derstand your concern that there were a lot of issues that were 
identified at that time. 

Senator Levin. Well, there not only were a lot of other issues 
identified, but 23 of the 35 identified issues were also identified in 
four supervisory letters written in January 2006. Now, all four of 


^See Exhibit No. la, which appears in the Appendix on page 575. 
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those supervisory letters were dated within 20 days of the decision, 
February 6, 2006, to terminate the agreement. So it is hard — I do 
not know how you can say that most of them had been dealt with, 
and then you have those four supervisory letters written within 20 
days of the decision to terminate, and here are some of the issues 
that were listed in those four letters, again, within a 20-day period. 

Monitoring problems were noted in all four letters. Policies in 
need of enhancements were cited in all four letters. Not following 
policies was identified in three of the four letters. Customer due 
diligence issues in three of the four letters. And staff in need of 
training in three of the four letters. 

So I do not know how the OCC could rank and rate the bank’s 
AML program as satisfactory and how they could cancel the en- 
forcement action. 

Senator Levin. I just do not understand it. 

Ms. Dailey. In hindsight, we should not have. From what we 
know today, they did not have an effective BSA program, and in 
fact, many of the problems that we detected in our 2009 examina- 
tion were in existence during this time. So in retrospect and from 
what we know now, we would not have lifted those conditions. 

Senator Levin. Well, but my point is that looking back now at 
what you knew then, it should not have been lifted, because what 
you knew then when you lifted it, 23 of the 35 matters requiring 
attention were still outstanding. 

Ms. Dailey. We probably did not appreciate the systemic nature 
of some of those issues. I understand the concern. 

Senator Levin. Now, over the next 4 years, the MRAs or matters 
requiring attention did not stop. OCC examinations repeatedly 
found significant AML problems across a number of business lines, 
many of which were high risk and vulnerable to illicit activity. 
Fourteen of the examinations found AML monitoring problems. 
Eight found weak customer due diligence. Seven found insufficient 
staffing. Five found that the bank was not following its own poli- 
cies. These problems existed in critical, high-risk business units 
such as banknotes, foreign correspondent banking, embassy, bank- 
ing, international and domestic private banking, wire transfers, 
and pouch services. By 2009, HBUS had 83 MRAs, more than any 
other national bank. The next closest had 20 fewer. 

So with this kind of a record, the first question that one wonders 
is why the OCC never took formal enforcement action against 
HBUS prior to 2010. Do you know why it did not? 

Ms. Dailey. Stepping back and looking at it, we should have. We 
could have and we should have taken action sooner. 

Senator Levin. I am talking about formal enforcement action, 
right? That is what we are talking about. 

Ms. Dailey. Yes. I agree that we could have and should have 
taken formal enforcement action. With the benefit of hindsight, we 
should have. 

Senator Levin. Well, these words are the benefit of hindsight. 
Given what you knew then, should you not have taken enforcement 
action? 

Ms. Dailey. Had we applied the process that we plan to apply 
going forward, which is to have the flexibility to cite pillar viola- 
tions, we would have cited pillar violations in these instances and 
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we may have drawn a different conclusion then to cite a program 
violation. 

Senator Levin. What about informal enforcement action? Was 
there any informal enforcement action taken against HBUS prior 
to 2010? 

Ms. Dailey. There was not. 

Senator Levin. This is pretty feeble enforcement. Mr. Curry, 
what do you think about this record that you inherited? 

Mr. Curry. I would like to see going forward a much more ag- 
gressive posture by the OCC. If there is evidence of material weak- 
nesses in a BSA/AML program, I would like to see, at the very 
least, a progressive remedial program being instituted and to use 
all the tools that are available to us, including cease and desist or- 
ders. 

Senator Levin. Did the OCC ever cite a violation of law for non- 
compliance with AML statutes prior to 2010? Do you know, Ms. 
Dailey? 

Ms. Dailey. I do not believe we did prior to 2010. 

Senator Levin. Mr. Stipano, you are the Deputy Chief Legal 
Counsel for the OCC. You told the Subcommittee staff that you did 
not have much involvement with HBUS prior to 2009 because the 
Supervision Division was responsible for examinations and the 
Legal Department generally gets involved only in enforcement ac- 
tions, investigations, or legal actions brought against the bank by 
the Supervision Division. But in the spring of 2009, the OCC was 
contacted by two Federal enforcement agencies regarding investiga- 
tions that they were conducting of possible money laundering, 
going through accounts at HBUS, and the OCC met with rep- 
resentatives of those agencies in Washington, DC, on September 1, 
2009. When the meeting concluded, the OCC staff continued to dis- 
cuss the HBUS situation. Was it at that meeting that you learned 
for the first time about the findings of previous AML exams of 
HBUS and that they had resulted in 83 MRAs? 

Mr. Stipano. To the best of my recollection, that was the first 
time that I learned about the 83 MRAs. 

Senator Levin. Had you encountered some of the problems at 
HBUS before that? 

Mr. Stipano. Yes. One situation I remember, and I do not have 
a date on it, was the agency was contacted by two former HSBC 
employees who were essentially whistleblowers and they had con- 
cerns about the way that the bank was managing its embassy 
banking business. At that time, I directed the Director of Enforce- 
ment to meet with Ms. Dailey, to set up a meeting and to have 
them come in and interview them and find out what the basis of 
their concerns were. That meeting did take place. I was not person- 
ally a participant. Following that, an examination was opened into 
the embassy banking area and I believe that findings were made 
and that supervisory actions were taken as a consequence. 

Senator Levin. When you learned that there were 83 MRAs that 
were specific to the Bank Secrecy Act, were you surprised by the 
number? 

Mr. Stipano. Yes. 
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Senator Levin. And did you also learn that there had been two 
recommendations that cease and desist orders be issued against 
HBUS? 

Mr. Stipano. I did learn that, but I do not recall whether I 
learned that following that meeting or if I learned that subse- 
quently. But I was not aware of that, to my knowledge, prior to 
that meeting. 

Senator Levin. Did anyone ever explain why the Supervision Di- 
vision never tried to elevate the issue and take some kind of regu- 
latory action? 

Mr. Stipano. I do not recall anybody explaining that to me. I 
think that judgments were made by bank supervision that the mat- 
ter did not rise to the level of warranting a cease and desist order 
or another enforcement action up to that point. 

Senator Levin. And what was your reaction to that? 

Mr. Stipano. I was very concerned. I think that learning what 
we learned both through our discussions with the law enforcement 
agents and what we learned from the examiners following the 
meeting, it was apparent to me that there was a serious problem 
in the BSA/AML area and that it needed to be addressed promptly. 

Senator Levin. Did you start an investigation in which both the 
Legal and Enforcement Divisions got involved at that time? 

Mr. Stipano. Yes. I do not have precise dates, but shortly 

Senator Levin. About that time? 

Mr. Stipano. Yes, shortly thereafter. 

Senator Levin. And did you then expand an ongoing AML exam? 
You set time tables, secured an order of investigation, helped craft 
the two supervisory letters to HBUS in 2010 which were the first 
to cite the bank for violations of AML laws and OF AC regulations? 
Did that happen? 

Mr. Stipano. Yes, but there was an ongoing examination into the 
banknotes area, and this was something that the agency became 
concerned about following an enforcement action at Wachovia that 
concerned banknotes and bulk cash services. So the examiners 
were already looking into it, but I think that the consequence of 
the meeting with law enforcement and the information that we ob- 
tained at that time was to expand the examination and open a for- 
mal investigation. 

Senator Levin. Why did the Legal Department and the Enforce- 
ment Department have to get involved before some regulatory ac- 
tion was taken? Was that ever explained to you? 

Mr. Stipano. I think that if we are talking about actually doing 
an investigation or taking an enforcement action, that really can- 
not be done without the participation of lawyers. Our investiga- 
tions involve issuance of subpoenas, subpoenas for documents, and 
subpoenas for testimony. It is not something that examiners can do 
on their own, and the same thing with our enforcement actions. 
The document is a legal document. It is legally enforceable. The re- 
spondent bank or individual has due process rights. So the Legal 
and the Enforcement Division need to be involved. 

Senator Levin. But apparently, your level and the enforcement 
folks were not contacted until after the OCC was contacted by law 
enforcement agencies in the midst of a criminal investigation in- 
volving the bank. So you had all of this background, having all of 
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these unresolved issues, important issues, but yet you were not 
contacted and you just point out how important it is that the Legal 
Department and the Enforcement Department be contacted before 
some regulatory action was taken. But until that time, with all of 
the problems that were identified in the exams, which had been re- 
curring and mounting for years, it did not reach your level, is that 
correct? 

Mr. Stipano. That is basically correct. I mean, there could have 
been incidental contact. There could have been discussions. There 
is a senior counsel of the Law Department who works for me that 
is on the Large Bank Review Team. His role in that capacity is to 
review supervisory letters and conclusion memos. So it was not like 
nobody in the Legal Department ever spoke to anybody in Large 
Banks. But in terms of actually getting a referral or being brought 
in in order to conduct an investigation or take an action, that did 
not happen prior to 2009. 

Senator Levin. So, Mr. Curry, this was not a case where OCC 
examiners failed to do their job, by the way. They were identifying 
the AML problems at HBUS all along the way. The higher-ups 
were overly passive. They were waiting until the problems grew 
into a very huge one before taking any action, before there had to 
be criminal investigations that were begun, before there was any 
real referral to the enforcement folks or the legal folks. 

Now, you are new there. You are only there a couple months, so 
you may not know the answer yet to this question, but when a 
bank is exhibiting the kind of problems that this bank showed, the 
problems that continually occur in multiple business lines, do you 
not believe that the OCC should take some type of regulatory ac- 
tion before those problems become so great that they are the sub- 
ject of a criminal grand jury, for instance? 

Mr. Curry. One of the most troubling aspects of the Subcommit- 
tee’s report really is the issue of our ability to identify and act upon 
the cumulative effect of BSA/AML deficiencies and that is an area 
that I would like to see much greater clarity as to the posture of 
enforcement at the agency, and also is the rationale for the expan- 
sion of the Large Bank Review Team’s mandate to actually be the 
vehicle to look at the entire compliance posture of our largest insti- 
tutions to take a holistic view and to react accordingly. 

Senator Levin. Are you ready. Senator Coburn? 

Senator Coburn. Yes. 

Senator Levin. OK. Senator Coburn. 

Senator Coburn. I apologize for being absent during your open- 
ing statements and your questions, so if I get ready to repeat a 
question that was already asked, I hope you will stop me. 

Senator Levin. Well, you may be getting a better answer. One 
never knows. [Laughter.] 

I think the answers have been responsive. I should not suggest 
otherwise. 

Senator Coburn. This is for Mr. Curry, how do you respond to 
the charge that the OCC, by giving such high scores to HSBC for 
so many years, became an enabler because it gave false comfort? 

Mr. Curry. I think, again, judging on what I am familiar with, 
the Subcommittee’s record and from the information I have deter- 
mined as Comptroller, the agency has been much too slow in re- 
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spending and addressing what are significant weaknesses or viola- 
tions at this institution. And going forward, I would hope that we 
would he much more nimble and take into account the entire pic- 
ture, what we are looking at in terms of compliance. 

Senator Coburn. Knowing what you know now, I mean, what 
this Subcommittee’s report has exposed and what also was known 
by you at times, is it a matter of being nimble and more respon- 
sive, or is it a matter of competency? 

Mr. Curry. I believe it is really a matter of being more nimble 
and recognizing the importance of BSA/AML compliance as both a 
national interest and in terms of it being a significant and serious 
safety and soundness issue. And my hope is that, going forward, 
we will react accordingly, which requires direct and progressive re- 
medial action as supervisors. 

Senator Coburn. So have some of those actions taken place now? 

Mr. Curry. Yes. We have begun to already implement the spe- 
cific recommendations of the Subcommittee. We are also taking an 
independent look at how we recruit, train, our policies, and also 
how we can improve our coordination with both our fellow bank 
regulatory agencies and with law enforcement agencies. This is an 
opportunity for us to look at the big picture of how we are imple- 
menting our responsibilities under the Bank Secrecy Act and AML 
statutes. 

Senator Coburn. This kind of reminds me, but on a much larger 
scale, of the Homeland Security Oversight Subcommittee and Fed- 
eral Financial Management Subcommittee in terms of the Defense 
Audit Agency. And what we found there is they never hired new 
blood. It was all promoted from within. And the vast majority of 
those auditors never had real experience auditing, and so you kind 
of got a downward trend of the least favorable aspects as they pro- 
moted people with lesser and lesser experience and no variety of 
their experience. 

How do you go about hiring people now? 

Mr. Curry. It is a challenge to obtain people with the requisite 
skills that you need to assess bank operations and the specific legal 
requirements and regulatory requirements of the BSA and AML. 
That being said, I am committed in renewing a real effort to attract 
competent personnel from both within and outside the agency. 

Senator Coburn. Would not one source be people who have been 
very good at figuring out how to duck your issues and having them 
work for you? 

Mr. Curry. Yes, and that is part of our training. We do seek to 
understand or have presentations by individuals who have experi- 
ence with how the criminal element exploits our Bank Secrecy Act 
and AML 

Senator Coburn. Well, I was not talking about the criminal ele- 
ment. I was talking about the people who were on the other side 
on compliance in terms of recruiting them. 

Mr. Curry. Yes, that would be a source of personnel. 

Senator Coburn. A lot has been said in our report about HSBC 
allowing drug cartels and terrorists to move money through its 
banks. Since you all knew all of this was happening and did not 
stop it, are you not somewhat complicit in it? 
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Mr. Curry. I deeply regret that we did not act sooner and more 
decisively. 

Senator Coburn. So is that a yes? 

Mr. Curry. Yes. Absolutely. 

Senator Coburn. This is a little harder question. Take a little bit 
longer time. But with as much specificity as possible, can you ex- 
plain what a good AML system within a bank should look like? 
And I am not talking about pillars or principles. I am talking about 
the actuality of what a bank — what would you all ideally — I know 
what your regulations say. I know what we have recommended. 
What would you, if I came to you and I had a 150-bank operation 
and it is international and I said, what should my AML look like, 
what would you tell me? 

Mr. Curry. I think the No. 1 principle or attribute would be hav- 
ing management and the board being committed to developing and 
funding a BSA/AML program that was appropriate for the business 
activities of that institution. That is probably the No. 1 thing. And 
then in a successful program, all other requirements would flow 
from that — hiring competent personnel with the requisite experi- 
ence to implement a credible program, building the management 
information systems that are necessary to monitor BSA/AML ac- 
tivities, as well. And at the end of the day, it is a corporate commit- 
ment to compliance. 

Senator Coburn. Did you happen to hear Ms. Dorner and Mr. 
Levey’s testimony today? 

Mr. Curry. I was able to hear the tail end of their testimony. 

Senator Coburn. Do you think they have put in place a good 
AML system? 

Mr. Curry. That is our expectation as their primary supervisor. 

Senator Coburn. But based on what they said here today, is it 
your belief, if they carry out what they have said here today, that 
they will have a great AML system? 

Mr. Curry. I would hope that is the case. I think we are in the 
position as their supervisor that we need to verify that and I do 
not believe we are in a position to do that right now. 

Senator Coburn. OK. So how do you know when somebody has 
a good AML system? 

Mr. Curry. Personally, as the Comptroller, I am relying on the 
expertise and the supervision programs of our examinations staff. 

Senator Coburn. And so who directly under you is responsible 
for that? 

Mr. Curry. The Senior Deputy Comptrollers of both our Large 
Bank Division and our Mid-Size and Community Bank Divisions 
are the primary people responsible for our BSA examination pro- 
grams. We also have, which Mr. Stipano mentioned and I men- 
tioned in response to an earlier question, a Large Bank Review 
Team, which is really the Washington-based clearing function for 
making sure that there is coordination and consistency within our 
supervision programs, and especially in the area of enforcement. 

Senator Coburn. I would be interested if you would get the vid- 
eotape of Ms. Dorner and Mr. Levey and share with the Sub- 
committee your thoughts in terms — I know you have to prove and 
make sure, that is your responsibility, but I would love to hear 
your thoughts about what they said they were doing, how they 
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were doing it, how they were implementing it, how they were doing 
clawbacks, how they were holding people accountable, and how 
they were trying to change the culture within their organization. 

Mr. Curry. I would be happy to do that. Senator, and to get back 
to you. 

Senator Coburn. Thank you. 

Ms. Dailey, our investigation found in 2007 that examiners rec- 
ommended the OCC take formal enforcement action against HBUS 
for weakness in how it monitored how its pouch services report. 
That is on page 304. But the OCC decided to take no such action. 
Do you recall that? 

Ms. Dailey. To the best of my recollection, that recommendation 
did not reach me. 

Senator Coburn. OK. Do you have any idea how high up it got? 

Ms. Dailey. Generally, what would happen is an examiner would 
make a recommendation and present that to an Examiner in 
Charge. I do not know if that happened or not. 

Senator Coburn. Well, that would seem to suggest to me that 
some of the same problems are going on at the OCC that were 
going on at HSBC. We heard testimony from our first two panels 
of what was not happening, where information was not flowing 
that should be flowing, some of it for profit motive, some of it from 
incompetence. Is it possible that line-level examiners thought a 
tough enforcement action was needed but were overruled by their 
supervisors? 

Ms. Dailey. I do not know that. I do not have any knowledge to 
that effect because it did not come to me. It could have been pre- 
sented to the Examiner in Charge and they could have made a dif- 
ferent determination once looking at the facts. Oftentimes, when 
the examiners make determinations, they sit down with the Exam- 
iner in Charge and go through the different criteria and the dif- 
ferent facts and they could come to a different conclusion. I do not 
know that, though, because I was not part of any of those types of 
discussions. 

Senator Coburn. All right. And it is easy for us to arm chair 
quarterback it now, looking backwards, and I understand that. 

Does the agency or did the agency have any processes in place 
to make sure all proper enforcement actions were handled consist- 
ently across the various banks that OCC regulated? 

Ms. Dailey. Yes. We have what we call a WSRC process in place, 
and what happens is whenever an enforcement action, whether it 
is informal or formal, is recommended, it goes through the exam- 
ination team. It would be presented to the Large Bank Review 
Team. If the Large Bank Review Team agreed with those findings, 
it would be presented to the WSRC committee, and that committee 
is made up of members of across our agency in supervision, policy, 
enforcement, etc., and that committee is a recommending body for 
an informal or formal action and the final decision would be made 
by a Senior Deputy Comptroller. 

Senator Coburn. So as you look back through the past few years, 
where do you think you all have failed? I mean, just an honest as- 
sessment of where was our management not good? Where was our 
quality of instruction and direction, where were our employees not 
up to the task? In other words, we obviously had a great big prob- 
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lem here. Everybody agrees with that. So from just your viewpoint, 
where you sit, where do you think the problem was? 

Ms. Dailey. I think we did a lot of work. We did a lot of exami- 
nations. We found a lot of issues. We received some corrective ac- 
tion along the way. But we did not probably step back as well as 
we should, and with the benefit of hindsight, we could have and 
should have taken action sooner. 

Senator Coburn. Mr. Chairman, that is the kind of answer we 
get all the time. The fact is, is what that means is things are going 
to be repeated, and what our whole goal is, is so that things are 
not repeated. 

Mr. Curry. Senator Coburn, I think from my perspective as 
Comptroller, I really want to address the same issues that you 
asked me to look at how HSBC was addressing. I want to have a 
culture at the OCC in which examiners feel free to voice docu- 
mented, well founded concerns about the performance of the banks 
that they are examined, to know that those concerns are going to 
be fairly and thoroughly reviewed, and at the end of the day, the 
appropriate action or, in some cases, inaction will be taken by the 
agency as a whole. 

Senator Coburn. So what happens right now when an examiner 
feels strongly that some action needs to be taken and the person 
in charge of that examination disagrees? Where is the outlet pres- 
sure for somebody to appeal without it costing them? 

Mr. Curry. I would encourage them and they have the oppor- 
tunity to appeal to me. We also have review functions, whether it 
is in the case of BSA and the Large Bank Review Team, or to con- 
tact our Committee on Bank Supervision or any one of the senior 
members of the agency. 

Senator Coburn. So how many times has that happened? 

Mr. Curry. In my short tenure, I am not aware of that number. 

Senator Coburn. Has it happened? Has anyone called you? 

Mr. Curry. No one has called me specifically, but I want to cre- 
ate a culture at the OCC, or to reinforce a culture that we are here 
to be bank supervisors and that we are to be fair and reasonable 
in how we approach that. But at the end of the day, we are to do 
what we are being paid to do. 

Senator Coburn. All right. I have gone over time. It is yours. 

Senator Levin. How many months have you been there? 

Mr. Curry. A little over 3 months. 

Senator Levin. All right. Well, I would believe that in the next 
3 months, you will be getting some phone calls and it is important 
that line of communication be kept open, that people be able to ap- 
peal denials of their strong urgings after notifying their supervisor 
that they are going to do it. You have to be able to go around your 
supervisor, and if they do it privately, without notice to the super- 
visor, I guess they would become a whistleblower at that point and 
they have to be protected under our whistleblower laws because the 
stakes here are just too huge and the failures here are too massive 
to allow them to be repeated. 

My own belief is that part of the reason has been a culture, but 
the other part is that there has been just a lack of accountability. 
It was true, at least, inside this agency. 
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This is not a matter of hindsight, by the way. I would disagree 
with you here, Ms. Dailey. This is where at the time things were 
known and were not acted on. And that is what is so troubling 
here. We obviously want to use hindsight to improve. We always 
can use hindsight to benefit us. But what we have seen throughout 
this hearing today is that at the time, contemporaneously with 
these events, that there were people who knew better. There were 
sometimes efforts made that were ignored and squelched. But it is 
not just a matter of with the benefit of hindsight here. 

The testimony that you have given us today, Mr. Curry, is that 
the agency is reviewing the matter in which MRAs are reported to 
ensure that banks with high numbers of MRAs will receive addi- 
tional supervisory attention and consideration of formal enforce- 
ment action and I would like to get some additional details on this 
matter, who is going to be involved in this revised approach, look- 
ing at matters requiring attention when there are a number of 
these that are issued. Who is going to be looking at it, just super- 
vision, or are the Legal and Enforcement Divisions going to be in 
the mix? Give us some details on how this is going to work. 

Mr. Curry. Initially, we are looking to expand the mandate of 
our Large Bank Review Team to take on that function. That is our 
initial response to the report’s findings. My hope is that we will 
have additional recommendations after we look at this matter fur- 
ther, as we examine our policies and procedures. There may be a 
more effective measure that we will employ. In any event, I will en- 
deavor to keep this Subcommittee informed of the improvements 
that we will be making on an ongoing basis. 

Senator Levin. So that the enforcement folks and the legal folks 
are going to be involved in this new process early? 

Mr. Curry. That is the intention. 

Senator Levin. Is the revised approach going to have some sort 
of thresholds that they are going to apply, maybe to different time 
frames, such as how many MRAs in a month, how many MRAs in 
a year, and so forth? 

Mr. Curry. I cannot say that we will come up with an arithmet- 
ical floor, but we will have a process that looks at the totality of 
circumstances of which the number of MRAs will be a critical fac- 
tor. 

Senator Levin. The Subcommittee investigation found that in 
some instances, the conclusion memos of exams at HBUS were a 
lot stronger than the supervisory letters that were sent to the 
bank. So in those instances, the real message about the seriousness 
of problems was not being delivered to the bank. Is your Large 
Bank Review Team going to get better information now than in 
prior years? 

Mr. Curry. That particular practice has already been corrected. 
Both the conclusion memo and the supervisory letter draft will be 
reviewed by the Large Bank Review Team. 

Senator Levin. I am also encouraged by your testimony today 
and by the OCC’s willingness to look for ways to improve the exam 
supervision, and here is what our report noted, that there are some 
practices at the OCC that depart from the practices utilized by 
other Federal bank regulators, and more importantly, seem to act 
as a barrier to your examiners, your AML examiners. Those bar- 
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riers made it difficult for your AML examiners to get the appro- 
priate attention of their supervisors when AML problems were 
quite evident. In your testimony, you acknowledge that your agency 
does differ from other agencies with respect to including AML 
exam findings in the consumer compliance exam process and you 
are going to correct that. 

By the way, has anyone explained to you exactly why the anti- 
money laundering was inserted into customer compliance examina- 
tions and ratings? That was a longstanding process. It did not 
occur by happenstance. We are delighted today to hear that you are 
correcting that. Your testimony is very clear on that, that you are 
going to now follow the same practice that other examiners do in 
this regard. 

But was it ever explained to you why it was part of the customer 
compliance ratings? 

Mr. Curry. I did ask why we deviated from the other Federal 
bank regulatory agencies in that regard. Personally, my view is 
that BSA/AML is a significant or serious safety and soundness 
issue and that it is appropriately addressed by looking at it in the 
context of the management component in the CAMELS rating sys- 
tem and that policy has been adopted at the agency already and 
we are simply in the process of communicating that decision and 
making appropriate changes to the examination procedures for our 
staff. 

Senator Levin. And when will the new AML exam process take 
effect? Will it take effect immediately? 

Mr. Curry. It is immediate. There will be some lag in commu- 
nicating the actual procedures to staff, but we will, again, keep you 
informed on that process, if you would like. 

Senator Levin. So the exams are going to be considered this year 
when assigning CAMELS management ratings? 

Mr. Curry. Yes, as soon as possible. I would expect it to be soon- 
er rather than later. 

Senator Levin. A matter of months? 

Mr. Curry. Yes. Less than that, hopefully. 

Senator Levin. Good. Might this have implications for the cur- 
rent rating at some banks, including HBUS? 

Mr. Curry. I believe our position is that serious and significant 
BSA violations should be presumptively a factor in an adverse 
management rating. 

Senator Levin. All right. And if it applies, if it has an impact on 
HBUS, so be it? 

Mr. Curry. So be it. 

Senator Levin. The Subcommittee report also recommended that 
the OCC cite violations when a bank fails to meet any one of the 
statutory minimum requirements for an AML program. You state 
in your testimony that the OCC is going to “revisit its current ap- 
proach in order to provide more flexibility for individual pillar vio- 
lations to be cited.” Can you give us just a little bit more detail on 
what you mean by “revisiting our current approach”? 

Mr. Curry. We are looking to broaden the range and types of 
violations that examiners will be reporting in the reports of exam- 
ination and in supervisory communications. The only reservation 
that we stated was we want to make sure that where there are 
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program violations, that is clear that they will result in a manda- 
tory cease and desist order. 

Senator Levin. OK. Senator Coburn. 

Senator Coburn. Just a few more questions. Ms. Dailey, in Sep- 
tember 2009, OCC officials, including you, met with officials from 
DHS, Immigration and Customs Enforcement who were inves- 
tigating money laundering. After the meeting, the lead AML exam- 
iner for HBUS said he had twice recommended cease and desist or- 
ders against HBUS for AML weaknesses. Do you recall that? 

Ms. Dailey. I recall the meeting afterward and I recall the gen- 
tleman discussing the MRAs. I do not recall whether he discussed 
or mentioned that there had been previous recommendations or 
not. 

Senator Coburn. Yes. So you cannot tell me whether that was 
an accurate statement he made to us? 

Ms. Dailey. I do not recall that part of the conversation. 

Senator Coburn. Well, Mr. Stipano, a memo following that Sep- 
tember 2009 meeting states that when learning of the cease and 
desist recommendations that were not followed, you said you were 
unaware of the recent history of HBUS and that you requested the 
thorough review. Is that right? 

Mr. Stipano. Yes. My recollection, and Senator Coburn, we did 
talk about this a little bit when you were out of the room 

Senator Coburn. All right. 

Mr. Stipano. But my recollection of it was that following the 
broader meeting with law enforcement, we had a smaller internal 
meeting and I learned at that point for the first time about the 83 
MRAs. I do not recall whether I also learned at the same time that 
there had been past recommendations for cease and desist orders. 
I did learn that at some point subsequent to that. It could have 
been at that meeting. It could have been later. I just do not remem- 
ber. 

Senator Coburn. But the fact is, there were recommendations 
made for cease and desist orders from examiners, correct? 

Mr. Stipano. We know that now. 

Senator Coburn. Yes. 

Mr. Stipano. Yes. 

Senator Coburn. So back to Mr. Curry. Here is a prime example 
where recommendations were made and got squelched, essentially. 
Somebody made a decision that it was not going to happen. To me, 
I would use that as one of the learning models. Here is what we 
do not want to happen in the future, so here is how our policies 
and procedures are going to make sure this does not happen, be- 
cause you obviously had a problem. Everybody agrees there was a 
problem. The examiner made probably the right recommendation, 
except nothing happened on it. The whole purpose of this is to 
learn, to get better, and to make the changes so that does not hap- 
pen. Any disagreement with that? 

Mr. Curry. No, none at all. Senator Coburn. I think it is impor- 
tant as a supervisor that when we detect significant weaknesses in 
any program, particularly BSA/AML, that the sooner that we take 
appropriate remedial action or corrective action, the better all of us 
are, both the institution, the agency, and the public. 
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Senator Coburn. You made an offer to communicate with this 
Subcommittee on your progress. I would hope that as you do that, 
that situations like this are specifically addressed. Here is what we 
have done to make sure that this does not happen. Here is the poli- 
cies and procedures. And I know this is not easy stuff that you are 
tasked with. Let me say I understand that. But it also is not rocket 
science and key management metrics and culture change to where 
somebody can scream, something is going wrong here, and it is 
heard all the way to the top. 

Mr. Curry. I agree with you completely. Senator Coburn. It is 
also clear that, from the top, that we be clear as to what the objec- 
tive is and what the expectations are, and that is something that 
I intend to do, and to do forcefully. 

Senator Coburn. All right. I think my staff tells me the rest of 
this has been pretty well covered by you. And you have talked 
about the conflict of interest on bank examiners, on examiners 
while I was gone? 

Senator Levin. No. 

Senator Coburn. Well, let us just do that for a moment. Earlier 
this month, the Treasury Inspector General released a report de- 
tailing significant ethical breaches by an OCC national bank exam- 
iner. And I will not go into what those are, but the breaches oc- 
curred at times when he was supposed to be examining their bank 
and he was off doing something else other than that. Also, it was 
noted that he was dishonest on time sheets, etc. 

Based on this one finding, have you had time to look into this 
and to say, is this an isolated incident or is this occurring more 
than we might think, and does this put our examinations at risk? 

Mr. Curry. This particular conduct, which I just recently became 
aware of, is totally unacceptable and reprehensible conduct by a 
bank examiner, and what I find particularly troubling is the poten- 
tial for disrepute that it places on the many fine people, the 3,600 
people who work for the OCC. That is not our standard of ethical 
conduct. We take great pains to advise and to educate our staff 
about what conduct is expected from a bank examiner, particularly 
given the significance of their duties as examiners. So it is trou- 
bling to me. 

The preliminary information I have been able to gather from the 
Treasury IG data is that this appears to be a very isolated case. 
There were only six cases that were reviewed by the IG. And I 
might add that in this particular case, the agency itself referred it 
to the Inspector General of the Treasury to investigate. But only 
three of those six had any merit, and that was over a 3-year period. 
That is not the conduct that I or my colleagues at the OCC expect 
of an examiner. 

Senator Coburn. It speaks well for you, because the complaint 
was initiated by one of your other examiners and so there was re- 
sponsiveness on the part of the OCC to that complaint. 

Mr. Chairman, I yield to you. 

Senator Levin. Thank you very much. Senator Coburn. 

Just a few more questions from me. The question was raised 
with the earlier panel about whether HBUS is complying with the 
2010 cease and desist order which was issued in October of that 
year. Article 9 of the order required the bank within 180 days to 
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install, test, and activate a new wire transaction monitoring sys- 
tem. I understand that there was a supervisory letter which was 
written by the OCC on May 25 of this year informing the bank that 
it was not in compliance with the order and you identified two 
MRAs that instructed the bank to address deficiencies. The two 
MRAs instructed the bank to implement an effective AML auto- 
mated monitoring system and an effective automated alert risk 
scoring prioritization function to identify the more important 
alerts. 

They were supposed to do that in 180 days. It is now 2 years 
later. Are the bank’s deficiencies in how it is monitoring for sus- 
picious activity a problem as far as the OCC is concerned? 

Mr. Stipano. Chairman Levin, you are correct that the OCC did 
recently issue a supervisory letter that cited the bank for non- 
compliance with an article of the cease and desist order concerning 
their automated monitoring system for wire transfers. That is a 
matter that we are currently reviewing along with other current 
examination findings and will be taken into account in any subse- 
quent enforcement actions that we may take. 

Senator Levin. Now, another article of the consent order re- 
quired that the bank retain one or more independent consultants 
to conduct an independent review of account and transaction activi- 
ties, a so-called look back, to determine whether suspicious activity 
was timely identified by the bank and, if appropriate, suspicious 
activity reports were timely filed with law enforcement. Are you 
satisfied that the requirement has been met? 

Mr. Stipano. My understanding is that we are presently looking 
at all areas of potential noncompliance with the cease and desist 
order and we are in a process right now of making some determina- 
tions and we will take appropriate action. 

Senator Levin. Article 8 of that order required that the bank de- 
velop and implement appropriate policies and procedures for gath- 
ering customer due diligence for new and existing accounts. As part 
of that requirement, the OCC directed HBUS to identify accounts 
opened for offshore banks, in other words, for banks with a license 
that prohibits them from conducting banking activities with citi- 
zens of or with the local currency of the country which issued the 
license. I understand that the bank identified having accounts for 
57 offshore banks, of which it will close 23 and keep 33. Has the 
OCC reviewed that effort, and how high of an anti-money laun- 
dering risk is attached to those 33 banks? 

Mr. Stipano. Chairman Levin, I am really not in a position to 
discuss details of the bank’s compliance beyond what I had said 
earlier. We are in the midst of a civil money penalty proceeding. 
We will be looking at the total record of compliance with the docu- 
ment in making our determinations. 

Senator Levin. Also, will you give us for the record, then, also 
whether you have reviewed these accounts where there is a so- 
called politically exposed person because in your order you required 
that the bank’s “know your customer” program identify and con- 
duct an enhanced due diligence review of all accounts opened for 
political figures, which are referred to internationally as politically 
exposed persons. Will you give us for the record the status of that 
effort? 
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Mr. Stipano. I cannot report on the details. I can tell you that 
our examiners, our supervisory staff, and our enforcement attor- 
neys, are very much focused on the level of compliance with our 
document. We will do a thorough review and we will take appro- 
priate action. 

Senator Levin. And will you let us know what that leads to? 

Mr. Stipano. Yes, sir. 

Senator Levin. Has HSBC established an effective program to 
identify the beneficial owners of any bearer share accounts? 

Mr. Stipano. I think that is something that we need to deter- 
mine. 

Senator Levin. OK, and you are going to let us know that? 

Mr. Stipano. Yes, sir. 

Senator Levin. Why should banks open accounts for bearer share 
corporations? Maybe I should ask you, Mr. Curry. Or any one of 
you can answer it. 

Mr. Curry. Given the high-risk nature of those accounts, I do 
not know. 

Senator Levin. Will you take a look at that whole issue because 
it sort of continues. They have said they have taken some steps, 
and I take their word for it. The steps that they identified this 
morning were that they are going to hold those shares in escrow 
or put them with an agent, I believe they said, who would be a reli- 
able agent. But there is a waiver provision in there and that waiv- 
er provision is an easy loophole, I am afraid. I did not ask the 
panel about that at the time. I forgot to do that, and I can ask that 
for the record, as a matter of fact. But take a look at that issue 
and see whether or not the loophole in that new step that they are 
going to take is acceptable to the OCC. 

Mr. Curry. Yes. I would expect that would be a focus of our on- 
going supervision. 

Senator Coburn. Mr. Chairman, I would just add one point. It 
is interesting. We have already established the fact that there was 
some complicity with OCC and HSBC. But there is some irony in 
the fact that this organization that is now going to fine them, I 
wonder who is going to fine you? 

Mr. Curry. No, in terms of accountability, I am accountable and 
I will hold myself accountable and I know you will hold me ac- 
countable. Also, I want to emphasize that the vast majority of the 
people at the Office of the Comptroller of the Currency, particularly 
the supervisory personnel, are committed. They are very proud to 
be commissioned national bank examiners and that pride — we will 
appeal to that pride to make sure that it is evident in the work 
that we do going forward. 

Senator Coburn. I guess my point is, is there is no financial con- 
sequence when we have an agency responsible for something and 
yet fails, but there is a financial consequence to the people that 
were regulated by the agency that actually failed to do what the 
agency was supposed to hold them accountable not to do. That was 
the only point I was making. 

Senator Levin. I agree with that and I also agree that Congress 
has responsibility, too, in our oversight. 

Senator Coburn. And that is why we are here. 
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Senator Levin. That is exactly what this Subcommittee is about 
and other committees and subcommittees are involved in and 
should be involved in. The oversight function is critically important 
and that is our responsibility, to bring about accountability through 
oversight. But it has been missing in many places and in many 
places where it deserves to be applied. That is one of the results, 
I hope, of these hearings and what our Subcommittee has tried to 
do over the years is to promote accountability wherever it needs to 
be achieved. 

I do not have any further questions. Do you have any further 
questions. Senator Coburn? 

Senator Coburn. No. 

Senator Levin. Let me just summarize very briefly, and that is 
that we have seen today what the problems are, and our staffs, 
both of them working together so beautifully as they do, have put 
together a powerful report, a compelling report and it speaks for 
itself, but we have tried to summarize the best we could here 
today. 

HBUS and HSBC have made commitments to improve in a num- 
ber of ways. They have improved by a big increase in the number 
of compliance personnel. The compliance resources have been in- 
creased. The affiliate due diligence requirements that they are put- 
ting in are extremely important. They sure were missing in the his- 
tory so far. They have closed 325 correspondent accounts, including 
those accounts of 55 banks in sanctioned countries, such as Iran, 
Syria, and North Korea. They closed the Cayman accounts, and 
that is a real beginning of some action against these kind of hidden 
accounts kept secret from the world that can be put to such dubi- 
ous purposes as we have seen here today. We have seen, in other 
words, the beginning, we hope, of the cleanup of this global bank, 
and if it happens, it is going to strengthen protections for people 
in countries around the world. 

The OCC has agreed to strengthen its anti-money laundering 
oversight. It is going to treat the failures as safety and soundness 
problems, not just consumer compliance problems. That is going to 
have a very strong impact and a deterrent impact on our banks. 
It will cite statutory violations for banks that fail to meet the re- 
quirements for the four mandatory components of an AML pro- 
gram. It has agreed as part of its strengthening of anti-money 
laundering oversight to have a large bank review whenever a bank 
hits a threshold of a certain number or approximate number of 
MRAs or violations. 

So if everybody carries out the violations — excuse me. If everyone 
carries out the commitments — they have already carried out the 
violations, so if folks carry out all the commitments which we have 
heard about here today, we are going to take a major step towards 
stopping terrorists, drug traffickers, and other wrongdoers from 
misusing and abusing the U.S. financial system for their nefarious 
purposes. 

I want to again thank my colleague and my friend. Senator 
Coburn, and our staffs for the way they worked together and put 
together an extremely powerful report and for helping us to under- 
stand a very complex area. 
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We want to thank you, Mr. Curry, because you have taken over 
a very difficult job. You have done it with gusto. You have brought 
in a real sense of newness and a freshness, a determination to 
clean up that situation at OCC. 

And with that, I will turn to Senator Coburn to see if he has any 
comments. 

Senator Coburn. I just want to thank you all for your coopera- 
tion with us for your straightforwardness. What you have in front 
of you is not easy. Nobody ever said it was easy, but it is really 
important. So I take you, Mr. Curry, at your word that you are 
going to continue to communicate with this Subcommittee because 
decisive action and follow through — it is not enough to have a plan 
to fix this, you have to have a plan that gets executed and then 
monitored, and my hope is that we see a vigorous OCC that is the 
right amount, does not overreact but it is the right amount to do 
what we can do to stop some of the things that are going on that 
really only benefit those of criminal intent. So I thank you for your 
testimony and your time and your patience. 

Thank you, Mr. Chairman. 

Senator Levin. Thank you all. The record will be kept open for 
questions of this panel and all of our other panels and we will 
stand adjourned. 

[Whereupon, at 4:49 p.m., the Subcommittee was adjourned.] 
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‘‘U.S. Vulnerabilities to Money Laundering, Drugs and Terrorist Financing: 
HSBC Case History” 

Today’s hearing will examine the money laundering, drug trafficking, and terrorist financing 
risks created in the United Slates w'hen a global bank uses its U.S. affiliate to provide U.S. 
dollars and access to the U.S. financial system to a network of high risk affiliates, high risk 
correspondent banks, and high risk clients. 

Most international banks have a U.S. affiliate. They use it in part to compete for U.S. clients and 
business, but also to provide themselves with access to the U.S. financial system. Global banks 
w'ant access to U.S. dollars, because they are accepted internationally, are the leading trade 
currency, and hold their value better than any other currency. They want access to U.S. wire 
transfer systems, because they move money across international lines quickly, securely, and to 
the farthest comers of the earth. They want to clear U.S. dollar monetary instruments like 
travelers cheques, bank cheques, and money orders. .And they want the safety, etficiency, and 
reliability that are the hallmarks of U.S. banking. 

The problem here is that some international banks abuse their U.S. access. Some allow affiliates 
operating in countries with severe money laundering, drug trafficking, or Terrorist financing 
threats to open up U.S. dollai' accounts without establishing safeguards at their U.S. affiliate. 
Some operate in secrecy jurisdictions. Some allow poorly managed or corrupt foreign banks to 
make use of an affiliate's U.S. dollar account. Others allow high risk clients to use those 
accounts without taking adequate anti-money laundering steps. Some even allow their affiliates 
to pressure their U.S. cousin to ease up on U.S. anti-money laundering restrictions or look the 
other way when they spot suspicious activity. The end result is that the U.S. affiliate can 
become a sinkhole of risk for an entire network of bank affiliates and their clients around the 
world playing fast and loose with U.S. banking rulc.s. 

The consequences are the ones you w'ould expect from operating a U.S. bank with inadequate 
safeguards against money laundering. The U.S. bank can end up aiding and abetting transactions 
that fund terrorists, drug cartels, corrupt dictators, and tax cheats. Because all of them want 
access to the U.S. financial system, too, and for the same reasons. Wrongdoers can use U.S. 
dollars and U.S. wire transfers to commit crimes, arm terror groups, produce and transport illegal 
drugs, loot government coffers, even pursue weapons of mass destruction. Thaf s why our 
country has made combating money laundering and terrorist financing a national security 
imperative. 
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For the last decade, this Subcommittee has contributed to the battle against money laundering 
and terrorist financing by exposing problems that increase U.S. vulnerabilities to abuse. In 2001, 
for example, this Subcommittee released a report showing how U.S. banks that offer accounts to 
foreign banks, engaging in what is known as correspondent banking, can become conduits for 
illicit proceeds involving organized crime, drug trafficking, or financial fraud. Back then, most 
U.S. banks opened a con'espondent account for any foreign bank with a banking license. After 
our hearing, U.S. banks took a harder look and assessed the risks before opening a correspondent 
account. In 2002, Congress cited our hearings when enacting tougher anti-money laundering or 
AML laws in the Patriot Act, including a provision making it a legal obligation for U.S, banks to 
conduct a due diligence review before opening an account for a foreign bank. 

Tougher AML taws have helped deny criminals access to the U.S. financial system. But as the 
report we’re releasing today shows, enormous problems remain. 

To illustrate those problems, today's hearing focuses on a case study involving HSBC, one of the 
largest banks in the world. LIcadquartered in London, HSBC has a network of over 7,200 offices 
in more than 80 countries, 300,000 employees, and 201 1 profits of nearly $22 billion. HSBC has 
been among the most active banks in Asia, the Middle East, and Africa. It first acquired a U.S. 
presence in the 1980s; today its leading U.S. affiliate is HSBC Bank USA, known as HBUS. 
HBUS has more than 470 branches across the United States and 4 million customers. 

HBUS is the key U.S. nexus for the entire HSBC worldwide network. In 2008, it processed 
600,000 wire transfers per week; in 2009, two-thirds of the U.S. dollar payments HBUS 
processed came from HSBC affiliates in other countries. One HSBC executive told us that a 
major reason why HSBC opened its U.S. bank was to provide its overseas clients with a gateway 
into the U.S. financial system. 

Add on top of that, HBUS’ history of weak anti-money laundering controls, and you have a 
recipe for trouble. In 2003, the Federal Reserve and New York State Banking Department took a 
formal enforcement action requiring HBUS to revamp its AML program. HBUS, which was 
then converting to a nationally chartered bank under the supervision of the Office of the 
Comptroller of the Currency, or OCC, made changes, but even before the OCC lifted the order in 
2006, the bank’s AML program began deteriorating. In September 2010, the OCC issued a 
Supervisory Letter, 3 1 -pages long, describing a long list of severe AML deficieneies, and 
followed in October 20 1 0, with a Cease and Desist order requiring HBUS to revamp its AML 
program a second time. 

The OCC cited, among other problems, a massive backlog of unreviewed alerts identifying 
potentially suspicious activity; a failure to monitor $60 trillion in wire transfers and account 
activity; a failure to examine risks at HSBC’s overseas affiliates before providing them 
correspondent banking services; and a failure, over a three-year period, to conduct anti-money 
laundering checks on more than $ 1 5 billion in bulk-cash transactions with those same affiliates. 

To examine the issues, the Subcommittee issued subpoenas, reviewed more than 1,4 million 
documents, and conducted extensive intcrt'iews with HSBC officials from around the world, as 
well as officials at other banks, and with federal regulators. HSBC has cooperated fully with the 
investigation. 
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The Subcommittee’s work identified five key areas of vulnerability exposed by the HSBC case 
history. The five areas involve: 

• Providing U.S. correspondent accounts to high risk HSBC affiliates without 
performing due diligence, including a Mexican affiliate with unreliable AML 
controls; 

• Failing to stop deceptive conduct by HSBC affiliates to circumvent a screening 
device designed to block transactions by terrorists, drug kingpins and rogue 
nations like Iran; 

• Providing bank accounts to overseas banks with links to terrorist financing; 

• Clearing hundreds of millions of dollars in bulk U.S. dollar travelers cheques, 
despite suspicious circumstances; and 

• Offering bearer-share accounts, a high risk account that invites wrongdoing by 
facilitating hidden corporate ownership. 

Let’s take each in turn. 

High Risk Affiliate. First is the i.ssue of high risk affiliates. HSBC operates affiliates in 80 
countries, including jurisdictions facing major money laundering, drug trafficking, or terrorist 
financing challenges as well as weak AML laws and oversight. Yet, until recently, HSBC’s 
London-based parent company, known as HSBC Group, instructed its affiliates to assume that 
every HSBC affiliate met the group’s AML standards and automatically provide it with 
coiTespondent banking services. HBUS did as told and opened U.S. correspondent accounts for 
more than 80 HSBC affiliates, ignoring the U.S. law' requiring due diligence reviews before 
opening U.S. accounts for foreign banks. 

HBUS’ dealings with an HSBC affiliate in Mexico illustrate the money laundering dangers. 
HSBC Mexico or '“HBMX” operates in a high risk country battling drug cartels; it has had high- 
risk clients such as casas de cambios; and it has offered high risk products such as U.S. dollar 
accounts in the Cayman Islands, a jurisdiction known for secrecy and money laundering. HBMX 
also has a long history of severe AML deficiencies. Add all that up and the U.S. bank should 
have treated HBMX, the Mexican affiliate, as a high risk account for AML purposes. But it 
didn't. 

Instead, HBUS treated HBMX as such a low risk client bank that it didn't even monitor their 
account activity for suspicious transactions. In addition, for three years from mid-2006 to mid- 
2009. HBUS conducted no monitoring of a banknotes account used by HBMX to physically 
deposit billions of U.S. dollars from clients, even though large cash transactions are inherently 
risky and Mexican drug cartels launder U.S. dollars from illegal drug sales. Because our tough 
AML laws in the United States have made it hard for drug cartels to find a U.S. bank willing to 
accept huge unexplained deposits of cash, they now smuggle U.S. dollars across the border into 
Mexico and look for a Mexican bank or casa de cambio willing to lake the cash. Some of those 
casas de cambios had accounts at HBMX. HBMX, in turn, took all the physical dollars it got 
and transported them by amtored car or aircraft back across the border to HBUS for deposit into 
its U.S. banknotes account, completing the laundering cycle. 
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Over two years, from 2007 to 2008, HBMX shipped $7 billion in physical U.S. dollars to HBUS. 
That was more than any other Mexican bank, even one twice HBMX’s size. When law 
enforcement and bank regulators in Mexico and the United Stales got wind of the banknotes 
transactions, they warned HBMX and HBUS that such large dollar volumes were red flags for 
drug proceeds moving through the HSBC network. In 2008, after warnings from regulators, 
HBMX stopped taking large deposits of U.S. dollars, but for years, HBUS provided an easy 
gateway into our financial system for suspicious cash from a foreign affiliate. 

Circumventing OFAC. A second problem involves actions taken by some HSBC affiliates to 
circumvent a U.S. ban on bank transactions involving designated drug traffickers, terrorists, or 
rogue regimes such as Iran. To enforce that ban, the U.S. Treasury Department’s Office of 
Foreign Assets Control, or OFAC, has developed a list of prohibited persons which banks use to 
develop what’s known as an “OFAC filter” to identify and stop prohibited transactions. 

The Subcommittee found that, for years, HSBC affiliates in Europe and the Middle East acted to 
circumvent the OFAC filter when sending U.S. dollar transactions involving Iran through their 
accounts at HBUS. Although they viewed these Iranian transactions as legal under a U.S. 
exception for so-called “U-tum” transactions, the affiliates didn’t want to trigger the OFAC filter 
and undergo the individualized reviews required to make sure. So they stripped out or omitted 
any reference to Iran from the paperwork. An outside auditor hired by HBUS has found that, 
from 2001 to 2007, HSBC affiliates sent nearly 25,000 transactions involving Iran, worth $19.4 
billion, through HBUS and other U.S. accounts, while concealing any link to Iran in 85% of the 
transactions. 

HSBC’s Chief Compliance Officer and other senior executives in London knew what was going 
on, but allowed the deceptive conduet to continue. While some HBUS officials in the United 
States claim not to have knowm they were processing undisclosed Iranian transactions, 
documents show key HBUS officials were informed early on. HBUS compliance and payments 
executives repeatedly told HSBC affiliates they had to use fully transparent Iranian transactions, 
but when faced with evidence that the affiliates were secretly circumventing the OFAC filter, no 
one in HBUS confronted those affiliates, brought the issue to a head, and forced the transactions 
to the light. Problems also arose when some HSBC affiliates tried to circumvent the OFAC filter 
to send potentially prohibited transactions involving other countries like Sudan or North Korea. 

OFAC programs are aimed at exposing and disabling the financial dealings of some of the most 
dangerous persons and regimes in the world today, including terrorists, persons involved with 
w eapons of mass destruction, drug traffickers, and rogue jurisdictions. The OFAC filter is the 
key to blocking prohibited transactions from polluting the U.S. financial system. Global 
financial institutions have a special responsibility to respect OFAC prohibitions, but that’s not 
what happened here. While HSBC affiliates may have been aiming simply at avoiding 
processing delays, circumventing OFAC safeguards can also facilitate transactions undertaken 
by some of the world’s worst wrongdoers. 

Disregarding Links to TerrorLst Financing. A third issue involves the fact that HSBC is active 
in regions of the w orld with significant terrorism challenges, while demonstrating a w orrisome 
willingness to do business with banks that have links to terrorist financing. One example 
involves A1 Rajhi Bank, the largest private bank in Saudi Arabia, After the 9/1 1 terrorist attack 
on the United States, evidence emerged that the bank’s key founder was an early financial 
benefactor of al Qaeda and that it provided accounts to suspect clients. 
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In 2005, HSBC Group told its affiliates to sever ties with the bank, while making an exception 
for HSBC Middle East. Four months later, without explaining why, HSBC Group reversed itself 
and said all of its affiliates could decide whether to do business with A1 Rajhi Bank. HBUS 
chose to close its A1 Rajhi accounts. Over the next two years, however, its own bankers and 
bankers from other HSBC affiliates pressed HBUS to resume ties with A1 Rajhi Bank. In 2006, 
after A1 Rajhi Bank threatened to pull all of its business from HSBC unless HBUS reinstated its 
U.S. dollar banknotes account, HSBC gave in. Over the next four years, HBUS supplied Al 
Rajhi Bank with nearly $1 billion in U.S. dollars, stopping only when HSBC made a global 
decision to exit the banknotes business altogether. 

Clearing Suspicious Bulk Travelers Cheques. The fourth area of concern involves HBUS's 
willingness to clear suspicious bulk travelers cheques for foreign banks. From 2005 to 2008, on 
a regular basis, HBUS cleared $500,000 or more per day in bulk travelers cheques for Hokuriku 
Bank of .lapan. Routinely, these cheques arrived in large stacks of sequentially numbered 
cheques signed and countersigned with the same illegible signature. Forced by the OCC to 
investigate, HBUS found the .lapanese bank could not provide any “know your client” 
information or explanation why two dozen of its customers, supposedly in the used car business, 
were often depositing $500,000 a day in U.S. dollar travelers cheques purchased from the same 
bank in Russia. Under OCC pressure, HBUS stopped clearing the travelers cheques in 2008, but 
kept open the correspondent account, despite the Japanese bank’s poor AML controls. In less 
than four years, HBUS provided over $290 million in U.S. dollars to a Japanese bank for the 
benefit of Russians supposedly in the used car business. 

Offering Bearer Share Accounts. Finally, there is HBUS’s willingness to offer accounts to 
bearer share corporations. These corporations are prime vehicles for money laundering and other 
illicit activity by providing anonymity through assigning legal ownership of the corporation to 
whomever has physical possession of its shares. Over a decade, HBUS opened accounts for 
2,000 such corporations, despite warnings by internal auditors and outside regulators that the 
accounts posed high money-laundering risks. Documents show the actual account owners 
deliberately pressured the bank to help hide their identities. One such account was used by a 
father-son team of Miami Beach hotel developers who were later convicted of tax fraud for 
hiding $150 million in assets. 

Bearer share accounts, suspicious travelers checks, banks with terrorist financing links, hidden 
transactions dodging OFAC safeguards, and Mexican drug money - none of them repre.sent the 
types of transactions we want in a U.S. bank. If the parent corporation of a global bank can't do 
a better job policing its affiliates, we shouldn’t be providing a bank charter to their U.S, affiliate. 
If the U.S. affiliate can't do a better job of standing up to affiliate pressures and safeguarding the 
U.S. financial system, federal regulators should consider w'hether to pull its charter. 

HSBC Group recently issued a policy statement declaring that all of its affiliates would be 
subject to the highest AML standards among them; that its affiliates would start sharing 
infomnation to strengthen their AML defenses; and that all affiliates would be subject to 
diligence reviews. HBUS has more than doubled the size of its AML compliance department, 
put in a new AML monitoring system, and closed over 395 high risk correspondent accounts. 

All good steps, but we saw this movie before in 2003. The recent commitments are surely 
welcome. Apologies and promises to improve are also welcome. But accountability for past 
conduct is essential, and that’s what’s been missing here, 
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Exercising Ineffective AML Oversight. It is bad enough that a single bank such as HSBC 
exposes the U.S. financial system to multiple money laundering risks. It is made worse when 
there is a failure of AML oversight by the OCC which is supposed to oversee our biggest banks. 
It is of great concern to the Subcommittee, and should be of great concern to every American, 
that the OCC tolerated the mounting AML problems at HBUS for five years, without taking any 
formal or informal enforcement action. In addition, when the OCC decided the problems had 
gone far enough, it lowered HBUS’ consumer compliance rating instead of its safety and 
soundness rating. Every other federal banking agency treats AML deficiencies as a matter of 
safety and soundness; only the OCC treats AML deficiencies as if they were a matter of 
consumer protection law. AML safeguards aren’t aimed at protecting bank customers, but rather 
the entire American public from wrongdoers seeking to misuse the U.S. financial system. 

The OCC’s new leadership needs to move swiftly to correct the previous oversight shortfalls and 
assure that promised changes at HSBC arc implemented promptly and effectively. 

Our report contains ten recommendations to address the abuses we’ve identified. Among the 
most important: 

• HBUS should identify which of its sister affiliates are high risk, subject them to 
enhanced monitoring, and in particular review whether it should close the account 
of HSBC’s Mexican affiliate. 

• HBUS should beef up its OFAC compliance program by auditing affiliate 
transactions to see if they are circumventing the safeguards that protect our 
country and other countries from terrorists, drug traffickers, and rogue 
jurisdictions. 

• HBUS should close accounts with banks suspected of involvement in terrorist 
financing, revamp its travelers cheque controls, and eliminate bearer share 
accounts. 

• HSBC should require affiliates to share information to strengthen their AML 
defenses, and continue to beef up its compliance program which was given short 
shrift in the past. 

• At the OCC. the agency should follow the lead of other regulators and treat AML 
compliance as a matter of safety and soundness. 

• The new OCC leadership needs to get the OCC moving against money laundering 
by citing statutory violations, not just identifying failures as Matters Requiring 
Attention, in the face of AML deficiencies. 

Global banks have caused the w'orld a lot of heartache. Our focus today is one global bank that 
failed to comply with rules aimed at combating terrorism, drag trafficking, and the money 
laundering that fuels so much of what threatens the global community. I want to thank my staff 
for their extraordinary work, Ranking Republican Senator Cobum for all his support and the 
work of his staff, and turn to him now for his opening statement. 


6 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00104 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



91 


VerDate Nov 24 2008 


Opening Statement of Senator Tom Coburn 

Hearing of the 

U.S, Senate Permanent Subcommittee on Investigations 
“U.S, Vulnerabilities to Money Laundering, Drugs, and Terrorist Financing: 
HSBC Case History” 

July 17,2012 


1 would like to thank Chairman Levin for holding this important hearing and for his 
tireless work to raise the issue of safety and soundness within the hanking industry. 

I would also like to thank both the Office of the Comptroller of the Currency and HSBC 
Bank for their full cooperation in this investigation. The OCC provided a number of 
people for interviews as well as essential documents about the regulatory process. HSBC 
Bank officials likewise sat for dozens of interviews and handed over millions of pages in 
doeuments. Some of today’s witnesses were flown in from posts around the w'orld. 

As Chairman Levin laid out in his statement, the Subcommittee’s investigation into anti- 
money laundering and anti-terror finance efforts at HSBC has covered quite a bit of 
ground. PSI examined in detail the types of vulnerabilities our nation faces from 
criminals and terrorists who want to take advantage and abuse our banking system and 
take away out freedoms. What we learned is that the United States faces unique risks, 
both because of our post-9/ 1 1 security needs and because of the strength of our financial 
system, which attracts worldwide attention. 

Every day, countless transactions denominated in U.S. dollars occur around the world. 
This is good for our economy, which benefits from a strengthened currency and increased 
economic activity. But, criminals around the globe arc also drawn to U.S. banks, which 
offer the attractive option of making their illicit funds look legitimate. If they can pass 
criminal proceeds through a U.S. bank unnoticed and untouched, the funds are unlikely 
ever to be stopped or recovered. 

This hearing raises big and important questions. Banks want to obey the law, but also 
grow their businesses - what happens w'hen the two conilict? Banks want to know their 
customers, but some customers want privacy - how do we resolve this? As we write 
AML policy, we should look for ways to get all boats rowing in the same direction, 
letting banks and government each do what they do best as we all work to combat crime 
and terror. 

At HSBC, we uncovered a number of troubling examples in which weak AML systems 
may have let criminal or terrorist funds pass through. In Mexico, for example, billions of 
U.S. dollars flowed from the HSBC affiliate in Mexico. The Mexico affiliate was the 
single largest exporter of U.S. dollars in Mexico to HBUS. U.S Law enforcement and the 
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regulatory entities have concluded that because of the volume of money, it likely came 
from proceeds of the illegal drug trade. 

In another case, an Iranian bank was allowed to initiate U.S. dollar transactions that 
HSBC would process through the U.S. without explaining where they came from. At the 
time, however, there were severe legal restrictions on any payments come from or going 
to Iran, most often meaning they would be manually inspected. HSBC’s affiliate in 
London coached the Iranian bank how to get the payments through the U.S. without 
inspection, and simply requested the bank send transactions that would not violate U.S. 
law. In effect, it relied exclusively on an Iranian bank to comply with a law intended to 
catch payments from Iranian banks. The bank or the officials that made that decision 
were either naive or willfully blind. 

This is why tough anti-money laundering laws are important, if illicit funds can be 
tracked and stopped, there are fewer places for criminals and terrorists to hide. And 
while our focus has been on the problems we found at HSBC Bank, we also have to 
emphasize that similar problems exist at other banks. For example, Citbank, Bank of 
America, Wachovia, Western Union and others have come under scrutiny for laundering 
drug cartels profits 

The purpose of this hearing, then, is not just to make an example of HSBC, as if it were 
an anomaly. Rather, this hearing is to help Congress understand just what kind of risks 
this nation faces, and what we should do to reduce them. If we can get a better handle on 
the risks by looking closely at the operations of a single bank, we can write better laws 
and achieve our true goals: stopping crime and preventing terror, 

With that in mind. I believe there are several lessons we can learn from the problems we 
uncovered at HSBC Bank. 

First, banks around the world operate under different laws, creating different sensitivities 
to money laundering. While this seems apparent, it was not clear how much this would 
affect a bank with worldwide affiliates until we took a closer look. In the case of HSBC, 
its bank in the U.S. operated differently even than its owm affiliates in London, Mexico 
and Middle East. Failure to recognize this can lull us into thinking w'e can rely on foreign 
banks to carry out U.S. law. 

Second, bank regulators are sometimes better at identifying money laundering 
vulnerabilities than knowing how to fix them. Throughout this inquiry, it became clear 
the Office of the Comptroller of the Currency (OCC) was aware of many of HSBC’s 
AML weaknesses, which it frequently pointed out. It was often at a loss, however, to 
prescribe how HSBC could eliminate the weaknesses. And so its record of enforcement at 
HSBC resembles a lapdog rather a watchdog that w'e sorely need. 
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We have also learned recently that investigators from freasury’s own Office of Inspector 
General have cited OCC personnel for unethical practices. The IG found an OCC 
examiner-in-charge accepted gifts, meals and even golf fees from executives at banks he 
was actively overseeing. This unfortunately was not an isolated incident, but other OCC 
employees were involved in other ethical violations. Taken together with our 
Subcommittee’s findings in this investigation, these conflicts are startling and suggest 
Congress should give closer scrutiny to the OCC’s actions. 

That purpose here is to stop criminals from hiding their illicit funds and preventing 
terrorists from having the freedom to plot and plan. The metrics we use to measure a 
bank’s AML compliance need to focus less on form and more on substance - how well 
are we achieving this goal? 

This committee has shown the kinds of vulnerabilities we face. Too often what we found 
left us troubled, both for the risks to our nation and for the level of effort we saw to 
eliminate them. HSBC made its share of mistakes, and for which it is now being held 
accountable. 

But we must all remember that money laundering always begins with a crime, and this 
ultimately is what we mean to fight. To the extent that this hearing results in criminals 
and terrorists having fewer options to roh and harm the American public, we will count it 
a success. 

It may be impossible to stop all money laundering. Most of what we cal! money 
laundering in a certain context is a benign transaction in another. Buying travelers checks 
is innocent behavior for the tourist, but suspicious behavior when they are purchased in 
bulk by terrorists or drug lords. This does not mean we should not try to stop criminals 
from laundering their money through U.S. banks, but rather we need to do so wisely. 

I appreciate the efforts made at fISBC to improve their AML systems, and sincerely hope 
that they stick. I look forward to hearing from their witnesses, as well as those from the 
OCC, and appreciate their appearance before us today. 
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I. Introduction 

Chairman Levin, Ranking Member Cobum, distinguished members of the Subcommittee, thank 
you for inviting me to testify today. 1 am pieased to have the opportunity to discuss the 
importance of the Department of the Treasury’s efforts to identify and combat money iaundering 
and terrorist financing vuinerabiiities in the U.S. banking sector. I wouid aiso iike to commend 
this Subcommittee for the leadership it has demonstrated historically and again today by 
focusing much-needed attention on these critically important issues. 

At the outset, it is important to recognize that the United States maintains one of the strongest 
and most effective anti-money laundering and counter-terrorist financing (AML/CFT) regimes in 
the world. But the scale, efficiency and sophistication of the United States’ financial system — 
particularly its banking sector — make it a prime target for those w'ho seek to conceal and move 
illicit money. This involves not just money launderers, of course, but terrorists, prolifcrators, 
drug lords and organized crime figures, who must, at some point, rely on the financial system to 
move or launder the illicit funds supporting or derived from their operations. 

Recent enforcement actions against financial institutions in the United States are a powerful 
reminder to us that challenges remain. To meet these challenges, we closely monitor evolving 
threats and work to adapt and strengthen our anti-money laundering and counter-terrorist 
financing and sanctions policies, regulations and authorities. This work is a key component of 
our government’s national security efforts — it serves to protect the integrity of our financial 
system from abuse by terrorists, drug traffickers and other illicit actors and gives us tools to 
impede and halt their dangerous activities. 

Several primary authorities and activities drive the Treasury Department’s work to combat 
money laundering and terrorist financing. They include our role through the Financial Crimes 
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Enforcement Network (FinCEN) as administrator of the Bank Secrecy Act (BSA), which enables 
us to impose special regulatory measures and requirements to combat money laundering and 
terrorist financing on a broad array of financial institutions. They also include authorities 
delegated to us by Executive Orders issued pursuant to the International Emergency Economic 
Powers Act (lEEPA) to impose financial and economic sanctions, based on all-source 
intelligence, to disrupt and dismantle illicit financial networks, such as those that support 
W'eapons of mass destruction, proliferation, drug traffickers, transnational organized criminal 
groups and terrorists. Given the maturity, scope and depth of the anti-money laundering and 
counter-terrorist financing regime today. Treasury works closely with its interagency partners in 
the regulatory, law enforcement, and national security communities, as well as the private sector, 
to combat the various illicit financing threats we face. Furthermore, given the increasingly 
global nature of the financial system, our efforts to strengthen our own anti-money laundering 
and counter-terrorist financing regime rely on cooperation and collaboration with international 
counterparts. 


II. Nature and Scope of the Threat 

Financial crime and associated money laundering activity are difficult to measure with great 
precision. But by any estimate, the total amount of illicit money moved through and concealed 
within the U.S. financial system is massive — in the hundreds of billions — even if it represents 
only a small percentage of the funds in the financial system. 

The sheer volume of money moving through the banking system makes banks the primary and 
most important line of defense against money laundering and terrorist financing. Therefore, our 
regulatory framework was built to require banks and other financial institutions to take a number 
of precautions against financial crime, including the establishment of AML programs and 
reporting and record keeping requirements to provide useful information to law enforcement and 
national security authorities for the purpose of combating the full range of illicit finance. This 
includes screening clients and transactions against Treasury’s Specially Designated Nationals 
(SDN) List — a list of drug traffickers, proliferators, terrorists and other illicit actors or entities — 
to help ensure that funds associated with these actors do not enter the financial system. This 
regulatory framework aids banks in identifying and managing ri.sk, provides valuable 
information to law enforcement, and creates the foundation of financial transparency required to 
apply targeted financial measures against the various national security threats that seek to operate 
within the financial system. 

However when these safeguards are not stringently enforced, money launderers, terrorist 
financiers and other illicit actors are able to take advantage of the U.S. financial system. Some 
recent civil enforcement actions by FinCEN and the federal banking regulators illustrate how this 
can occur: 

• In one case, failure to effectively monitor foreign correspondent banking relationships 
with high-risk customers and file suspicious activity reports (SARs) resulted in the 
processing of $420 billion in cross-border financial transactions with thirteen high-risk 
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Mexican casas de carnhio from 2004-2007, through wire transfers, bulk cash and pouch 
and remote deposits, including millions of dollars subsequently used to purchase 
airplanes for narcotics traffickers. 

• In several cases, foreign banks “stripped” out the names of Iran or other sanctioned 
entities in transactions routed through the United States, resulting in billions of dollars of 
benefits to sanctioned parties. A Swiss bank developed elaborate procedures to alter 
payments and used code names to disguise identities of sanctioned entities. A Dutch 
bank used misleading payment messages, shell companies and even advised sanctioned 
clients on how to conceal their involvement in U.S. dollar transactions. 

• One bank’s failure to have a written AML policy and inadequate procedures to ensure the 
timely reporting of suspicious activity resulted in the processing of billions of dollars 
through accounts controlled by thirteen Mexican casas de cambio in just one year 
without filing suspicious activity reports. 

• Inadequate AML staffing and procedures at another bank resulted in deficient monitoring 
and subsequent processing of large volumes of traveler’s checks and third party checks 
indicative of money laundering, including through sequentially numbered instruments. 

On account of these and other substantial vulnerabilities in anti-money laundering and counter- 
terrorist financing and sanctions compliance, the United States government has instituted 
criminal fines and forfeitures totaling more than $4.6 billion in approximately 20 BSA and 
lEEPA criminal prosecutions of financial institutions over the past 6 years. 

These civil and criminal enforcement actions reveal not only how illicit financiers abuse our 
banking system, but also how compliance with our anti-money laundering and counter-terrorist 
financing and sanctions requirements is eritical to protecting our financial system from such 
abuse. 


III. Improving Our AML/CFT Regime 

These cases also point to significant vulnerabilities in the framework and enforcement of anti- 
money laundering and counter-terrorist financing requirements that require immediate attention. 
Treasury is working together with its interagency partners and the private sector to better 
understand the anti-money laundering and counter-terrorist financing and compliance challenges 
faced by financial institutions, clarify U.S. government expectations of financial institutions, and 
strengthen the overall anti-money laundering and counter-terrorist financing regulatory regime. 1 
will briefly outline just a few of our efforts. 

Ongoing Targeting of Illicit Actors 

One of the most important activities for which my office is responsible is the listing of illicit 
actors on OFAC’s SDN list. As banks and financial institutions screen their business dealings 
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against the sanctioned entities on this list, they are able to prevent the entrance of terrorist fiinds, 
drug-trafficking proceeds or other illicit money into our formal financial system, or freeze 
transactions by designees where they occur. All major global banks, and many smaller foreign 
ones, screen transactions against the OFAC list to protect themselves, even though they are not 
required to do so. This markedly amplifies the impact of our sanctions by preventing the 
movement of illicit funds by terrorists, organized crime figures or proliferation networks outside 
of U.S. jurisdiction. We watch closely for illicit actors evading anti-money laundering and 
counter-terrorist financing controls at banks in the U.S. and abroad and for their attempts to seek 
“back door” entry into the financial system, including through the various evasive tactics evident 
in the cases described above. 

Customer Due Diligence Advance Notice of Proposed Rulemaking 

Customer due diligence, and the financial transparency it facilitates, is central to our efforts to 
combat all manner of illicit financial activity, from proliferation and terrorist financing to more 
traditional forms of financial crime like money laundering and securities fraud. Treasury issued 
an Advance Notice of Proposed Rulemaking (ANPRM) on March 4 to clarify, consolidate and 
strengthen customer due diligence requirements for financial institutions, including an obligation 
to collect beneficial ownership information. This rulemaking will improve financial institutions’ 
ability to detect suspicious activity and provide more useful information to law enforcement. 

The comment period for the ANPRM closed on June 1 1 and Treasury will hold the first in a 
series of public hearings to collect additional comments on July 3 1 . Our engagement with 
industry in the customer due diligence rulemaking process is facilitating a broad understanding 
of higher risk type accounts and transactions with respect to money laundering and terrorist 
financing, and how we can work with industry and our interagency partners to better identify and 
manage such risks, including through more effective anti-money laundering and counter-terrorist 
financing safeguards. 

Enhancing Transparency in the Company Formation Process 

Criminals can easily disguise their ownership and control of illicit proceeds through shell 
companies and other seemingly impenetrable legal structures. We are working closely with you, 
Mr. Chairman, and other members of Congress to enact legislation requiring disclosure of 
beneficial ownership information in the company formation process. 

Promoting and Strengthening the Globai AML/CFT Framework 

Helping to strengthen anti-money laundering and counter-terrorist financing regimes abroad has 
a direct benefit to the safety and integrity of the U.S. financial system, given the global nature of 
money laundering and the terrorist financing threat and the relationships between banks abroad. 
The Office of Terrorism and Financial Intelligence (TFl) w'orks with others in the U.S. 
government to strengthen the global anti-money laundering and counter-terrorist financing 
framework as a foundation for the effective implementation of sound financial controls 
worldwide. Several intergovernmental and international organizations, such as the Financial 
Action Task Force, the IMF, the World Bank, the United Nations, and various FATF-style 
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regional bodies, collectively develop, assess and facilitate jurisdictional implementation of 
measures that are essential to combating various forms of illicit finance. Treasury and its 
interagency partners play a key leadership and participatory role in these organizations as well as 
other organizations that support our capacity building objectives, lending technical expertise in 
standard-setting, evaluation and policy recommendations related to the combating of money 
laundering, terrorist and proliferation financing. One of the key substantive accomplishments 
that we have achieved in developing the global anti-money laundering and counter-terrorist 
financing framework is to integrate targeted financial sanctions against terrorist financing and 
proliferation finance into the global standards for combating money laundering. This is some of 
the most innovative work my office conducts and an area in which we are able to urge the 
international community forward in highly constructive ways. 


IV. Conclusion 

I began today’s testimony by noting that the U.S. is home to one of the strongest anti-money 
laundering and counter-terrorist financing systems in the world. In order to continue in this role, 
we must push ourselves to identify where we can do better, and work tirelessly to get there. 

I look forward to continuing work with this committee to this end. 

Thank you. 
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INTRODUCTION 

Chairman Levin, Ranking Member Cobum, and distinguished members of the 
Subcommittee: 

On behalf of Secretary Napolitano and Director Morton, thank you for the opportunity to 
appear before you today to discuss the efforts of U.S. Immigration and Customs Enforcement 
(ICE) to combat transnational criminal organizations (TCO) and the illicit proceeds used to fund 
their criminal activities. With expansive investigative authority, ICE is well-positioned, in 
partnership with U.S. Customs and Border Protection (CBP), to disrupt and dismantle 
transnational criminal networks and terrorist organizations that seek to exploit our borders and 
America’s legitimate trade, travel, communications, and financial systems. 

ice’s expertise in combating TCOs that take advantage of vulnerabilities in the sea, air, 
and land environments has proven essential in countering the smuggling of narcotics, money, 
dangerous goods, people, and materials that threaten the well-being of the United States. Our 
law enforcement presence is global, and ICE’s Homeland Security Investigations (HSl) has a 
wide network of agents in Attachd offices at embassies and consulates worldwide, all working in 
concert to target TCOs. 

lUicU Finance and Bulk Currency 

One of the most effective methods for dismantling TCOs is to attack the criminal 
proceeds that are the lifeblood of their operations. HSI takes a holistic approach toward 
investigating money laundering, illicit finance, and financial crimes by examining the ways that 
individuals and criminal organizations earn, move, store, and launder their illicit proceeds. 
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The combination of successful financial investigations, reporting requirements under the 
Bank Secrecy Act (BSA) of 1970, and anti-money laundering compliance efforts by financial 
institutions has no doubt strengthened banking systems and forced criminal organizations to seek 
other means to diversify the movement of illicit funds, such as the use of money service 
businesses (MSB), prepaid access devices, and bulk cash smuggling. 

HSI’s broad jurisdiction includes the enforcement and investigation of money laundering 
and bulk cash smuggling violations. In FY 201 1, HSI special agents initiated more than 4,270 
financial investigations, resulting in: more than 1,770 arrests; over 1,070 criminal indictments; 
more than 1,040 criminal convictions; and more than 7,700 seizures worth approximately $359 
million, including $33 1 million in currency and monetary instruments. 

National Bulk Cash Smuggling Center 

On August 1 1, 2009, HSI officially launched the National Bulk Cash Smuggling Center 
(BCSC), in cooperation with the El Paso Intelligence Center, as a 24/7 investigative support and 
operations facility. The BCSC has undertaken a full assessment of the bulk cash smuggling 
threat and developed a strategic plan to addre.ss the problem. By analyzing the movement of bulk 
cash as a systematic process, HSI develops enforcement operations specifically designed to 
combat the various methodologies currently employed by trafficking organizations. This 
targeted approach allows us to more efficiently and effectively utilize our interdiction and 
investigative resources. 

Since its inception, the BCSC has initiated over 500 criminal investigations resulting in 
132 seizures totaling $65,8 million. These investigations have culminated in 
319 criminal arrests, 96 indictments, and 68 convictions in both Federal and state courts. The 
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BCSC has also provided training and outreach to over 21,000 state. Federal, and international 
partners. 

As an example of a recent success, in April 2012, the BCSC coordinated with HSl field 
offices in St. Louis, Missouri, and Greeley, Colorado, in support of a controlled delivery of 
illicit bulk cash proceeds of nearly $265,000. The initial seizure was the result of a traffic stop, 
but agents developed additional information based on this initial seizure to successfully execute 
a second controlled delivery of the currency, which resulted in the seizure of an additional 
$385,359 in U.S. currency, over seven kilograms of cocaine, two handguns, and five vehicles, 
and in seven arrests. 

Operation Firewall 

HSTs Operation Firewall disrupts the movement and smuggling of bulk cash en route to 
the border, at the border, and internationally via commercial and private passenger vehicles, 
commercial airline shipments, airline passengers, and pedestrians. Since 2005, Operation 
Firewall has been enhanced to include surge operations targeting the movement of bulk cash 
destined for and crossing the U.S. borders with Mexico and Canada, and joint interdiction efforts 
and investigations with our foreign law enforcement counterparts. 

Through May 3 1, 2012, Operation Firewall has resulted in more than 6,700 seizures 
totaling more than $621 million, and arrests of over 1,400 individuals. These efforts include 480 
international seizures totaling more than $271 million and 310 international arrests. 


4 


VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt076061 POOOOOO Frm00116 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



103 


Cornerstone Outreach Initiative 

In July 2003, ICE launched its Cornerstone Outreach Initiative to work in partnership 
with the private sector to systematically and strategically identify and eliminate vulnerabilities in 
financial systems through which criminals launder their illicit proceeds. Under this initiative, 
HSI builds both domestic and international partnerships by sharing law enforcement trends and 
methods with businesses and industries that manage the systems that terrorists and criminal 
organizations seek to exploit. 

To the extent permitted by law, HSI shares what we learn through our investigations with 
the private sector to assist them in identifying and preventing attempts by criminal organizations 
to take advantage of weaknesses in financial systems. HSI special agents serve as subject matter 
experts in various types of money laundering methods, including fraudulent schemes, money 
service businesses, casinos, non-cash negotiable instruments, alternate remitters, charities, 
outbound currency initiatives, organized retail crime, and schemes to pay illegal alien workers. 

Through May 31, 2012, HSI special agents have conducted nearly 12,000 Cornerstone 
outreach and training presentations to 248,000 participants worldwide. Our outreach efforts have 
resulted in the initiation of 950 criminal investigations that led to 290 arrests, 270 indictments, 
228 convictions, and the seizure of nearly $668 million. 

Trade-Based Money Laundering (TBML) 

TBML is a money laundering method through which TCOs earn, move, and store illicit 
proceeds by disguising them as legitimate trade. TCOs often exploit global trade networks to 
move value around the world, using the complex and sometimes confusing documentation that is 
frequently associated with legitimate trade transactions. To illustrate, Colombian drug cartels 
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use TBML extensively to repatriate drug proceeds in a scheme commonly referred to as the 
Black Market Peso Exchange. 

Money and value transfer systems not subject to regulation or supervision, in violation of 
the international standards, such as underground banks and unlicensed money service businesses, 
are utilized by TCOs to move value via trade as settlement of a debt arising from remittances 
overseas. These organizations can accomplish settlement by purchasing commodities in one 
country and then transferring them to another country where the commodity is sold and the 
proceeds remitted to the intended recipient. 

HSl is uniquely positioned to disrupt and dismantle TCOs that seek to launder illicit 
proceeds through manipulation of international trade and financial systems. Through HSl’s 
Trade Transparency Unit (TTU), ICE is the only U.S. law enforcement agency partnering with 
foreign nations to exchange trade data. 

HSl currently has foreign TTU partnerships with Mexico, Panama, Brazil, Colombia, 
Ecuador, Argentina, Paraguay, and Guatemala. Through these partnerships, HSl is able to 
identify, investigate, and prosecute TCOs engaged in TBML and other forms of illicit finance. 
HSTs TTU, our special agents, and intelligence analysts in the field, along with foreign customs 
and law enforcement agencies responsible for border control and enforcement of financial 
crimes, utilize a HSl TTU-owned and developed computer system called the Data Analysis & 
Research for Trade Transparency System (DARTTS) to analyze trade and financial data. 

DARTTS is capable of identifying international trade anomalies and financial 
irregularities indicative of TBML, customs fraud, contraband smuggling, and other crimes. For 
example, DARTfS allows users to quickly analyze large amounts of data in a short period of 
time, thereby maximizing limited time and resources. HSl field agents and analysts frequently 
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employ DARTTS’ unique capability to conduct data research and analysis to initiate and or 
further criminal investigations. This analysis goes beyond conventional database queries and 
link analysis tools as part of HSI’s efforts to combat and address the global threat posed by 
TBML. 

TTU methodology has been highlighted in numerous U.S. Government publications 
including The National Money Laundering Threat Assessment, the U.S. Department of the 
Treasury’s National Money Laundering Strategies, and the U.S. Department of State's 
International Narcotics Control Strategy Reports. It was also recognized as a “best practices 
approach” by the Financial Action Task Force, the international standard-setting body on 
countering money laundering and terrorist financing, originally established by the Group of 
Seven member states, the European Commission and eight other countries to examine and 
develop measures to combat money laundering and terrorists financing. 

Other countries have shown increased interest in establishing and developing their own 
TTU. Many of the TfUs established, most recently in Colombia and Guatemala, have benefited 
from the funding and support of the State Department’s Bureau of International Narcotics and 
Law Enforcement Affairs. Future funding to expand the TfU network is under consideration. 

Other Evolving Methods Including Prepaid Cards and Stored- Value Devices 

The terms “prepaid card” and “stored value card” (collectively “prepaid access devices”) 
are commonly used to refer to any card that represents money stored on or accessible by a card to 
facilitate a consumer’s purchase of goods, services, or further conversion to cash through an 
ATM. These cards may be “open loop” or “closed loop.” Open loop cards are usually network 
branded (such as Amex, Discover, MasterCard, or Visa), often reloadable, and can be used at 
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point of sale at terminals and ATMs anonymously. Closed loop cards, on the other hand, are 
designated for use at a specific merchant, typically have load limits, and cannot be converted 
back to cash. Examples of closed loop prepaid access devices include gift cards, mass transit 
cards, and prepaid phone cards. 

According to the 2007 U.S. National Money Laundering Strategy, “stored value cards 
(sometimes referred to as prepaid cards) are an emerging cash alternative for both legitimate 
consumers and money launderers alike.” Of the two types, money launderers appear to prefer 
the open loop prepaid access devices because of their capability of being used at point of sale 
terminals, their wide acceptance by hotels and car rental agencies, and their portability. These 
cards enable the user to obtain cash from ATMs worldwide without going through a currency 
exchange. 

Additionally, cards issued by offshore financial institutions and, therefore, not subject to 
U.S. reporting requirements, are widely available on the Internet, including cards with very high 
load limits. Prepaid access devices may be attractive to money launderers and smugglers as an 
alternative to bulk eash not only beeause their small size and portability make them difficult to 
detect in the manner that we detect bulk cash, but also because they are not expressly defined as 
monetary instruments under U.S. statutes and regulations. Therefore, they are not yet expressly 
and specifically subject to the CMIR reporting requirements or the potential bulk cash smuggling 
and structuring violations that stem from this requirement. 

The Credit Card Accountability, Responsibility, and Disclosure Act of 2009, signed into 
law in May 2009, mandated that the U.S. Department of the Treasury (Treasury), in consultation 
with DUS, address the risks associated with these cards. USl has worked with our law 
enforcement partners and the Treasury Department’s Financial Crimes Enforcement Network to 
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close vulnerabilities associated with prepaid devices. This resulted in the publication of a final 
rule that applies the Bank Secrecy Act to the domestic prepaid device industry and the 
publication of a Notice of Proposed Rulemaking that proposed to classify prepaid access devices 
as monetary instruments for the purposes of cross-border declaration. This proposed rule is 
currently being finalized as Treasury reviews and addresses the public comments. We look 
forward to the final publication of this rule in the near future. 

One of the most significant developments in recent years was a change in Mexican 
banking regulations implemented in June 2010 that severely limits the amount of U.S. dollars 
that can be deposited within Mexican financial institutions. This change has ultimately proven to 
be a successful tool in combating drug trafficking and the TCOs that control the movement and 
smuggling of drugs by causing them to change how drug proceeds are laundered. We believe 
that as a result of this change, TCOs may seek to place these funds into U.S. financial institutions 
and then wire the proceeds back to Mexico. We continue to work closely with the Government 
of Mexico (GoM) to identify emerging money laundering trends. 

Domestically, we have seen changes in how illicit proceeds are moved within the 
United States. In the last several years, we have seen domestic drug organizations attempt to 
place illicit funds into U.S. financial institutions to avoid currency transaction reporting 
requirements. In one version of this scheme, which is referred to as the “funnel account” model, 
drug organization members in destination cities make structured cash deposits into bank accounts 
opened in the United States. In turn, the account holder (a nominee for the drug organization) 
will withdraw funds at various banking institutions in the United States and turn them over (often 
minus a small fee) to the drug organization. The scheme has been difficult for bank anti-money 
laundering personnel to identify. 
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This tactic was initially identified in human smuggling organizations operating in 
Arizona, but we have since seen its use expanded to domestic drug organizations. We believe 
that the emergence of this tactic came as a direct result of the successful enforcement focus on 
MSBs that were being used by human smugglers to receive payments from “sponsors” in the 
United States. When the ability to easily use MSBs was disrupted, a transition to the funnel 
account model was observed. HSl has worked with other U.S. Government agencies, including 
FinCEN, to educate the financial industry in order to promote the identification of this scheme 
and reporting to law enforcement. 

Illicit Pathways Attack Strategy (IPAS) 

Last July, the Administration took an important step in fighting transnational crime when 
it issued its Strategy to Combat Transnational Organized Crime (TOC Strategy). This strategy 
complements the current Motional Security Strategy, and other national strategies and plans 
related to trafficking in persons, money laundering, and other transnational crime affecting the 
United States, by focusing on the growing threat of international criminal networks. The 
strategy’s single unifying principle is to build, balance, and integrate the tools of American 
power to combat transnational organized crime, and related threats to national security — and to 
urge our international partners to do the same. 

HSl designed the Illicit Pathways Attack Strategy (IPAS) to build, balance, and integrate 
its authorities and resources, both domestic and foreign, in a focused and comprehensive manner 
to target, disrupt, and dismantle TOC. As recognized in the TOC Strategy, resources are not 
limitless, and targets must be prioritized in a systematic manner. The IPAS will provide a 
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mechanism for ICE to prioritize threats and vulnerabilities within its mission and to coordinate 
its own efforts internally and within the interagency. 

The IPAS goes beyond the Nation’s physical borders. By targeting the profits generated 
and used by criminal organizations and not just targeting the contraband being smuggled, the 
IPAS will protect financial systems and strategic markets by addressing how criminal 
organizations earn, move and store illicit proceeds. IPAS will target financial institution abuse, 
bulk cash smuggling and trade-based money laundering and aggressively pursue asset forfeiture. 

Working with Mexican Authorities 

Working with the GoM in its battle against the drug cartels and other TCOs requires 
strong coordination and cooperation. ICE continuously works jointly with the GoM to initiate 
and support investigations and operations targeting TCOs and their diverse list of illicit activities. 
ICE also actively participates in capacity-building programs and initiatives to strengthen and 
bolster the GoM counter-narcotics and counter-illicit finance efforts. 

On June 2, 2010, DHS released the Department of State Bureau of International 
Narcotics and Law Enforcement-supported Bi-National Criminal Proceeds Study at a 
UnitedStates-Mexico Money Laundering Conference in Mexico City, which provided a 
strategic-level analysis of the processes and methods used by transnational criminals, particularly 
drug trafficking organizations, to repatriate illicit money from the United States to Mexico and 
other countries. Both the U.S. and Mexican Governments are using information collected from 
the study to conduct tactical operations that deny criminals the ability to move money, and to 
ultimately dismantle illicit operations. 


11 


VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00123 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



110 


VerDate Nov 24 2008 


ICE has strengthened its relationship with the GoM by increasing the number of HSl 
personnel in Mexico, who provide support to ongoing investigations of TCOs operating on both 
sides of the border. In addition, the HSI Attache in Mexico City has created its own 
Transnational Criminal Investigative Unit consisting of fully vetted Mexican law enforcement 
officers. Through the HSI Attache office in Mexico City and associated sub-offices, HSI 
personnel, in conjunction with the law enforcement community, will continue working closely 
with Mexican authorities. 


CONCLUSION 

Thank you again for the opportunity to appear before you today to discuss our efforts to 
combat the money laundering threat to the United States and our response to the innovative 
techniques being used by TCOs. 

I would be pleased to answer any questions. 
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David Bagiey 

Head of Group Compliance 
HSBC Holdings pic 

Written Testimony for Senate Permanent Subcommittee on Investigations 
July 17, 2012 

Good morning Chairman Levin, Ranking Member Coburn, and members of the 
Subcommittee. My name is David Bagiey. Thank you for the opportunity to be here today. 

Since 2002, 1 have been the Head of Group Compliance at HSBC Holdings pic ~ which is 
the global parent of HSBC. I joined Midland Bank in 1992 and, later that year, after HSBC 
acquired Midland, I began work for HSBC in its Head Office in London, where I work today. 
Over the years, I have served in various positions in HSBC offices around the world. 

Having been a compliance officer for 13 years in a bank that operates in approximately 
80 jurisdictions worldwide, I have dedicated my career - not only within HSBC but through my 
broader industry work as well - to meeting the sometimes significant challenges that confront 
global banking institutions in the world we live in. As this Subcommittee well knows, these 
challenges include money laundering by narcotics traffickers and terrorist financing, to name just 
a few. I have followed the work of this Subcommittee and have seen how your work has 
advanced important dialogues and helped the international banking community, including 
HSBC, identify and address potential vulnerabilities. 

My chief focus as the Head of Group Compliance at HSBC has been promoting the 
values that we as a bank have set for ourselves and the values that you and our regulators, both in 
the United States and around the world, rightly expect from a global bank like HSBC. And, 
while there have been successes on many compliance issues, 1 recognize that there have been 
some significant areas of failure. 1 have said before and I will say again: despite the best efforts 
and intentions of many dedicated professionals, HSBC has fallen short of our own expectations 
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and the expectations of our regulators. At the same time, this is something that a bank seeking to 
conduct business in the United States and globally must acknowledge, address, learn from, and, 
most importantly, take steps to avoid in the future. 

I know my time today is limited and there are a number of topics to discuss. Let me 
touch on some of them briefly. 

First, we have learned a number of valuable lessons, and the bank is well along the way 
of converting those lessons into solutions. One of these lessons concerns managing growth. 

With the benefit of hindsight, it is now clear to many of us that the bank’s business and risk 
profile grew faster than its infrastructure. We have learned that implementing the kinds of robust 
policies and practices expected of a global banking leader can take longer than anticipated. The 
bank underestimated some of the challenges presented by its numerous acquisitions, and despite 
efforts to meet these challenges, we were not always able to keep up. While many people at 
HSBC worked diligently to get it right, the bank simply must do better. 

How can we get it right? Let me touch briefly on a few of these changes. 

As I expect my colleague Stuart Levey to describe in some detail, HSBC is in the process 
of shedding the historical compliance model that the bank has outgrown. This departure from 
the old model is transformative. Our former compliance structure was a product of historical 
growth by acquisition and it was a major factor behind some of the issues that 1 expect we will 
be discussing today. 

Under the former structure, the bank’s Group Compliance function based in London 
mirrored HSBC’s overai! global corporate structure - which is an international federation of 
affiliates around the globe. Many of these affiliates began as relatively small independent banks 
that FISBC acquired over the years with increasing frequency. As the bank’s footprint grew 
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through these acquisitions, HSBC’s structure evolved into one with a small corporate center, on 
the one hand, and numerous affiliates around the world operating with a significant degree of 
autonomy and varying levels of direct interaction among those affiliates, on the other. 

Under the former model, the role of Group Compliance was an advisory one; we 
promulgated the baseline standards that all of the bank’s affiliates were expected to follow. As 
the Head of Group Compliance, my mandate was limited to advising, recommending, and 
reporting. My job was not - and I did not have the authority, resources, support, or infrastmcture 
- to ensure that all of these global affiliates followed the Group’s compliance standards. Rather, 
final authority and decision-making rested with local line management in each of the bank’s 
affiliates. 

This model worked for many years. But over time, HSBC’s growth accelerated rapidly. 
Some of the new acquisitions had operations that at the time of acquisition fell far short of 
HSBC’s own compliance standards and expectations and were in relatively lightly regulated but 
often high risk jurisdictions. At the same time, increased terrorism and narco-trafficking, and 
other financial sector developments, exposed the international banking system to new 
vulnerabilities and greater challenges. In addition, regulatory expectations both in the United 
States and abroad rightly continued to increase. With its roots in a far smaller bank in a very 
different global banking environment, HSBC’s historic model, in retrospect, simply did not keep 
pace. Now, a major overhaul is underway. 

The new compliance model is a product of deep reflection and is tailored to address 
today’s challenges as well as the inevitable challenges of tomorrow. Let me mention a few 
significant differences between the bank’s prior compliance model and the new model. 


- 3 - 


VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00127 Fmt6601 Stmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



114 


First, the bank’s Group Compliance function now, for the first time, has authority over 
the compliance departments at every one of the bank’s affiliates. The new model empowers 
Group Compliance to adopt and implement consistent compliance standards across the Group 
and to assess each of the bank’s affiliates through a dedicated Assurance team so that the Group 
can have confidence that its affiliates are following and enforcing these standards. This is a stark 
break from the past. Now, Group Compliance has both the mandate and the resources to ensure 
that affiliates are compliant. In other words, now for the first time, Group Compliance is an 
advisory and a control function and personnel at the affiliates are now accountable to Group 
Compliance for their conduct. 

Second, the CEO of each affiliate previously controlled the allocation of resources and 
compensation associated with that affiliate’s compliance function. That has changed as well. 
Under the new model. Group Compliance oversees the bank’s nearly 3,500 compliance officers 
worldwide and takes the lead on decisions about resource allocation, compensation, performance 
review, objectives, strategy, budget, and accountability across all of our worldwide compliance 
departments. This gives Group Compliance far more control over and understanding of the 
bank’s global compliance efforts. 

Third, HSBC has made significant enhancements to the resources at the Group 
Compliance level. In 2002, when 1 took on the role of Head of Group Compliance, we had a 
staff of only eight people. Now we have close to 40 people working in Group Compliance in 
London, and that figure continues to grow. 

Fourth, the bank has adopted new robust diligence policies. Historically, unless required 
by the local jurisdiction, the bank did not mandate that HSBC affiliates perform due diligence on 
other HSBC affiliates. However, we now require affiliates to perform diligence on each other. 
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And, we are in the process of rolling out the enhanced Know-Your-Customer program at our 
U.S. bank on a global scale. This is a substantial task because HSBC has approximately 100 
million customer relationships worldwide. Nevertheless, it is an important one. It will enable 
the bank to make more informed and responsible decisions about its customers. 

While I will not touch on all of the recent enhancements to our model, I do want to 
elaborate on one of these changes, the creation of a dedicated Assurance team. The mission of 
this new fimction is both to review the effectiveness of our compliance functions at all levels 
around the globe and to escalate compliance issues that need remediation. This team is charged 
with ensuring that our compliance efforts around the world meet Group standards, conducting 
proper monitoring, and meeting the expectations of their regulators. The team is also charged 
with ensuring that compliance issues are properly escalated to the Group level, that the business 
and compliance functions are working together to manage risk elTectively and responsibly, and 
that every compliance team has the required skills and appropriate resources. This function, 
which is in addition to the continuing role of Group Audit in conducting audits of affiliates 
worldwide, has already provided substantial benefits. 

In conclusion, the authority of the Head of Group Compliance and therefore the function 
as a whole is greatly increased. We have split from the legal function and now form a part of a 
substantially empowered risk function. This will require affiliates to act on advice and 
recommendations quickly and effectively. 

+ * + 

Despite the best intentions and efforts of so many dedicated compliance and business 
professionals, HSBC has in some important areas failed to meet our expectations and the 
expectations of our regulators. I am happy, however, to be able to say that the bank has learned 
from its past and is already on a path to becoming a better, stronger banking institution. The 
bank’s structure is, in short, very different from what it was in 2002, when I agreed to serve as 
Head of Group Compliance. 

Thank you for your time. I welcome this opportunity to answer any questions. 
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Chief Executive, Retail Banking and Wealth Management 
HSBC Holdings pic 

Written Testimony for Senate Permanent Subcommittee on Investigations 
July 17, 2012 

I. Introduction 

Good morning Chairman Levin, Ranking Member Coburn, and members of the 
Subcommittee. My name is Paul Thurston, and 1 currently serve as the Chief Executive, Retail 
Banking and Wealth Management for HSBC Group, based in Hong Kong. 

1 have worked in the banking industry for my entire career. I joined Midland Bank in 
1975, and stayed when it was acquired by HSBC in 1992. Since then, I have served in various 
roles at HSBC around the world, including as CEO of HSBC Mexico (“HBMX”) for fourteen 
months beginning in February 2007. 

I understand that we are here today in part to discuss HSBC’s experience in Mexico and 
its impact on the U.S. and global financial systems. These are topics worthy of discussion, and 
which have had many learnings for our Group, and I am pleased to be here at the Committee’s 
request. I want to address in my statement the challenges 1 faced when I arrived in Mexico, the 
steps my colleagues and I took to address the problems, and the lessons 1 believe we at HSBC 
have learned from our experience in Mexico. 

II. HBMX 

Emerging markets like Mexico are growing increasingly important in their contribution 
to the global economy and world trade, and international financial companies can play an 
important role to help their governments develop these markets and their people to join the 
formal banking system. With large populations existing outside the formal economy and 
banking system, however, they also present real challenges. 
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1 arrived in Mexico in early 2007 after having served as a general manager with 
responsibility for building the Group’s personal financial service businesses across the Asia 
Pacific region. When 1 arrived, I reported to my predecessor, who, having completed the 
acquisition of the former Banco Bital and managed this business for 4 years, had also led the 
subsequent aequisition of the Banistino Group of banks across Central America and been 
promoted to head up the Latin American region. 

To enable me to assess the business, I had meetings with members of the management 
team, the internal auditors, the external auditors, and the Board of HBMX. I also met with the 
regulators, each of whom were complimentary about the progress made by the bank since 
acquisition. It became clear to me, however, that there had been rapid growth of the business 
since the acquisition, and that there were still significant issues that needed to be addressied. 
These included rapidly growing credit and fraud losses in the consumer and small business 
lending businesses, technology problems, and weaknesses in management information. There 
was also a significant known compliance issue relating to the quality of customer Know-Your- 
Customer (“KYC”) and customer files, all of which were decentralized across the network of 
more than 1300 branches, but where recent regulations required 1.8 million customer KYC 
records to be remediated to meet new local standards. 

Having thought that 1 would be continuing to build the business, my immediate priorities 
became to address these issues. Additionally, most of the management team of the bank in 
Mexico had also been promoted to regional positions to manage the now larger region, and I 
therefore had to fill key positions within the Mexican business to ensure that we retained a focus 
on managing this business. 
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As I began to get the team in place, additional issues arose, and it became clearer that 
HBMX lacked much of the sophisticated compliance, operational, and risk management 
capabilities with which I was familiar from my work in other parts of the Group. There was no 
credit fraud expertise, credit risk analytics were undeveloped, and provisioning models and 
scorecards were not robust. It also became apparent that decision-making processes concerning 
AML were not satisfactory. 

Over time, it also became clear that this was not only a question of process and 
technology, but that the underlying business model needed to be examined. Branch managers 
operated as local franchise owners, with considerable autonomy and a focus on business 
development, reinforced by an incentive compensation scheme which rewarded new accounts 
and growth, not quality controls. 

I should add that the external environment in Mexico was as challenging as any I had 
ever experienced. Bank employees faced very real risks of being targeted for bribery, extortion, 
and kidnapping - in fact, multiple kidnappings occurred throughout my tenure - and high levels 
of security were required for Dank staff working in Mexico. Unlike the United States, Mexico 
was a data-poor environment, making it difficult to verify the identity of customers. 

Despite these substantial challenges, 1 felt that with determined efforts, the Bank could 
make a positive contribution in Mexico. During my short tenure at HBMX, I worked hard to 
make progress towards this goal, and 1 drove many changes to both the business model and 
compliance systems. 

I pulled back on business expansion plans and focused on enhancing controls. I was 
particularly concerned with HBMX’s significant operational and credit losses, especially in small 
business loans and credit cards, where fraud was rising rapidly. I brought in people with 
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expertise in managing emerging markets credit risk in Asia and fraud management from the 
Group to review our practices in those areas, tightened credit approvals, and brought in a new 
Head of Consumer Credit Risk. 1 also brought in a new CFO to develop improved management 
Information capabilities. 

To address the compliance issues, 1 brought in a new COO who was well-regarded and 
experienced with Group standards. With his help, we made significant changes in AML and 
KYC processes, including addressing AML Committee weaknesses, ensuring that action items 
were properly followed up, and creating an escalation process when business and compliance 
disagreed. We launched new stafl' training programs on AML and KYC standards, and 
introduced a zero tolerance policy regarding the site visit requirement. 

Recognizing the challenges of trying to affect proper remediation of files and upgrading 
account opening processes across a widespread branch network managed by local managers 
incentivized and historically managed for growth, we set up a program to centralize control of 
account opening documentation and KYC records. We also reworked the employee incentive 
scheme to reduce reward for volume growth and increase the focus on credit quality, customer 
service, and proper management of risk. We also removed senior management from the 
incentive scheme entirely. 

As you might expect, these changes were painful to the organization. For example, to 
rework the incentive scheme, at one point 1 had to stop payment of incentives altogether. This 
resulted in employees picketing the office. However, my team and 1 were determined to 
continue pushing forward with the improvements. 

All of the issues that 1 identified, and the actions taken to address them, were reported up 
to the regional head of Latin America and to Group management. 1 requested Group Compliance 
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support to help review issues and people, and address cross-border issues. 1 also requested 
Group Audit to undertake audits of key processes, including the Money Laundering controls, to 
have an independent check of progress and help to surface other issues that had not previously 
been identified. The local Board, and the regional audit committee, which was chaired by the 
Group’s Chief Risk Officer and head of Audit, were kept informed throughout. Reports were 
made to the Group Risk Management Meeting which included the heads of each of the regions. 

In December 2007, less than a year after I had arrived, I was asked by the Group Chief 
Executive to prepare to move to the U.K. to take responsibility for our retail business there in the 
face of issues that led up to global financial crisis and to recruit a successor in the local market. I 
did this and left Mexico in April 2008. 

I believe that we made progress at HBMX during my short tenure, but clearly there was 
still much work to be done upon my departure. 1 understand that further problems surfaced 
subsequently, which had to be addressed by my successor and Group management, and that 
progress was therefore not as smooth as we would have wanted. 1 understand however that there 
was a significant improvement in account opening standards, documentation, and reporting in the 
following years as the centralized system came into effect, which gave HBMX a better platform 
to establish enhanced control on account opening and remediate historic accounts. Decisions 
were made to put strict limits on the U.S. dollar business we do in Mexico, we closed branches in 
areas where we believe there is a high risk of money laundering, and we are now in the process 
of closing all the HBMX Cayman accounts. The Group will continue to scrutinize our business 
there to determine how we can further mitigate compliance risk. 
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Many of the specific challenges I faced during my tenure, and the actions that I took, will 
likely be outlined more fully in your report. 1 will answer your questions to the best of my 
ability based on my time on the ground in Mexico, as I did with your staff several weeks ago. 

III. Lessons Learned 

We have learned much from our experience in Mexico, and I would like to discuss briefly 
some of what I consider to be the key lessons. 

First , when a problem arises, it is imperative to do the right thing and to do it quickly. 
During my tenure in Mexico, 1 tried to follow this rule. For example, in response to compliance 
failures, 1 fired individuals involved in falsifying KYC records and announced a zero tolerance 
policy for similar conduct, and we closed customer accounts, despite the risk of adverse reaction. 
The Group is taking firm action today to close down businesses where the risks cannot be 
effectively managed, regardless of the impact on short term profitability, and have invested in 
increased compliance resourcing. 

Second , business expansion cannot be allowed to run ahead of putting in place 
appropriate controls and infrastructure. Without adequate controls, financial institutions face 
severe business and operational risks that are simply unacceptable. In retrospect, it is clear that 
in Mexico, the Group w'as overly optimistic about our ability to bring up to standards quickly an 
acquired entity that had little to no compliance and operational infrastructure when we acquired 
it. The Group today is working hard to reduce its complexity and risk profile, and to empower 
Global Functions, including Risk and Compliance, to have direct oversight of the key controls 
across our business. 

Third , operational and compliance risk cannot be addressed by systems and process 
alone. In Mexico, we made little progress by simply installing Group systems and creating 
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control functions until vve addressed the culture of the bank and the underlying business model. 
Cultural change takes time, but getting the tone at the top right, and changing perfomiance 
management systems and rewards, are critical drivers to achieving higher standards. 

Fourth, when challenges arise, we must share information broadly across the Bank. 
During my tenure in Mexico, information at HSBC flowed vertically but not horizontally. The 
Subcommittee is right to note that, as a result, a number of risks and challenges we faced in 
Mexico were not fully appreciated by our counterparts in other parts of the Group. We are 
changing this through formal reporting structures to ensure that we maximize the sharing of 
information for risk management purposes amongst Group companies and amongst Global 
businesses and functions. 

Finally , we cannot be afraid to acknowledge and learn from our mistakes. We have 
directly acknowledged our shortcomings in Mexico and in the United States, and our Group 
CEO has set a clear policy that requires all parts of the Group to adopt and enforce a single 
global standard that is determined by the highest standard that must be applied anywhere and 
also requires us to maximize information sharing across the Group. This will help make us a 
better bank that effectively manages risk consistently on a global basis. 

IV. Conclusion 

Criminals operate globally and if vve are to combat them and stop them from accessing 
and abusing the financial system, we must look at issues from a global perspective. Institutions 
which operate internationally, like HSBC, will be targeted by these criminals, and our experience 
in Mexico vividly demonstrates that you are no stronger than your weakest link. We have to be 
sure that we have the best and strongest defense in place, in every business, in every market in 
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which we operate, regardless of the local challenges. It is for this reason that I appreciate the 
opportunity to speak with the Subcommittee today. 

It is clear to us all that our anti-money laundering controls should have been stronger and 
more effective, and that we fell well below the standards that we should have achieved. We have 
co-operated fully with the PSI and other authorities to ensure that we learn from the mistakes that 
were made in the past. 

We are determined that drug dealers, terrorists, and all forms of criminals will not access 
the financial system through HSBC. The Group management team is committed to ensuring that 
we meet the highest standards in every aspect of our business in the future. 
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Michael Gallagher 
Former Executive Vice President 
HSBC BANK USA, N.A. 

Written Testimony for Senate Permanent Subcommittee on Investigations 
July 17, 2012 

Chairman Levin, Ranking Member Coburn, and Members of the Subcommittee: 

My name is Michael Gallagher and I reside in Lincroft, New Jersey. From 2001 until last 
year 1 was an Executive Vice President at HSBC Bank USA, N.A. (“HBUS”) responsible for 
Payments and Cash Management (“PCM”), North America. On November 21, 201 1, 1 was 
subject to a reduction in force at the bank. 

Anti-money laundering, terrorism financing, and global access to the U.S. financial 
system are issues of critical importance to the banking industry and to national security. 1 have 
prepared this written statement in order to address certain areas of inquiry outlined in the 
Subcommittee’s correspondence dated June 29, 2012, and 1 will be pleased to answer any 
additional questions at the hearing that the Subcommittee might have. 

During my tenure at HBUS, PCM developed and marketed payments and cash 
management services to corporate and middle market clients as well as financial institutions, 
including HSBC affiliated banks. At the time of my departure, there were five regional heads of 
PCM, including me, each of whom reported to the global head of PCM. I generally had four 
teams within PCM that reported to me: sales, product management, client services, and central 
services. 

In addition, there were two periods of time during my tenure at HBUS when Wholesale 
Payments Operations (the team responsible for wire transfers) reported to me: approximately 
1998 to 2001 and approximately 2004 to 2007. Within its operations function, HBUS had a 
payments filter that was programmed to detect and flag transactions from sanctioned countries. 
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among other things. The payments processing team within operations would review each of the 
transactions stopped by the filter, To the best of my knowledge, if the transaction required 
further evaluation, it would be escalated to the Compliance department. 

In regard to the Subcommittee’s interest in U.S. dollar transactions involving Iran, I recall 
that in approximately May 2001, 1 was informed by the head of Wholesale Payments Operations 
of a business proposal under consideration by HSBC Bank pic to provide U.S. dollar clearing 
services to Bank Melli, an Iranian bank, I responded to her, copying my manager, the head of 
Corporate Banking, stating that 1 was not comfortable with the bank’s pursuit of such a business 
arrangement. I was concerned with the regulatory, reputational, and operational risk associated 
with this business proposal, and particularly the fact that Bank Melli was unwilling to identify 
the main beneficiaries of the payments at issue. The head of Wholesale Payments Operations 
then forwarded my concern to the Compliance department. I was not privy to the outcome of the 
discussions regarding the Bank Melli proposal. 

I also understand that the Subcommittee is interested in the Global Banknotes business. 

In approximately early 2007, the Head of Global Banking and Markets asked if I would take on 
managerial oversight of Global Banknotes and serve as someone to whom Christopher Lok, the 
Head of Global Banknote.s, could report. HSBC's Banknotes division bought, sold, and shipped 
banknotes around the world on behalf of its clients. HSBC had several banknotes vaults, 
including vaults in New York, London, Frankfurt, Tokyo, Singapore, and Hong Kong. 

Finally, I understand that the Subcommittee is interested in HBUS’ anti-money 
laundering, or AML, efforts. During my tenure at HBUS, although the Compliance department 
was primarily responsible for HSBC’s AML efforts, my team and I took compliance matters 
very seriously. PCM assisted the Compliance department, as well as relationship managers, with 
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regard to AML and related compliance efforts. In instances when PCM became aware of 
negative information regarding a client, PCM worked closely with the Compliance department to 
ensure that it received the information it needed. PCM also made resources available to the 
relationship managers and the Compliance department to assist in any way that we could. 

In summary, I would like to thank the Chairman and Subcommittee for allowing me to 
speak at the hearing on these eritical matters. HSBC, and the banking industry as a whole, have 
learned a lot over the past decade or so. I believe that HSBC’s experience can add value to 
understanding more broadly the risks and opportunities for enhanced safety in this industry. 
During my tenure at HSBC, there were steps taken to tighten anti-money laundering controls. 
But, with hindsight, it is clear that we did not always fully understand the risks of our business, 
and that we could have done much more, and done it more quickly, I appreciate the opportunity 
to provide this information to the Subcommittee. I am prepared to answer any additional 
questions that the Subcommittee may have during the hearing. 
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Testimony of Chiu Hon “Christopher” Lok 
Before the United States Senate 
Permanent Subcommittee on Investigations 
July 17, 2012 


Chairman Levin, Ranking Member Coburn, and members of the Subcommittee, I 
appreciate tbe opportunity to be here today. My name is Christopher Lok, and from 2001 until 
2010 I served as the global bead of the Banknotes business at HSBC. 

In my statement today, I will cover three topics. First, I will provide my background 
information. Second, I will provide an overview of the Banknotes business at HSBC. And third, 
I will address some of the specific problems and issues that I believe the Subcommittee is 
interested in. For me, it is painful and embarrassing to talk about the areas where, in hindsight, 
we fell short. At the same time, it is valuable to do so in order to find constructive solutions and 
so that others don’t make the same mistakes going forward. 

1 was bom and raised in Hong Kong. In 1981, 1 started working in the Banknotes 
business, and that is what I did for 29 years. During the entire time from 1981 through 2010, 1 
worked for HSBC or a predecessor institution. For most of my career 1 was based in Asia, but I 
was privileged to have lived and worked in New York for a brief period in the 1990s and again 
from 2001 until 2010. Even though I am not a U.S. citizen, I had a wonderftil experience living 
and working in this country and 1 have a great admiration and affection for the United States. 

I’d like to provide a brief overview of the Banknotes business. In essence, the business is 
about the buying and selling of physical currency at the wholesale level. Our clients were banks 
and other financial institutions all around the world. We employed about 275 people, including 
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traders, back office staff, and people who focused on operations and logistics. We dealt with 
approximately 800 customers, in over 100 countries, and we transacted in about 75 different 
currencies. These customers have natural demand for and supply of currency banknotes, driven 
by various economic activities. To them, HSBC was a safe and reliable counterparty and I 
believe that we provided them with a valuable service. 

I understand that the Subcommittee is focused on some of the compliance challenges that 
we faced in the Banknotes business. 

Let me start by emphasizing that compliance was a critical part of the HSBC Banknotes 
business. Over a period of years, there were some occasions when I communicated with my 
colleagues in compliance in a manner that was unnecessarily aggressive and harsh. These 
communications were unprofessional, and 1 deeply regret them. In reality, the business line and 
compliance shared the same objective - to avoid the bank being used by inappropriate people for 
improper transactions. Despite my overly critical emails, 1 believe Banknotes business and 
compliance people actually had a good working partnership. While I didn’t always communicate 
this, 1 had great respect for my colleagues in compliance and 1 valued their work. 

With respect to Banknotes transactions with customers in Mexico, up until December 
2008 I was under the impression that HSBC’s Mexican affiliate, HBMX, was operating under 
HSBC group standards. In December 2008, HBMX announced that it would no longer be 
accepting U.S. currency in Mexico. 1 was surprised by this announcement, and I tried to find out 
what was the reason behind it. It was not until early 2009 that 1 learned, as a result of my own 
inquiries, that HBMX had gotten into problems because their anti-money-laundering controls 
were seriously compromised. I was surprised and concerned about this news. 1 was not 
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previously aware of the AML problems at HBMX. If we had known of these problems, I am 
certain we in the Banknotes business would have done things differently. 

As time went by, some questions were raised about the Banknotes business in Mexico. In 
retrospect, we did not adequately appreciate the concerns being raised about the business 
environment in Mexico. While we did our best to deal with these inquiries, I am sorry to say that 
I did not understand what later became apparent. With the benefit of hindsight it is now clear 
that we did not perceive the extent of the anti-money-laundering deficiencies and the risks 
present in Mexico. 

Thank you very much. 
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Irene Dorner 
President and CEO 

HSBC Bank USA and HSBC North America Holdings, Inc. 

Written Testimony for Senate Permanent Subcommittee on Investigations 
July 17, 2012 

I. Introduction 

Thank you Chairman Levin, Senator Cobum, and members of the Subcommittee. My 
name is Irene Dorner and 1 serve as President and CEO of HSBC Bank USA (“HBUS”) and 
HSBC North America Holdings, Inc. (“HNAH”). I have led the Bank in the U.S. since January 
2010. This is one of the many entities across the globe that forms HSBC Group, which is 
headquartered in London. 

At the outset, let me state clearly that we deeply regret and apologize for the fact that 
HSBC did not live up to the expectations of our regulators, our customers, our employees, and 
the general public. HSBC’s compliance history, as examined today, is unacceptable. Therefore, 1 
fully appreciate why we are here and believe that this is an important discussion. HSBC has 
learned some very hard lessons from the experience of the past few years. But we have taken 
very substantial steps to address the problems that we, our regulators, and this Subcommittee 
have identified. We have made fundamental changes in governance, culture, training, and 
funding to ensure that we can effectively deter illicit use of our bank. These changes will be 
embedded and sustained going forward. 

As you know, these issues and challenges do not end at the water’s edge. So w'e are 
combining our efforts with reforms that apply throughout HSBC’s global business. And I am 
joined today by our new Chief Legal Officer, Stuart Levey, who is here on behalf of the HSBC 
Group and who will describe HSBC’s global compliance commitment. Stuart and I sit on HSBC 
Group’s new Global Standards Steering Committee that is charged with establishing a uniform 

- 1 - 


VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00144 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



131 


set of high standards for all HSBC affiliates around the world. 1 sit on this Committee because 
senior leadership at HSBC Group recognizes that often U.S. standards will be the highest 
standard globally. We have taken the lessons we learned from our experiences in the U.S. and 
are applying them on a global basis. 

Today, I would like to address two topics. First, 1 would like to tell you about HSBC and 
describe the importance of an effective compliance program to an institution of our size and 
global reach. Second, 1 would like to talk about the work we have done to address our AML 
Compliance deficiencies. 

11. HSBC in the United States 

HSBC is in a unique position: we are among a handlul of financial institutions with a 
truly global footprint. HSBC entered the United States in the 1 980s when we acquired Marine 
Midland Bank and we have been building on this foundation ever since. Today, our U.S. 
business has 16,500 employees and serves about 3.5 million customers. We have four main 
business lines: Global Banking and Markets; Retail Banking and Wealth Management; 
Commercial Banking; and Private Banking. 

HSBC has a truly global footprint. Our customers have a need for global banking 
services. In the United States, HSBC is one of the largest dollar clearers; this is important 
because the U.S. dollar is the currency of trade and commerce virtually no matter where you arc. 
When a U.S. manufacturer wants to sell its products to a retailer in Hong Kong, the transaction is 
settled in U.S. dollars. When a manufacturer in Singapore sells its goods to a purchaser in 
Germany, or a raw materials supplier in Brazil sells its products to a purchaser in Canada, 
chances are those transactions arc settled in U.S. dollars as well. 
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This global reach gives us a tremendous opportunity to attract customers who are 
internationally focused. But it also brings with it a tremendous responsibility. Given my 
experience working for HSBC in other parts of the world, I am cognizant of the risks and 
obligations that come with serving our customers. At an absolute minimum, we must have the 
proper controls and systems in place to ensure that we are doing the right business, in the right 
places, with the right customers, and that our customers’ transactions are properly monitored. If 
for any reason a transaction appears to be unlawful or suspicious, then we scrutinize the 
customer and report this information to the authorities in a timely manner. 

In the world of banking, there is nothing more important than our reputation, not just for 
financial strength but also for trustworthiness and integrity. Not only is it important to our 
customers and our regulators, it’s important to me, and it’s important to my management team. I 
have made clear that I expect every member of my senior management team to stand up for 
doing what is right. 

III. AML Compliance Remediation 

As the subcommittee has documented, we have fallen short in a number of serious ways. 
In October 2010, the U.S. bank entered into a Consent Order with the OCC. The OCC criticized 
various aspects of the Bank’s AML program, including failure to provide adequate resources for 
our AML Compliance function, gaps in automated monitoring of certain wire transfers and 
banknotes transactions, failure to conduct due diligence on our own HSBC affiliates, and an 
inadequate process of risk-rating certain customers. We had not invested what we should have in 
our AML resources and systems. With the full support of our Board and of HSBC Group, I took 
the lead in overseeing our remediation efforts, and we have taken significant steps forward. 

I want to turn now to highlight several of the changes we have implemented. 
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A. People and Culture 

We’ve worked hard to foster a new culture that values and rewards effective compliance, 
and that starts at the top. By the end of 2010, we had a new U.S. senior management team in 
place, including myself as CEO, a new Genera! Counsel, a new Head of Compliance, and a new 
AML Director. Previously the role of General Counsel and head of Compliance had been 
combined under one person. We also elevated the role of the AML Director, who now reports 
directly to the Chief Compliance Officer and regularly reports directly to the Board and senior 
management about the AML program. The Chief Compliance Officer and AML Director also 
have an independent line to a non-executive member of our Board of Directors. 

We have improved the quality, coverage, and strength of our AML program through 
additional staffing and training. We have worked to build an AML team that has the right 
subject matter expertise and the right operational expertise. 

The U.S. bank has made significant investments in our AML Compliance program over 
the past two years. We increased AML Compliance spending to $244 million in 201 1, 
approximately nine-fold what we spent in 2009. A big part of this investment has been in hiring 
and retaining the right people: today we have about 892 full-time AML Compliance 
professionals. 'I’his includes our monitoring and alert review team, local compliance officers, 
Financial Intelligence Unit team, sanctions screening team, and other AML subject matter 
experts. 

B. Policies and Procedures 

Another area we needed to address was that we did not adequately appreciate the risks of 
our businesses and of our customers. In early 2010, the HNAH Board undertook an enterprise- 
wide risk assessment and made the decision to exit or scale back several businesses that we 
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decided presented significant compliance risk. Since 2010, we have closed down the Banknotes 
business, we have exited about 28 embassy banking relationships, and we have closed 326 
correspondent banking relationships. This is an ongoing process -- we continue to do a formal 
Enterprise Risk Assessment twice a year to ensure that we are properly managing our risk 
enterprise-wide. 

We also needed to make changes to our Know-Your-Customer (“KYC”) policies. We 
had previously not been doing customer due diligence on our own HSBC affiliates. We now do 
the same level of customer due diligence on our own affiliates as we do on third-party customers. 
We have also improved the way we approach customer diligence for all our customers. We have 
developed and implemented new bank-wide KYC standards that apply to all our business lines to 
ensure consistency. Our new KYC policy forces a more critical look at each customer at the 
onboarding phase, which enables us to make better decisions about whether that customer fits 
within our risk appetite. 

1 firmly believe that KYC is about more than just checking a box- it’s about really 
understanding who your customer is so that you know whether this is a customer you want to do 
business with. Importantly, we are enforcing this message across our entire employee team 
through robust and continual training, outreach, and communications. 

We also developed a new country risk-rating methodology, as well as a new customer 
risk-rating methodology. The new customer risk-rating methodology takes a holistic view of 
customer risk, evaluating risk based on country of residence, products and services utilized, legal 
entity structure, and type of business or customer. We now have a better way of identifying 
where our risks lie and we can make good decisions about whether we have the right controls 
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and the right level of diligence on a particular customer, and if we do not, we will either fix it or 
we will exit that customer. 

Once we had our new customer risk-rating methodology and KYC policy in place, we 
started rolling out a large-scale KYC remediation project across all our business lines, which I 
chair. Through this process, we have been reviewing our entire customer base, exiting certain 
customers, and remediating all our remaining customers up to our new KYC standards. Our 
KYC remediation project is a huge undertaking and this project has integrated our business 
people with our Compliance people in a way that did not happen before. Many of the changes 
we are making are being adopted as HSBC global best practices. 

C. Technology 

We also needed a more robust transaction monitoring system that was sustainable and 
had the right controls. We have made significant investments in technology and we believe that 
our new transaction monitoring system more effectively detects suspicious activity. We have 
also built better controls around that system so that any changes to the way we monitor are vetted 
by an independent team. 

In addition to improving our technology, we recognized that we needed the right structure 
around the technology so that we not only get better alerts, but are better able to analyze those 
alerts and report suspicious activity to law enforcement. So we looked not just at the numbers of 
analysts we needed to hire but the types of people we needed. We brought more subjeet matter 
experts into our monitoring team and have built out our Financial Intelligence Unit. 

While we have made real progress, we recognize that there is more to do. This is 
difficult, it is complicated, and it takes time to do it right. Our regulators recently raised issues 
about some aspects of our model validation process. Addressing these issues is a top priority. 
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IV. Sustainabilits' 

We understand that we have to rebuild the trust of our regulators, our customers, and our 
other stakeholders. For this reason, the sustainability of our AML Compliance program is a top 
priority. The intended consequence of the changes I have discussed is to embed a new culture of 
responsibility, accountability, and deterrence within the U.S. bank. In many ways, an 
organization’s culture is a product of the “tone at the top,” and it has been my mission, and the 
mission of my new senior team, to make sure that compliance is on every employee’s mind at 
every level in the organization. 

We understand that an effective AML Compliance program requires an ongoing process 
of learning, adapting, and improving. There is no point at which we can just sit back and say, 
“Our program can’t get any better.” We need to evolve and improve constantly; we need to 
respond not only to regulatory changes but also to advances in technology and to the risks posed 
by the ingenuity of drug traffickers, money laundcrers, tax evaders, and others seeking to use our 
financial system for illicit purposes. We want our doors to be closed to these bad actors. We 
will never catch every single illicit transaction, but our goal must be to ensure that we are in the 
best position possible to do so. This is my goal and commitment, and this is the goal and 
commitment of the HSBC Group, supported fully by our Board of Directors. My commitment 
also extends to the thousands of HSBC employees here in the U.S. who have been working 
tirelessly over many months to remediate compliance issues and create a sustainable compliance 
capability. 

V. Conclusion 

In closing, let me say that 1 appreciate this Subcommittee’s efforts to examine and 
improve the steps taken by industry and government to address these challenges, and we are 
committed to fulfilling our responsibilities in an effective and sustained manner. 
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Stuart Levey 
Chief Legal Officer 
HSBC Holdings pic 

Written Testimony for Senate Permanent Subcommittee on Investigations 
July 17,2012 

I. Introduction 

Good afternoon Chairman Levin, Ranking Member Coburn, and members of the 
Subcommittee. My name is Stuart Levey and I joined HSBC Holdings pic (or “Group”) as its 
global Chief Legal Officer in January of this year. I am pleased to appear here, at the 
Subcommittee’s request, to participate in today’s hearing on combating money laundering. This 
Subcommittee has played a vital role in promoting sound policies and practices in the AML area. 
That work has made the global financial system stronger and increased the tools available to law 
enforcement in the campaign against those who would misuse the global financial system for 
money laundering, drug trafficking, terrorism, tax evasion, or other illicit purposes. 

We have worked closely with the staff during the course of the investigation and 
cooperated as completely as possible to help provide a full picture of what happened. This 
process has highlighted some unacceptable shortcomings that HSBC deeply regrets. We have 
learned from this experience and are taking steps to change. 

Irene Dorner, our U.S. CEO, has spoken about the work we have done and continue to do 
to improve our AML compliance controls in the United States. However, we recognize that it is 
not enough to fix the specific issues that the Subcommittee has focused on; instead, we must 
implement a global strategy to tackle the root causes of our identified deficiencies. That is what 
we have begun to do and that is what I would like to talk about today. 
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II. Lessons Learned 

We have learned some difficult lessons from our experiences in the U.S. and in Mexico, 
We have learned that our decentralized management model focused on country heads made it 
difficult to ensure that HSBC standards were being implemented consistently. While our old 
model served us well historically, it does not work in an interconnected world where transactions 
cross borders instantaneously and where weaknesses in one jurisdiction can be quickly exported 
to others. New acquisitions expanded HSBC faster than our infrastructure and controls could 
handle, especially given increasing regulatory expectations. In some instances, acquisitions were 
not sufficiently integrated into our operations and not brought up to HSBC standards quickly 
enough. We have learned, therefore, that HSBC affiliates could not assume that other HSBC 
affiliates with whom they did business were adhering to adequate standards. We have learned 
that our approach to compliance - and AML in particular - was not adequate to address the risks 
we face as a global institution. And we have learned that we did not share information 
effectively enough across our affiliates, with serious consequences. 

III. How We Are Reforming HSBC To Address These Shortcomings 

At the beginning of 201 1, there was a transition at HSBC to our new CEO, Stuart 
Gulliver, and our new Chairman, Douglas Flint. The new leadership team recognized that 
immediate action was required and set out a strategy to make changes to the way HSBC operates 
around the world. Over the past eighteen months we have taken concrete steps to address each 
of the deficiencies I have described. The work we have undertaken is ambitious and complicated 
given our size and our global footprint, but we all recognize that it must be done. 
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A. Reorganization of HSBC’s Structure and Business 

I. Global Businesses and Functions 

In early 2011, our new CEO, Stuart Gulliver, articulated the firm’s new strategy. The 
decentralized system where country heads were dominant on all matters within that country 
would be eliminated and replaced. Instead, in order to make the firm more cohesive and better 
connected, we reorganized HSBC into four Global Businesses and ten Global Functions in 
addition to our pre-existing regional structure. We gave the heads of each business and function 
the authority over all personnel in their respective organizations all over the world, thus creating 
the ability to manage their bu.sincss or function on a global basis, making it easier to implement 
consistent policies, standards, and processes. The Global Businesses are Global Banking & 
Markets (“GBM”), Commercial Banking (“CMB”), Private Banking (“GPB”), and Retail 
Banking and Wealth Management (“RBWM”). The Global Functions include Legal, Audit, and 
Risk and Compliance. The heads of each of the businesses and functions, together with the 
heads of each of the regions, are all members of our risk management committee, which is part 
of the Group Management Board. This group meets eleven times a year and eaeh meeting is 
comprehensive, often lasting an entire day. What that means is that the most senior people 
responsible for managing HSBC globally sit around a table every month, look at our risks, and 
make decisions. 

Better global integration makes us better situated today to manage our risk on a global 
basis, better able to see where risk in one part of HSBC may impact another part, and better able 
for the first time to ensure that consi.stent compliance standards and practices are implemented 
across all of our affiliates. 
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2, Simplifying Our Business 

In May 201 1, we announced a second key component of our new strategy. We have put 
the entire business through five economic filters: international connectivity, economic 
development, profitability, cost efficiency, and liquidity. Businesses that do not fit are sold; 
countries that do not fit are exited. We are no longer trying to be everywhere and trying to 
provide all services to all customers. We have focused on selling or exiting non-core businesses, 
which added undue complexity and raised control risks. (An early example of this would be the 
Mexican U.S. dollar cash handling business that was terminated by our former CEO Michael 
Geoghegan in 2008. Eventually, the global Banknotes business was closed entirely.) 

Application of these filters was designed to make the firm more manageable, reduce risk, and 
focus on our strengths as an internationally connected bank. As a result, over the past 1 8 
months, we have sold or exited 3 1 businesses and are withdrawing from 9 countries. 

We believe that this new structure and focus allows us to more effectively manage HSBC 
on a global basis and puts us in a better position to both detect and address compliance risk 
globally. 

B. Increased Focus On Compliance 

Historically, Group Compliance served what was primarily an advisory function. 
Compliance in each country reported to the country CEO and implementation of HSBC 
standards was the responsibility of each local Compliance group. This led to inconsistency and 
in some cases confusion about ownership and escalation responsibility. The top Group 
Compliance job at HSBC, which David Bagley has held for the past ten years, is undeniably 
difficult and our historical organizational structure meant that we did not invest in Group 
Compliance or empower it the way we should have. This has changed. 
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1. Strengthening Compliance 

We have elevated and strengthened the role of Group Compliance so that it is now a key 
control function, not just an advisory function. The Head of Group Compliance now has 
authority over the nearly 3,500 HSBC compliance officers worldwide. Group Compliance is 
responsible for resourcing decisions, performance reviews, objectives, strategy, budget, and 
accountability within all the Regional and Global Business Compliance functions, as well as 
compensation for all Compliance officers globally. Under the new structure. Group Compliance 
is empowered to set standards across the organization and now has the necessary authority to 
reach down into affiliates and ensure that those standards are being met. 

We have significantly increased the resources devoted to Compliance across the firm. 

We have created a new independent Assurance team within Compliance that reviews the 
effectiveness of the Regional and Global Business Compliance functions, reports compliance 
issues for remediation, and tracks progress. We now have the tools to analyze and assess our 
affiliates, looking for compliance risk and problems, and to raise those up to senior members of 
Group Compliance and Group Risk, who are now responsible for ensuring problems are 
resolved. This gives us a transparency and accountability that was lacking before. 

In addition to shoring up our Compliance function, we have also enhanced the authority 
of our Global Risk function, so that it too is a strong control function that works in tandem with 
Compliance. Our Chief Risk Officer now has a broader mandate to control all types of risk 
globally and has oversight over every Risk officer in every affiliate. The Chief Risk Officer 
chairs the Risk Management Committee meetings and attends the full Group Holdings Board 
meetings, at which risk and compliance is a substantial focus. 
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2, Values Program 

In addition to adding resources and elevating the stature of Group Compliance, in 201 1 
our new senior leadership introduced a values program that seeks to define the way everyone at 
HSBC should act. Under this values program, before any consideration of the business 
scorecard, our top executives are judged on being open, connected, and on their commitment to 
acting with integrity. In addition, all managers and senior executives are accountable for 
ensuring that business decisions and activities within their area are aligned to our values and 
business principles. This includes reviewing all products, services, policies, and practices to 
ensure that the values are embedded into our “business as usual” operations. Employees also are 
expected to understand the impact of the values and business principles on their day-to-day 
activities and, as part of performance reviews, employees are now assessed on their value-related 
behaviors. The compensation of all HSBC employees - from the most senior to the most junior 
-will be impacted if behaviors do not meet our expectations. 

So far, 332 senior managers have attended a 2-day workshop on HSBC values; 3,000 
executives have attended leadership training, and 43,500 employees have attended general 
training, both of which included sessions on HSBC values. 

3. New Chief Legal Officer 

It was in the context of these reforms that HSBC’s leadership approached me about 
taking on a newly-created position of Chief Legal Officer. 1 had previously served nearly seven 
years as the Under Secretary of Treasury for Terrorism and Financial Intelligence under 
Presidents Bush and Obama. In our conversations, the Chairman of the Board and the new CEO 
were candid with me about the problems HSBC faced, the reforms they wanted me to help them 
implement, and the empowerment that I would need and have. I saw the opportunity as an 
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important challenge. HSBC is a great institution with a global footprint and tremendous scale. 
Helping HSBC success fully implement the kinds of reforms 1 am describing today will make a 
significant difference in promoting the overall integrity of the financial system. 

C. Designing and Implementing New Global Standards 

In April of this year, Stuart Gulliver issued a Group Circular Letter (“GCL”) - which is 
the way our CEO communicates important policy changes throughout the Bank - entitled 
“HSBC Global Standards,” This directive states that in order to preserve and enhance our 
reputation, we must lead our industry in formulating and implementing global standards and 
controls to ensure that our conduct matches our values. The GCL sets forth some key principles. 
These are, among other things, that HSBC must; 

• Adopt and enforce adherence to a single standard globally that is determined by the 
highest standard we must apply anywhere. Often, this will mean adhering globally to 
U.S. regulatory standards, but to the extent another jurisdiction requires higher 
standards, then that jurisdiction’s requirements must shape our global standard; 

• Maximize the sharing of information for risk management purposes among Group 
companies and among Global Businesses and Functions; 

■ Apply a globally consistent approach to knowing and retaining our customers. When 
we conclude that any customer or potential customer poses an unacceptable 
reputational risk (or otherwise does not meet our standards), we should exit or avoid 
the relationship globally. 

The GCL also established a new Steering Committee on Global Standards, co-chaired by 
myself and our Group Chief Risk Officer, which is responsible for developing and overseeing 
the implementation of the new standards. Irene Dorner is also a member of the Committee, 
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because we recognize that often the highest standards will be U.S. standards and Irene’s 
experience and expertise in that area will be invaluable. This will mean that rather than the U.S, 
bank being faced with the challenges of absorbing problems and deficiencies from abroad, more 
often than not it will be high U.S. standards that we will be exporting globally. By implementing 
this highest common denominator approach across HSBC we are requiring that all our affiliates 
be held to consistent high standards. Our new .structure gives Group Compliance and our other 
control functions the ability to hold people accountable for following those standards in a way 
that was not possible before. 

Our Global Standards Steering Committee has already taken action on a number of 
issues, and we have purposefully set out to address several of the problems the Subcommittee 
has highlighted through its investigation. 

1. Information Sharing 

One of the first acts of the Steering Committee was to enact a new global standard 
designed to maximize the sharing of information, to the extent permitted by law, across all 
HSBC affiliates and all Global Busine.sses and Functions for risk management purposes. Key 
compliance-related information will now be shared horizontally with all Regional and Global 
Business Compliance Heads, including monthly reports detailing compliance issues in a region 
or business line. The reports from the new Assurance team’s on-the-ground reviews of specific 
Regional Compliance Functions will also be shared horizontally. And importantly, any material 
or systematic AML control weaknesses at one affiliate are to be shared with all affiliates. 

Similar information sharing protocols have been established for affiliate audit reports. We have 
seen what happens when information is not shared effectively across our institution, and we 
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continue to look for additional opportunities to increase the flow of information throughout the 
firm. 

One difficult reality that global institutions like HSBC have to grapple with is that we 
face certain restrictions on sharing information across borders because we must adhere to the law 
wherever we operate. The Subcommittee is well aware of this issue and the challenges we face 
in this area. But at the same time we have recognized that we can significantly improve the flow 
of information from what occurred in the past and thereby improve our controls. 

The Steering Committee is also overseeing the establishment of a global Financial 
Intelligence Unit (“FIU”) at the Group level to ensure we arc able to analyze and act on 
information submitted from around the firm and, subject to any legal restrictions, to share 
information with relevant affiliates that are impacted. 

2. Affiliate Due Diligence 

Another early action of the Steering Committee was to globalize the practice of 
conducting appropriate due diligence on all of our HSBC affiliates. The risk of not doing so has 
been clearly illustrated by this investigation. While affiliate due diligence is only required by 
law in a few countries (and is not required by the Financial Action Task Force), we believe that 
best practice mandates that HSBC affiliates should know more about each other than they do 
about third-party customers, not less. This means that all HSBC affiliates are now required to 
complete due diligence on any other HSBC affiliate with which they have a correspondent 
banking relationship. 

3. Global Risk Filter 

In addition to the five business filters diseussed above, the Steering Committee has 
decided to add a sixth filter to govern HSBC’s activities in high risk jurisdictions. We are 
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implementing a new global risk filter that will standardize which countries are viewed as high 
risk by adopting the U.S. country risk ratings on a firm-wide basis. The risk filter will help us 
determine what business we are comfortable doing in high risk places and what business we 
must avoid. We want to be in fewer places, with fewer clients, and with less risk across the 
board. Because the risk filter will be applied firm-wide, it will also bring consistency and 
enhance our ability to understand and manage our risk across affiliates. We do not view this as 
sacrificing business for compliance purposes. There is no conflict between our business 
objectives and compliance objectives in the long run or when viewed from a global firm-wide 
perspective. 

4. Global Sanctions Policy 

The Steering Committee has also moved to adopt a global sanctions policy, based on a 
review of HSBC’s current payment screening policies and procedures. We have identified a 
number of enhancements that can be made to that process, including additions to the sanctions 
lists used for both “real time” and “near time” payments screening. Among other things, this 
will mean that we will be screening for all illicit actors designated by OFAC in all jurisdictions, 
in all currencies. 

IV. Making Reforms Sustainable 

We understand that we also need a genuine commitment from the highest levels of the 
organization to institutionalize the reforms and foster a culture of compliance. That is being 
accomplished in part by formalizing the reforms I have described and embedding them in a 
governance structure. 

In the end, sustainability of these reforms depends critically on the commitment of 
HSBC’s top leadership. The tone at the top of HSBC is, in my view, remarkably strong. Our 
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Board and senior leadership are committed to seeing these reforms through, and we understand 
that this is something that absolutely must be done for the long-term success of our bank. 

V. Protecting the Integrity of the Financial System 

The reforms 1 have laid out above, when fully implemented, will have a positive impact 
on the financial system. But beyond that, there are opportunities to improve collaboration both 
among financial institutions and between the financial sector and the government that would help 
protect the financial system from misuse. One lesson I learned during my Treasury service is 
that, in almost all cases, the private sector and governments share the same goals when it comes 
to preserving the integrity of the financial system. This is a difficult problem, and we are up 
against groups of people who are adept at evading controls. My experience at Treasury was that 
banks are eager to receive the type of information about illicit conduct that the government is 
able to provide and to engage with the government about mitigating that risk, and this is certainly 
true with respect to HSBC. HSBC wants to play a constructive role in this effort, and there are 
clearly opportunities for increased information sharing and collaboration. 

This Subcommittee helped create a valuable tool in the PATRIOT Act when it gave the 
industry 314(b), which permits financial institutions to share information with one another in 
order to identify and report to the federal government activities that may involve money 
laundering or terrorist financing. Increased sharing of such information would enable financial 
institutions - and law enforcement - to better connect the dots, identify suspicious patterns of 
activity, and take appropriate action. Unfortunately, this provision has not been used as robustly 
as it might be. I know this Subcommittee has also been looking for ways to improve the 
effectiveness of this provision. 
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Another potential area for improvement is the sharing of information between financial 
institutions and government agencies. Law enforcement agencies and the intelligence 
community collect and analyze significant amounts of information regarding illicit activity, 
which often enables the government to identify the names of individuals, companies, or other 
entities that facilitate or tolerate illicit activity. This information would be extremely valuable to 
financial institutions, and to the extent more of this information could be shared, that is 
something we at HSBC, and I am sure others in the industry, would support and encourage. 

Along these lines, it would be helpful to have more access to beneficial ownership 
information for companies. Provisions of the Levin-Grassley Incorporation Transparency and 
Law Enforcement Assistance Act would be a step in the right direction, particularly if beneficial 
ownership information were to be made more readily available not only to law enforcement but 
to financial in-stitutions as well. The better banks know their customers, the more secure the 
entire system is from misuse. 

VI. Conclusion 

You have heard a lot today about what happened in the past and the reasons for it. We 
are in the process of applying the lessons learned from our experience throughout our institution. 
We have a long way to go on this journey, but I believe we are on the right path. We have work 
to do to regain the trust of our regulators, our customers, and other stakeholders. But I do want 
to say very clearly that the reforms we are undertaking reflect a real commitment to HSBC’s true 
values. HSBC is a bank that has a long and proud heritage. Over its 147 year history HSBC has 
been an upstanding corporate citizen all over the world and has played a vital role in integrating 
emerging markets into the global economy. This is a bank that has helped thousands of 
individuals and small businesses realize their dreams. 
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This experience has been a very painful one for the vast majority of the HSBC family 
who have spent their careers at the bank doing the right thing every day. I know I speak for all 
of HSBC senior management when 1 say that we are committed to doing what needs to be done. 

I appreciate the opportunity to speak to you today and 1 look forward to answering your 
questions. Finally, Mr. Chairman, I intend to answer the Subcommittee’s questions as candidly 
and completely as I can today. However, as has been previously discussed with the 
Subcommittee’s staff, there are certain potential questions - or parts of questions - that I may not 
be able to answer because of either legal obligations attendant to my prior position in 
Government or ethical obligations associated with my present position as counsel for HSBC. 1 
hope that none of today’s questions will implicate either of these areas where 1 cannot respond, 
but if they do I will let you know. 
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1. Introduction 

Chairman Levin, Ranking Member Cobum, and members of the Subcommittee, the Office ofthe 
Comptroller of the Currency (OCC) appreciates the opportunity to appear before you today to 
discuss the importance of effective Bank Secrecy Act (BSA) compliance programs at U.S. 
financial institutions and the role the OCC - and the other financial institution regulators - play 
in examining financial institutions for compliance in this area. As well, this testimony focuses 
on the OCC’s supervision of HSBC Bank USA, N.A. (HBUS or Bank) with respect to BSA 
compliance, our enforcement action against the Bank, and other matters in which the 
Subcommittee has expressed an interest. 

The OCC is committed to ensuring that the institutions under its supervision have effective 
controls in place to safeguard them from being used as vehicles to launder money for drug 
traffickers and transnational and other criminal organizations, or facilitate the financing of 
terrorist acts. Together with the other Federal banking agencies, the banking indu.stry, and the 
law enforcement community, the OCC shares the Subcommittee's goal of deterring money 
laundering, terrorist financing, and other criminal acts and preventing the misuse of our nation's 
financial in.stitutions. 

National hanks and thrifts have been required to have a BSA compliance program since 1987, 
and to monitor, detect and report suspicious activity since the 1 970s. However, regulatory 
requirements and supervisory expectations under the BSA have increased significantly since that 
time, with the result that most institutions have had to make sub.stantial improvements in their 
BSA compliance programs. In response, many of the largest institutions have implemented 
highly sophisticated programs and systems that .screen transactions to identify and report 
suspicious activity to law enforcement, and to ensure that such transactions do not involve 
entities subject to Office of Foreign Assets Control (OFAC) sanctions. The suspicious activity 
reports (SARs) that are filed have provided law enforcement with access to critical information 
needed to initiate and conduct succcs.sful investigations and prosecutions. There are now 
approximately 5.6 million SARs in the centralized database that is maintained by the Financial 
Crimes Enforcement Network (FinCEN). The majority of the.se SARs have been filed by 
national banks and thrifts. 

However, as our financial institutions' BSA compliance programs have evolved and changed 
over time, so has the sophistication and determination of money launderers, terrorist financiers 
and other criminals in finding other ways to gain access to our financial in.stitutions. The 
technology, products and services offered by our institutions to give customers better and quicker 
access to financial services also are being used by criminals to instantaneously and anonymously 
move money throughout the world, sometimes through the simple click of a keypad. 
Consequently, banks, thrifts, and other financial institutions have had to devote increasingly 
larger amounts of resources to maintain effective programs. 

Comptroller Curry recently spoke on the operational risks that are challenging financial 
institutions. One ofthe areas he spotlighted was BSA compliance. He noted that BSA 
compliance is inherently difficult, combining the challenges of sifting through large volumes of 
transactions to identify features that are suspicious, with the presence of criminal and possibly 
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terrorist elements dedicated to, and experts in, concealing the true nature of the transactions they 
undertake. Rendering BSA compliance more challenging is the fact that such risks are 
constantly mutating, as criminal and terrorist elements alter their tactics to avoid detection. They 
move quiekly from one base ofoperations to another, finding sanctuary in places where law 
enforcement, or sympathy for U.S. policy objectives, is weakest. Furthermore, money 
laundering and terrori.st financing schemes are becoming more complex, involving entities and 
individuals loeated in numerous jurisdictions worldwide. 

Comptroller Curry emphasized, and we reaffirm today, that notw ithstanding these ehallenges. the 
OCC expects the institutions we supervise to have effective programs in place to comply fully 
with the requirements of the BSA. Primary responsihility for compliance with the BS.A rests 
with the nation’s financial institutions themselves. The OCC and the other Federal banking 
agencies are eharged with ensuring that these institutions have effective systems and controls to 
detect and monitor for suspicious activity related to money laundering and terrorist financing, 
provide the necessary reports to law enforcement, and compile and maintain records that are 
useful to regulatory and criminal investigations. This is not a static area of compliance as new 
money laundering and terrorist finaneing risks emerge and as existing risks change. Therefore, 
the OCC remains committed to continually improving our supervisory processes to help ensure 
the ongoing effectiveness of national hanks’ and federal savings associations’ (hereafter referred 
to as "banks”) BSA compliance programs. 

The Subcommittee’s Report (Report) contains three recommendations focused on the OCC's 
BSA/AML supervision. We agree with the concerns reflected in each of the recommendations 
and will take actions in response. We have already identified a new approach that we will 
implement to assure that BSA/AML deficiencies are fully considered in a safety and soundness 
context and are taken into account as part of the “Management” component of a bank’s 
CAMELS rating. We are revising and clarifying the operation of our cross-functional Large 
Bank BSA Review Team (LB Review Team) to enhance our ability to bring different 
perspectives to bear and react on a more timely basis to circumstances where a bank has multiple 
instances of Matters Requiring Attention, or apparent violations of the required components of 
its BSA/AML program. We will also explore how we track and review relevant infonnation in 
this regard and whether new initiatives are appropriate in that area as well. We will aLso revisit 
our current approach to citing BSA/AML violations in order to provide more flexibility for 
individual “pillar” violations to be cited, and we will identify what steps we can take in our 
e.xaminations to more promptly obtain a holistic view of a bank's BSA/AML compliance. 

Finally, we will review other areas, such as training, staffing, recruitment, policies, and 
interagency coordination, to make improvements in our BSA/AML supervision program. 

II. OCC BSA/AML Supervisory Policies and Practice 

Recognizing the increasing and evolving challenges of BSA/AML compliance, the OCC has 
continually sought ways to enhance and improve our supervision. In 2005, we undertook a .set of 
eomprehensive initiatives to improve our BSA/AML supervision. These initiatives were 
designed to strengthen OCC BSA/AML examinations; enhance OCC resources and expertise 
devoted to BSA/AML supervision; and provide clear and consistent communications about our 
BSA/AML supervisory expectations to the industry. Some of the key changes in our BSA/AML 
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supervision included the development and implementation of enhanced risk identification and 
analysis tools, such as the OCC’s Money Laundering Risk Assessment system (MLR), which 
enables the OCC to identify potentially high-risk banks and activities that warrant increased 
scrutiny and supervisory resources. With the other Federal banking agencies, we finalized and 
issued the Federal Financial ln.stitutions Examination Council’s (FFIEC) Interagency BSA/AML 
Examination Manual (Manual) that provides consistent and comprehensive examination 
procedures for BSA/AML and OFAC. We also worked with the other Federal banking agencies 
to develop and issue a uniform policy on citing BSA compliance program violations and taking 
enforcement actions. And we created and filled a new Director-level position for the OCC's 
BSA/AML Compliance Policy Department and augmented staff reporting to this new Director. 

In addition to the development and annual maintenance of the MLR information collection 
system, the OCC implemented a number of quality assurance processes to ensure that we arc 
consistent in identifying and communicating BSA i.ssues. These initiatives include enhanced 
MRA tracking and the LB Review Team process. The LB Review Team was fonned in 2004 to 
ensure consistency in the area of BSA/AML compliance for the largest banks under our 
supervision. The 1,B Review Team is comprised of the Director of the Enforcement and 
Compliance Division, the Director for BSA/AMl.. Compliance Policy, and the Senior Counsel 
for BSA/AML. 

The BSA/AML Compliance Policy Department provides comprehensive BSA training to our 
examiners and organizes a BSA compliance conference every three years to infonn our 
examiners of emerging money laundering and terrorist financing threats and vulnerabilities. 
Representatives of the law enforcement community are regular participants in these conferences 
and training sessions, establishing an on-going dialogue with our examiners concerning criminal 
typologies, schemes and arrangements. Such exchanges allow our examiners to be continually 
aware of the risks facing the banks, including those risks discussed here today, to scope 
examinations accordingly, and to provide timely guidance to the industry in addressing those 
risks. 

The BSA/AML Compliance Policy Department also leads the OCC's National Anti-Money 
Laundering Group (NAMLG), which is an internal task force that serves as the focal point for 
BSA/AML issues within the agency. The NAMLG facilitates intra-agency communication; 
promotes cooperation and information .sharing with national and district office AML groups; 
identifies emerging risks, best practices and possible changes in anti-money laundering policies 
and procedures; discusses legislative proposals; and serves as a clearing house for ideas 
developed throughout the OCC. The NAMLG’s resource sharing program initiative provides 
BSA policy expert resources to complex banks, higher risk banks, or examinations in need of 
specialized expertise. The resource sharing program promotes BSA/AML knowledge transfer, 
examiner development, and improves the allocation of BSA resources. 

Globalization is a critical feature of the business activities of the large international ly-active 
banks. It provides them with access to new markets, customers and opportunities. How'ever, it 
also increases their exposure to potential money laundering and terrorist financing risks. The 
OCC recognizes this challenge and the BSA/AML Compliance Policy Department works closely 
with the U.S. Treasury's Office of Terrorism and Financial Intelligence (TFI), FinCEN, and 
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OFAC to promote the implementation of sound international anti-money laundering and counter 
terrorist financing (AML/CFT) standards. The OCC also annually hosts two AML schools to 
train our foreign counterparts, and w-e are active participants in the U.S. delegation to the 
Financial Action Task (FATF) that is led by TFI. 

The OCC also works with the other FFIEC agencies, FinCEN and OFAC to review and develop 
BSA examination and enforcement policies and procedures. The publication of the Manual in 
2005 was an outstanding example of cooperation and coordination within the government, and 
between the government and the banking industry. The Manual reinforces the agencies' position 
that sound BSA/AML risk management enables a banking organization to identify BSA/AML 
risks and better direct its resources, with the ultimate goal of helping safeguard its operations 
from money laundering, terrorist financing, and other illicit activities. The Manual has been 
revised three times since its initial publication so that it remains current with the latest 
technologieal and payment system innovations and emerging threats and vulnerabilities. 

In fact, at the initiative of the OCC, the latest version of the Manual in 201 0 contained a new' 
section on bulk ca.sh repatriation that provides detailed guidance and examination procedures 
relating to this high risk product. Based upon our experience and expertise in the bulk cash and 
remote deposit capture (RDC) area, the OCC took the lead in drafting the bulk cash section of 
the Manual and the related examination procedures, and updating the section on RDC. The next 
round of revisions to the Manual, which w'ill be chaired by the OCC, is currently in the planning 
stages and should be completed during the next year. We expect that the revised Manual will 
include expanded sections on new payment systems such as prepaid access, mobile banking, and 
emerging risks associated with new products, services and customers that the agencies have 
identified through our collective supervisory processes. 

The OCC monitors compliance with the BSA and its implementing regulations by applying the 
e.xamination procedures set forth in the Manual. These procedures arc typically completed 
within each bank’s examination cycle. Community banks arc on either 12 or 18 month 
examination cycles, and large banks and midsize banks arc on an annual e.xamination cycle. 
These procedures are risk-based and direct examiners to focus examination resources on high- 
risk areas within banks and high-risk banks. During an examination, examiners use the 
procedures to assess the implementation and effectiveness of the bank's policies, procedures, 
systems, and controls. Every BSA/AML examination includes, at a minimum, a review of the 
bank's risk a,s.sessment and its BSA/AML compliance program (focusing on internal controls, 
training programs, independent testing and BSA officer independence and qualifications). We 
also assess the effectiveness of the bank's OFAC compliance program. 

OCC examiners perfonn ongoing supervision and conduct targeted testing in areas that may 
present higher money laundering and terrorist financing risks. The Manual also includes 
supplemental procedures that cover specific BSA requirements (c.g.. currency transaction 
reporting, suspicious activity reporting, foreign correspondent bank, private banking, funds 
transfer recordkeeping) and specific examination procedures covering risks from products and 
services and persons and entities {e.g., correspondent banking, private banking, trade finance, 
electronic banking, third-party payment processors, bulk shipments of currency, pouch activities, 
politically exposed persons, business entities). The OCC routinely downloads and analyzes BSA 
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data, currency transaction reports and suspicious activity reports to identify unique risks and 
augment our risk-based examination processes. This information permits examiners to scope 
and plan examinations appropriately to ensure that the bank's higher risk activities are evaluated. 
Such activities may be reflected in accounts associated with repetitive SAR filings, significant 
cash activity, or activity that is inconsistent with the type of business of the customer, and are 
examples of the types of accounts that would be selected for transaction testing and further 
examiner inve.stigation. In cases where examiners identify areas of concern, deficiencies or 
violations, they typically expand the examination scope and perfonn transaction testing in 
targeted areas to ensure they identify and evaluate all pertinent issues. This combination of our 
ongoing supervision and targeted examinations allows us to conclude on the adequacy of a 
bank’s BSA/AML compliance program. 

Currently, the OCC takes the findings from its BSA/AML and OFAC compliance examinations 
into account in determining the bank's regulatory ratings in two ways; (i) compliance risk 
management (including BSA/AML) is a part of the Management component of the Unifonn 
Financial Institutions Rating System (UFIRS), more commonly referred to as CAMELS (Capital 
adequacy. Asset quality. Management, Earnings, Liquidity, and Sensitivity to market risk); and 
(ii) BSA/AML is taken into account as part of the compliance rating under the Uniform 
Interagency Consumer Compliance Rating System. The OCC's approach of factoring 
BSA/AML and OFAC compliance into the Consumer Compliance rating differs from the 
approach of the other Federal banking agencies, which incorporates consideration of a bank's 
BSA/'AML and OFAC compliance only in the Management component of a bank's CAMELS 
rating. ' 

We appreciate the concerns raised in the Subcommittee's Report about this approach and the 
need to en.sure that deficiencies in BSA/AML compliance are considered in the eontext of safety 
and soundness and are taken into account in determining the Management component of the 
CAMELS rating. To address this concern, we are developing directions to our examiners to 
view serious deficiencies in a bank's BSA/AML compliance area, including program violations, 
as presumptively adversely affecting a bank’s Management component rating. We will also 


In assigning this compliance rating. OCC examiners consider major DS/VAML and OFAC examination llndings 
including, but not limited to; 

• The current and historical adequacy ofthe bank's BSA/AML/Ol'AC compliance program; 

• The signiUcance. volume, and history of program deficiencies and violations and whether they were 
accompanied by aggravating factors, such as highly suspicious activity creating a significant potential for 
money laundering, potential terrorist financing, and a pattern of structuring to evade reporting 
requirements; 

• .Money laundering and terrorist financing risks posed by the hank's customers, products and activities. 

■ The adequaev’ of monitoring systems to detect and report suspicious activity; 

• The adequacy of systems to detect and report monetary transactions that require the filing of Currency 
rransaciion Reports: 

• The adequacy of systems to comply with BSA recordkeeping requirements; 

• Evidence of insider complicity: and 

• The board of director.s’ and management's willingness and ability to administer an effective f^SA/AML 
and OFAC compliance program. 

The Office of Thrift Supervision, prior to its merger with the OCC. used the same approach as the OCC by factoring 
HSA/AML and OFAC compliance into the Consumer Compliance rating and incorporating them within the 
Management rating, as appropriate. 
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provide guidance on how to document application of this approach in determining the 
Management component rating. 

in. OCC’s BSA/AML Supervisory and Enforcement Process 

The OCC uses a variety of methods to communicate problems or weaknesses in a bank's systems 
and controls, including BSA deficiencies, and to obtain corrective action. In most cases, 
problems in the BSA/AML area, as well as in other areas, are corrected by bringing the problem 
to the attention of bank management and obtaining management's commitment to take corrective 
action promptly. The Report of Examination or. in the ca.se of large or midsize banks, the 
Supervisory Letter, documents the OCC's findings and conclusions with respect to its 
supervisory review of a hank. 

Problems or weaknesses are communicated to the bank's senior management and board of 
directors in the "Matters Requiring Attention" (MRA) section of the Report of Examination or 
Supervisory Letter. MRAs are conditions or is.sues that management is required to change or 
correct. MRAs are a serious consequence of the examination and they include practices that: (i) 
deviate from .sound governance, internal control and risk management principles which may 
adversely impact the bank's earnings or capital, risk profile, or reputation if not addre.ssed; or (ii) 
result in substantive noncompliance with laws and regulations, internal polieie.s. controls or 
processes, OCC supervi,sory guidance, or supervisory conditions imposed in an interpretive letter 
or licensing approval. Once MRAs are identified and communicated to the bank, the bank's 
senior management and board of directors are required to promptly correct them within the 
agreed upon time frame. OCC examiner guidance specifically provides that supervisory 
strategies for banks with MRAs must include plans to follow up on the concerns. The plans need 
to be consistent with the seriousness of the MRA and include activities to monitor progress and 
verify the effectiveness of the corrective actions. The OCC does not deem an MRA corrected 
until the supervisory office has verified that the bank has adopted and implemented an effective 
corrective action. 

MRAs involving hanks in our Large Bank supervision program are tracked by the OCC in a 
Large Bank data system that is continually updated by the examiners. On a quarterly basis. 

Large Bank supervision reports on the outstanding MRAs by bank and core function to ensure 
that corrective actions remain on track. 

When deficiencies in the BSA/AML area rise to the level of a BSA compliance program 
violation (12 C.F.R. § 21.21). or when a bank fails to correct problems with the program that had 
been previously reported to the bank (including through MRAs). a statutory mandate ( 1 2 U.S.C. 

1 8! 8(s)) requires the banking agency to use its cease and desist (C&D) authority to correct the 
problem. Section 1 8 1 8(s) specifically provides that if an insured depository institution has failed 
to e.stabli.sh and maintain a BSA compliance program or has failed to correct any problem with 
the BSA compliance program previously reported to the institution by the appropriate Federal 
banking agency, the agency shall issue a C&D order against the institution. 

To ensure that the OCC’s process for taking administrative enforcement actions based on BSA 
violations is measured, fair, and fully informed, in 2005, the OCC adopted a process for taking 
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administrative enforcement actions against banks based on BSA violations, including situations 
where a bank fails to correct a problem that was previously brought to its attention. This process 
includes the following .stages: 

(i) Preliminary assessment of the facts and discussion with bank management. 

(ii) Additional reviews by cross fiinctional review groups, including the OCC’s LB Review 
Team. 

(iii) Written findings provided to the bank and an opportunity for the bank to respond. 

(iv) Washington Supervision Review Committee (WSRC) review. The WSRC reviews 
significant enforcement actions propo-sed to be taken by the OCC. including all cases 
involving BSA enforcement, all cases that are unique or highly visible, and those cases 
involving referrals to other agencies. 

(v) Final decision by the appropriate .Senior Deputy Comptroller, 

As previously noted, the OCC also worked within the FFIEC to develop and issue an interagency 
policy on citing BSA compliance program violations and taking enforcement actions, and our 
enforcement decisions are framed by that policy. The Interagency Statement on Enforcement of 
BSA/AML Requirements (Interagency Statement) was issued in 2007 and it sets forth the 
Federal banking agencies' policy on the circumstances in which an agency will issue a C&D 
order to address noncompliance with certain BSA/AML requirements, particularly in light of the 
statutory mandate in Section 1 8 1 8(s). The Interagency Statement provides that a compliance 
program violation occurs where either of the following conditions exists; 

The bank fails to adopt or implement a written BSA compliance program that 
adequately covers the required program elements: (1) internal controls (including 
cu.stomcr due diligence, procedures for monitoring suspicious activity or 
appropriate risk assessment); (2) independent testing; (3) designated compliance 
personnel; and (4) training; or 

File bank has defects in its BSA compliance program in one or more program 
elements indicating that either the written program or its implementation is not 
effective. For example, program deficiencies indicate ineffectiveness where the 
deficiencies are coupled with other aggravating factors such as evidence of: (i) 
highly suspicious activity creating a significant potential for unreported money 
laundering or terrorist financing; (ii) patterns of structuring to evade reporting 
requirements; (iii) significant insider complicity; or (iv) systemic failures to file 
currency transaction reports, suspicious activity reports, or other required BSA 
reports. 

A program violation may occur where customer due diligence, monitoring of suspicious activity, 
risk assessment, or other internal controls fails with respect to a “high risk area," or to “multiple 
lines of business that significantly impact the institution's overall BSA compliance.'' An agency 

8 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00171 Fmt 6601 Stmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



158 


VerDate Nov 24 2008 


will also consider the application of the institution's program across its business lines and 
aetivities. In the case of institutions w'ith multiple lines of business, deficiencies affecting only 
some lines of business or activities would need to be evaluated to dctennine if the deficiencies 
are so severe or signifieant in scope as to result in a conclusion that the institution has not 
implemented an effeetive overall program. 

The Interagency Statement also specifically addresses repeat problems for purposes of the 
statutory mandate for a C&D order in 12 U.S.C. § 1818(s). It provides that in order to be 
eonsidered a '‘problem" within the meaning of section 1 8 1 8(s), the deficieney reported to the 
institution would ordinarily involve a serious defect in one or more of the required eomponcnts 
of the institution's BSA compliance program or implementation thereof. In addition, it 
.sometimes takes a considerable period of time to correct BSA/AML deficiencies e.specially when 
large institutions merge system platforms and information technology changes are required. As a 
result, with regard to repeat problems, the Interagency Statement provides that a C&D is not 
required if the agency detennines that the institution has made "acceptable substantial progress" 
toward correeting the problem at the time of the examination immediately following the 
examination where the problem was first identified and reported to the institution. 

The Report highlights and calls for change in the OCC’s current practice of not citing violations 
of the individual required components of an effective BSA program {i.e., internal controls, 
independent testing, designated compliance personnel, and training) where the deficiencies fall 
short of a program violation. We understand the concerns reflected in the Report that the OCC's 
approach seems to limit examiners to using only MRAs to remedy identified problems, and we 
will revisit our current approach in order to provide more flexibility for individual "pillar'' 
violations to be cited. One of the reasons for the current OCC approach is that it requires the 
OCC to focus on determining whether the deficiencies in a bank's program amount to a BSA 
compliance program violation. Therefore, in implementing changes on this point, it will be 
important not to create disincentives to making the tough calls w hen there are BSA compliance 
program violations mandating the issuance of a C&D order. 

While our practice in this regard has differed from that of the other federal banking agencies, the 
OCC’s public enforcement record is nonetheless strong. As shown in Section IV below, between 
2005 and 2011, the OCC issued BSA/AML focused C&Ds against banks at nearly tw'ice the rate 
of the Federal Deposit Insurance Corporation (FDIC), the neare,st other agency (per number of 
banks supervised), and issued CMPS at nearly four times the rate of the FDIC. The OCC also 
brought over 60 percent of the totol dollar value of BSA penalty actions issued by the OCC, the 
Board of Governors of the Federal Reserve System (Federal Reserve) and the FDIC.^ Thus, the 
component violations being cited by these other agencies arc not resulting in as many C&D 
orders or CMP actions (which are the most stringent types of actions taken), as compared to the 
approach taken by the OCC. 


' As set forth in the chans on the fo!l«^^ing page, between 2005 and 2011. the OCC brought 43 BSA/AMl. focused 
C&Ds against hanks as compared to 58 for the FDIC and 9 for the Federal Reserve. In addition, the OCC issued 
CMPs against 14 hanks totaling SI24 million, as compared to six CMPs issued by the FDIC totaling $24,675 
million, and two CMPs i.ssued by the Federal Reserve totaling $50 million. In 201 1. the OCC supervised 1.973 
hanks, the FDIC supcr\'iscd 4.647 banks, and the l-’ederal Resers’e super\'ised 826 banks and hank holding 
companies. 
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IV. OCC BSA/AML Enforcement Actions and Industry Trends 

In recent years, the OCC has taken numerous formal actions against national banks to bring them 
into compliance with the BSA. These actions are typically C&D orders. The OCC has also 
taken formal actions against institution-affiliated parties who participated in BSA violations. 
Since September 1 1, 2001, the OCC has issued over 180 public formal enforcement actions 
based in whole, or in part, on BSA/AML violations (including formal agreements, C&D orders 
and civil money penalty (CMP) actions). As set forth in the follow'ing charts, between 2005 and 
201 1, the OCC brought BSA focused C&D orders and CMP actions against banks at a higher 
rate than the FDIC and the Federal Reserve (per number of banks supervised): 

Number of Bank BSA Focused C&D Orders by Agency 



2005 

2006 

2007 

2008 

2009 

2010 

2011 

Totals 

OCC 

16 

10 

2 

4 

0 

9 

2 

43 

FDIC 

1 

7 

20 

II 

7 

5 

7 

58 

Federal Reserve 

2 

1 

1 

1 

I 

2 

1 

9 


Number of Depository Institutions Regulated by Agency 



2005 

2006 

2007 

2008 

2009 

2010 

2011 


OCC 

1984 

17621 

1662 

1559 

1495 

1418 

1973 


FDIC 

- 

5243 

5200 

5140 

4987 

4785 

4647 


Federal Reserve 

- 

896 

877 

875 

846 

826 

826 



Number of Bank BSA CMP Actions by Agency 



2005 

2006 

looT^ 

2008 

2009 

2010 

2011 

Totals 

OCC 

3 

1 

3 

2 

1 

2 

2 

14 

FDIC 

0 

3 

0 

0 

0 

1 

2 

6 

Federal Reserve 

1 

0 

1 

0 

0 

0 

0 

2 


Dollar Amou nts of Bank BSA CMP Actions bv Aeenev (In Millions') 



2005 

2006 

2007 

2008 

2009 

2010 

2011 

Totals 

OCC 

$27.75 

$0,15 

$10.75 

$15.2 

$5.0 

$50.2 

$15.0 

$124.05 

FDIC 

0 

$13.4 

0 

0 

0 

$.025 

$11.25 

$24,675 

Federal Reserve 

$30.0 

0 

$20.0 

0 

0 

0 

0 

$50.00 


Some of the more significant recent cases were actions against Wachovia Bank, N.A., Zions First 
National Bank, and Citibank. N.A. There arc also many other examples where the OCC 
identified BSA non-compliance or, in some cases, actual money laundering, took effective action 
to stop the activity, and ensured that accurate and timely referrals were made to law enforcement. 
The Wachovia, Zions, and Citibank actions are discussed below: 
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Wachovia Bank. N.A.. Charlone, North Carolina (Wachovia) - On March 1 7, 20 1 0, the OCC 
assessed a $50 million penalty and issued a C&D order against this bank for violations of the 
BSA as part of a coordinated action with the Department of Justice, FinCEN, and other federal 
agencies. Wachovia also entered into a deferred prosecution agreement with the U.S. Attorney's 
Office in the Southern District of Florida and the Department of Justice (DOJ) Asset Forfeiture 
and Money I.,aundering Section (AFMLS) and agreed to forfeit $110 million to the U.S. 
Additionally, FinCEN assessed a $1 10 million civil money penalty that was deemed satisfied by 
the forfeiture to the U.S. Government. 

The OCC found that Wachovia: (a) failed to implement adequate policies, procedures, or 
monitoring controls governing the repatriation of nearly $14 billion of U.S. dollar (USD) bulk 
cash for high risk casa de cambio (CDC) and other foreign correspondent customers; (b) failed to 
conduct monitoring of high volumes of monetary instruments flowing through the CDCs and 
other foreign correspondent accounts in the form of RDC products, consisting of nearly six 
million checks worth approximately $41 billion; (c) failed to conduct adequate levels of due 
diligence of high risk CDC and foreign correspondent customers; (d) failed to appropriately 
monitor traveler’s checks in a manner that w'as consistent with the bank’s policy limits over 
sequentially numbered traveler’s checks for high risk CDC customers; (e) failed to appropriately 
institute risk-based monitoring of the bank’s foreign correspondent customers, primarily as a 
result of placing too much emphasis on stafling considerations when setting alert parameters; (t) 
failed to file timely SARs involving suspicious transactions conducted through certain foreign 
correspondent accounts at the bank; and (g) failed to adequately report cash structuring activity 
from review of alerts generated in the bank’s Financial Intelligence Unit. After conducting a 
voluntary look back, the bank filed over 4.300 SARs involving su.spicious transactions conducted 
through the bank by CDCs and high risk foreign correspondent customers. 

The OCC’s enforcement action focused attention on the bulk cash repatriation money laundering 
scheme. The OCC played a lead role in this case and linked remote cash letter instrument 
processing to the bulk cash scheme. As a result of the Wachovia investigation and findings, the 
OCC took the lead in integrating bulk cash processing and the RDC implications into the Manual 
and commenced horizontal reviews of bulk cash activity and RDC at all national banks in the 
OCC’s Large Bank supervision program, including FlSBC’s banknote activity. 

Shortly after the Wachovia case, the government of Mexico implemented significant restrictions 
on U.S. dollar transactions at Mexican financial institutions and made significant changes to its 
AML laws and regulatory proccs,ses. In response, the drug cartels have adjusted their money 
laundering schemes and techniques to adapt to this change, and the OCC continues to work with 
law enforcement to identify new areas of vulnerability. 

7Jons First Naiional Bank. Salt Lake City. Utah (Zions) - On February 1 1 , 20 1 1 . the OCC 
assessed an $8 million penalty against Zions for failures involving correspondent banking and 
RDC. Concurrent with the OCC’s penalty. FinCEN assessed an $8 million penalty against 
Zions. Both penalties w ere satisfied by a single $8 million payment to the U.S. Department of 
the Treasury. The OCC had commenced an investigation into the bank’s former foreign 
correspondent business and identified deficiencies in its BSA/AML controls, which resulted in 
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violations of law. In particular, the bank pioneered the development of a RDC product that 
enabled customers to deposit imaged items electronically from remote locations and marketed 
this product to high risk customers with insufficient regard for BSA/AML compliance 
implications. The bank exited the foreign correspondent line of business in early 2008, promptly 
conducted a voluntary look back, and reported suspicious activity. The significance of this case 
is that it presents a good example of how banks need to ensure that compliance issues are at the 
forefront of technological developments and are not secondary issues to be considered after the 
product is launched and the volumes become unmanageable. 

Citibank. N.A.. Sioux Falls. South Dahlia fCilibank) - On April 4, 20 1 2, the OCC entered into a 
consent order with Citibank. N.A., to address BSA deficiencies involving internal controls, 
cu.stomer due diligence, audit, monitoring of its RDC and international cash letter instrument 
processing in connection with foreign correspondent banking, and su.spicious activity reporting 
relating to that monitoring. These findings resulted in violations by the bank of statutory and 
regulatory requirements to maintain an adequate BSA compliance program, file SARs, and 
conduct appropriate due diligence on foreign correspondent accounts. Among its requirements, 
the consent order directs the bank to: (i) ensure the independence of the bank's compliance .staff, 
(ii) require new products and services be subject to high level compliance review, (iii) ensure 
that all customer due diligence processes are automated and accessible; and (iv) conduct a look 
back of the RDC cash letter activity. 

Each of these cases has been discussed extensively at public forums and they underscore the 
OCC’s commitment to ensuring that all national banks and federal savings associations have a 
strong BSA/AML function that keeps pace with changing technologies and threats. 

Our examination and enforcement activities have identified a number of trends and concerns in 
the BSA/AML area that warrant continued attention by supervisors and banks: 

• Compliance Resources - Some cases have identified the lack of sufficient staffing, high 
turnover rates, or the impact of compliance cuts on the program. In .some cases, banks 
cut staffing and resources in the BSA area during the financial crisis. In other cases, 
banks’ compliance department staff and expertise have failed to keep pace with the 
growth of the institution. For example, a mid-size bank should not have the .same 
compliance program and staff levels that it had when it was a smaller community bank. 

• International Focus or Component - Foreign correspondent banking, cross border funds 
transfers, bulk cash repatriation, remote deposit capture, and embassy banking have all 
been high risk areas that some banks have not managed effectively. 

• New Technologies - Some banks have introduced new technologies and products without 
appreciating or understanding the compliance risks. In addition, some products have 
evolved through teehnology and need to be periodically re-evaluated (e.g., prepaid access 
money transfers, payroll cards). 

• Third-Party Relationships and Payment Processors - The OCC and the other banking 
agencies have been reviewing clo.sely third-party and payment proeessor relationships 
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and a number of enforcement actions have been taken in recent years. Banks need to be 
especially aware of the risk.s presented by payment processors and the extent of their 
franchising relationships (RTN numbers, routing numbers, and ATM machines). 

• Evolving Payments Activities - Prepaid access, mobile phone banking, smart ATM 
machines and kiosks, mobile wallets, and Internet cloud-based payment processes are all 
technologies that are developing rapidly, and senior bank compliance personnel need to 
be engaged in the product development processes. OFAC monitoring is especially 
important and challenging in this area. 

• Migration to Smaller Banks - As some large or mid-size banks have attempted to lower 
their risk profiles, money launderers have tried to enlist community banks to step in and 
provide key payments functions. This raises concern as these institutions may lack the 
resources and personnel necessary to successfully manage higher risk activities. 

Many of the practical problems seen in recent years with respect to BSA compliance can be 
summed up within four areas: (i) culture of compliance within the organization, (ii) commitment 
of sufficient and expert resources, (iii) strength of information technology and monitoring 
processes, and (iv) sound risk management. The OCC will continue to identify these trends, 
communicate them to the industry, and ensure that BSA/AML supervision stays current. 

V. Improvements Undertaken to Improve BSA/AML Supervision 

The OCC is committed to rigorous supervision, strong enforcement, and continuous 
improvement to our supervisory approach to BSA/AML compliance. While we have previously 
discussed herein some recent BSA/AML related initiatives, other current initiatives include the 
following: 

• We are implementing changes to our I.,B Review Team process to make it more effective 
in supporting and ensuring consistency of the supervisory processes for the larger banks 
we supervise, 

• We are reviewing the manner in which MRAs are reported to ensure that banks with high 
numbers of MRAs in one particular CAMELS/ITCC area are receiving additional 
supervi.sory attention and. in the case of BSA/AML. consideration of formal enforcement 
action. 

• The OCC's MLR database includes a detailed inventory of the products and services 
being offered by each community bank so that the OCC can assess the BSA/AML risks 
within each particular institution for use in scoping and staffing examinations. We will 
annually update the information collection processes pertaining to this tool to ensure that 
it captures higher risk and novel products. We will also consider whether similar tools 
should be implemented to our Large Bank and Midsize Bank portfolios. 

• As previously described, we are strengthening and reinforcing the expectation that 
BSA/AML and OFAC deficiencies arc taken into consideration in detennining the 
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Management rating. We will also instruct our examiners to cease the practice of 
factoring BSA/AML and OFAC compliance into the Consumer Compliance rating. 

• As described in Section 111, we will also look closely at the Report's recommendation 
eoneeming citing BSA/AML compliance violations. 

In addition, we are committed to keeping abreast of how new technologies and payment systems 
may affect BSA/AML compliance and to provide the industry and examiners with guidance on 
these emerging risks. For example, in 2006 the OCC issued comprehensive risk management 
guidance for Automated Clearing House (ACH) transactions, and the OCC continues to work 
with the other regulators to ensure that international ACH transactions are properly monitored 
for both BSA/AML and OFAC compliance. In June of last year, the OCC issued risk 
management guidance for prepaid access programs and continues to develop guidance for banks 
with regard to this rapidly growing product. And earlier this month, the OCC worked with the 
FFIBC to issue a statement on outsourced Internet cloud computing services that discusses key 
risk considerations as.sociated with outsourced cloud computing activities, including cloud ba.sed 
payment processes and systems, and identifies applicable risk mitigation considerations 
contained in the various booklets that comprise the FFIEC IT Examination Handbook. 

VI. Overview of HSBC and OCC’.s BSA/AML Examinations 


HSBC North America Holdings Inc. (HNAH) is the holding company for HSBC’s operations in 
the U.S. HNAH is controlled by HSBC pic, London. England (HSBC Group), a S2.5 trillion 
global banking company w'ith hundreds of financial institution subsidiaries throughout the world. 
Fhe principal subsidiaries of HNAH at December 31, 201 1 were HSBC USA Inc. (FIUSI), 

HSBC Markets (USA) Inc, a holding company for certain global banking and markets 
.subsidiaries. HSBC Finance Corporation, a holding company for consumer finance businesses, 
and HSBC Technology and Services (USA) Inc, a provider of information technology and 
centralized operational and support services among the subsidiaries of HNAH. The Bank is a 
subsidiary of HUSI. "Group Entities" are foreign affiliates of the Bank in which HSBC Group 
holds a majority interest. 

The Bank serves 3,8 million customers through its personal financial services, commercial 
banking, private banking, asset management, and global banking and markets segments. It 
operates several hundred bank branches throughout the U.S., predominantly in New York State 
as well as branches and/or representative offices in California, Connecticut, Delaware, Florida, 
Georgia, Illinois, Maryland, Massachusetts, New Jersey, North Carolina, Oregon, Pennsylvania, 
Texas, Virginia, Washington, and the District of Columbia. The Bank has five main lines of 
business as follows: 

(i) Retail Banking and Wealth Management provides a broad range of financial products 
and services including loans, residential mortgages, deposits, branch services and 
brokerage products and services; 

(ii) Commercial Banking offers global banking services, along with financial planning to 
companies, government entities and non-profit organizations. In addition to deposits, 
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services include payments and cash management (PCM), merchant services, trade, 
supply chain, receivables finance, corporate finance, global markets and risk advisory; 

(iii) Global Banking and Markets is an emerging markcts-led and financing focused 
business that provides tailored financial solutions to government, corporate and 
institutional clients worldwide, and the Bank manages its Global Banking and Markets 
operations as a global business and maintains offices in more than 60 countries and 
territories; 

(iv) HSBC Global Asset Management is the core investment business of the HSBC Group 
managing assets totaling $429.4 billion: and 

(v) HSBC Private Bank, a division of the Bank, offers wealth management and specialist 
advisory services for high net worth individuals and families with local and 
international needs. 

On April 30, 2003, the then HSBC Bank USA entered into a written agreement with the Federal 
Reserve Bank ofNew York and the New York State Banking Department regarding its 
compliance with AML requirements. When HSBC Bank USA merged with HSBC Bank & 

Trust (Delaware) N.A., on July 1. 2004, the OCC. as the regulator of the surviving national bank, 
made the merger conditional on the Bank's continuing compliance with the requirements of the 
written agreement. On February 6, 2006, the OCC determined that the Bank had satisfied the 
requirements of the written agreement and the agreement was terminated. 

Between 2004 and 2009, on-site OCC examiners conducted numerous examinations and issued 
Supervisory Letters covering, among other areas, pouch activity, embassy banking, foreign 
correspondent banking, PCM, SAR monitoring systems, and risk assessment processes and 
systems. During these examinations, the OCC followed the FFIBC Manual examination 
procedures and conducted transaction testing. Over the course of this five year period, the OCC 
issued Supervisory Letters that contained a significant number of MRAs that the Bank 
committed to resolving. The MRAs addressed BSA/AML risk assessments, customer due 
diligence, compliance leadership, staffing, alert backlogs, and SAR monitoring processes and 
enhancements. 

As described earlier in this testimony, compliance with MRAs is tracked as part of the OCC’s 
supervisory process. In this case, MRAs in the BSA/AML area were reviewed periodically, and 
determinations were made whether the MRAs had been addressed. 

In rnid-2009, as a result of the bulk cash findings in the Wachovia investigation, the OCC 
launched horizontal examinations of banknote operations in other large national banks 
supervised by the OCC that included FISBC and its transactions w'ith HSBC Mexico. After 
finding significant deficiencies in the Bank's oversight of its banknote operations and after 
meeting with law enforcement and obtaining additional information on this activity, the OCC 
developed a detailed action plan to expand the scope of the ongoing examination of banknote 
customers. The expanded scope included evaluation of the Bank's compliance with all 
BSA/AML laws and regulations relating to foreign correspondent activity (including RDC 
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activity, pouch activity, and specific foreign correspondent relationships), OFAC compliance, 
and the effectiveness of management’s efforts to manage risk on an enterprise wide basis. 

The OCC conducted its expanded examination during 2009- 10. It encompassed, among other 
things, an evaluation of specific banknote elientele. The OCC reviewed internal bank policies 
and procedures, systems and controls, training initiatives, and documentation supporting the 
Bank’s compliance efforts. The examiners reviewed know-your-customer 
documentation/information pertaining to the sample, customer due diligence 
documentation/information, enhanced due diligence documentation/information, related account 
statements, specific transactions, pouch activities, cash letter activities, w'ire transfer activities, 
audit report/processes, RDC activity, foreign exchange transactions, trade transactions, 
monitoring processes, alert processing, SAR and related processes, subpoena 
documentation/infonnation, the Bank’s OFAC program, and all other relevant bank 
documentation and correspondence from 2004 to the current period. 

As a part of the examination, the OCC notified the Bank in March 2010 that it had violated OCC 
regulations due to a significant backlog of unprocessed alerts. The Bank’s subsequent review of 
the backlogged alerts led it to file a substantial number of late SARs with law enforcement 
authorities. The OCC akso identified a number of previously undisclosed bearer share account 
relationships. The OCC is currently assessing the consequences of this finding, and the Bank’s 
implementation of corrective measures. 

The OCC ultimately determined that the Bank failed to adopt and implement a compliance 
program that adequately covered the required BSA/AML program elements including, in 
particular, internal controls for customer due diligence, procedures for monitoring suspicious 
activity, and independent testing. The Bank’s compliance program and its implementation were 
found to be ineffective, and accompanied by aggravating factors, such as highly suspicious 
activity creating a significant potential for unreported money laundering or terrorist financing. 

The number of MRAs cited over the preceding years reflected a pattern where the Bank reacted 
when problems were identified by the OCC, but failed to fulfill its fundamental responsibility of 
maintaining a program that effectively deterred money laundering and self-identifying and 
correcting deficiencies in its BSA/AML program. In addition, based on issues we had identified 
in our exams at other institutions, wc began to drill down into specific areas of the Bank’s 
operations. As wc did so. we discovered that the Bank had additional and severe pre-existing 
BSA/AML deficiencies - beyond what we had previously understood. Our work in these areas 
triggered further discoveries of additional, severe deficiencies. As a result, in the fall of 2010, 
we took forceful and comprehensive enforcement action. With the benefit of hindsight, the OCC 
should have taken this action sooner. 

Vll. HSBC C&D Order 


The OCC issued a C&D order against the Bank in October 2010. Concurrent with the OCC's 
enforcement action, the Federal Reserve issued a C&D order upon consent with the Bank’s 
parent company, HNAH, to ensure the adequacy of the parent company’s firm-wide compliance 
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risk managemenl program. The OCC and the Federal Reserve coordinated closely in drafting the 
respective orders. 

Some of the critical deficiencies in the Bank’s BSA/AML compliance program cited in the 
OCC's order included the following: 

• Lack of effective monitoring of wire activity. The Bank, in effect, exempted from 
automated monitoring wire transfers for customers domiciled in countries risk rated as 
standard or medium risk. This represented tw'o-thirds of total dollar volume for PCM. 
While the Bank employed other methods for monitoring wire transactions for customers 
located in countries risk rated standard or medium, these alternatives provided limited 
coverage, were not effective, and did not mitigate the BSA/AML risks posed, 

• From mid-2006 through mid-2009. the Bank did not perform any BSA/AML monitoring 
for banknote (or “bulk cash") transactions with Group Entities (affiliates), 

• The Bank did not maintain customer due diligence information on Group Entities, 

• The Bank failed to re.solve its monitoring system alerts in a timely manner, leading to 
significant backlogs and late SAR tilings, 

• The Bank did not appropriately designate customers as high risk for purposes of 
BSA/AML monitoring, even where a customer’s association with politically-exposed 
persons could hami the Bank’s reputation. 

• Serious weaknesses in Bank’s systems and controls constituted violations of 12 C.F.R. 
21.21 (program), 21,1 1 (SAR), and 31 CFR 103,176 (correspondent banking). 

As the OCC's order set forth, the violations and failures were the result of a number of factors, 
including: (i) inadequate staffing and procedures in the alert investigations unit that resulted in a 
significant backlog of alerts; (ii) the closure of alerts based on ineffective review; (iii) inadequate 
monitoring of Group Entities’ correspondent accounts for purpose and anticipated activity, anti- 
money laundering record, or consistency betw'cen actual and anticipated account activity; (iv) 
unwarranted reliance on Group Entities’ following HSBC Group BSA/AML policies; (v) 
inadequate monitoring of funds transfers; (vi) inadequate procedures to ensure the timely 
reporting of suspicious activity; (vii) failure to adequately monitor Group Entities’ banknote 
activity; (viii) inadequate monitoring of correspondent funds transfer activity; and (ix) 
inadequate collection and analysis of customer due diligence information, including inadequate 
monitoring of politically exposed persons. 

The OCC’s C&D order requires the Bank to submit a comprehensive BSA/AML action plan to 
achieve full compliance and ensure that the Bank has sufficient processes, personnel and control 
systems to implement and adhere to the order. It requires the Bank to hire a qualified permanent 
regional compliance officer and a qualified, permanent BSA officer. It further requires the Bank 
to improve its BSA/AML monitoring systems, including its funds transfer monitoring, and to 
develop and maintain a management information system (MIS) program that compiles customer 
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due diligence and enhanced due diligence (know your customer) information that includes the 
identification of ‘‘offshore” correspondent accounts and the identification of politically exposed 
persons. The order also contains restrictions on growth, new products, and high-risk lines of 
business, and it requires OCC approval to reenter the bulk cash repatriation business. 

The C&D order additionally required the Bank to hire an independent consultant to conduct a 
comprehensive account/transaction activity review (Look Back). The purpose of the Look Back 
was to determine whether suspicious activity was timely identified by the Bank and to 
supplement the OCC’s investigation of specific account relationships, transactions, and products 
and services that had been identified as potentially problematic. (Transaction reviews and look 
backs are routinely used by the OCC and the other Federal banking agencies to require banks to 
review past activities and file SARs as necessary.) Some of the account relationships, 
transactions, and products and services included in the Subcommittee's report, were .specifically 
covered within the scope of the Look Back. 

The Look Back required the Bank to review 31 specific correspondent account relationships, 
including several HSBC affiliates and HSBC .Mexico, over an eighteen month time period 
covering banknotes, wire, RDC, and pouch activities. 

The Look Back also required the Bank to review specific alerts that had been clo,sed due to a 
reduction in a country's risk rating and over a two month time period, including: 

• All alerts closed based on "positive internet information;” 

• Wire transfers originating in five .standard and medium risk countries that were sent to 
seven high risk countries; 

• Wire transfers (originating or terminating) between several pairs of .standard and medium 
ri.sk countries; 

• International (cross-border) book entry transfers; 

• All account activity during this period for accounts subject at any time during the period 
to requests pursuant to section 314(a) or section 3 14(b) of the USA PATRIOT Act, or to 
subpoenas relating to BSA/AML i.s.sues; and 

• All alerts elo.sed more than 60 days after generation of the alert including, without 
limitation, alerts cIo.sed in response to the OCC's Supcrvi.sory Letter (over a three month 
time period). 

The C&D order is a remedial document that is designed to obtain correction of violations of law 
and unsafe or unsound practices at the Bank. The issuance of the order does not preclude the 
OCC from assessing a civil money penalty at a later time. The OCC is now actively engaged in 
evaluating the Bank's compliance with the C&D order and in considering the assessment of 
CMPs. 
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VIII. Cooperation with Law Enforcement/Regulatorv Agencies 

Ilie OCC cooperates and coordinates on an interagency basis to address BSA/'AML issues. We 
actively participate in .several interagency groups focusing on B.SA/A1V1L compliance, including 
the Bank Secrecy Act Advisory Group (BSAAG), chaired by FinCEN, which is composed of 
policy, legal, and operations representatives from the major federal and state law enforcement 
and regulatory agencies involved in the fight against money laundering, as well as industry 
representatives; the FFIEC BSA Working Group which, similar to the FFIEC itself, has a 
rotating chairman and is composed of representatives of federal and state regulatory agencies; 
and the National Interagency Bank Fraud Working Group, chaired by the Department of .lustice, 
and composed of representatives of the federal law enforcement and regulatory agencies (the 
OCC has been an active member of this group since its founding in 1984). 

To remain in the forefront of new technologies and payment systems, the OCC also participates 
in various interagency working groups, including the Interagency Cyberfraud Working Group, 
the Payments Fraud Working Group, the Financial Services Information Sharing and Analysis 
Center (FS-ISAC), the BSAAG Prepaid Card Subcommittee, and regularly participates in 
payments conferences and industry forums. 

In addition, the OCC works on an international basis with the Financial Action Ta.sk Force, an 
inter-governmental body whose purpose is the development and promotion of policies to combat 
money laundering. We have participated in various State and Treasury Department missions to 
assiiit foreign governments in their anti-money laundering efforts. We expect that these 
international efforts will continue. The OCC also regularly provides information, documents, 
and expertise to law enforcement for use in criminal investigations on a case-specific basis. 

With respect to HSBC, the OCC has worked closely with the Federal Reserve. FinCEN and law 
enforcement in addressing the problems identified at FISBC and will continue to do .so to ensure 
that all problems are identilied and addressed. 

IX. Conclusion 


The OCC is committed to rigorous BSA/AML and OFAC supervision, strong enforcement, and 
continuing improvement in our supervision in this important area. We are closely reviewing the 
Subcommittee’s Report and. as discussed earlier in this statement, we have already identified 
actions that we will take in response to its recommendations. 

The OCC will continue to work with Congress, the other financial institutions regulatory 
agencies, law enforcement agencies, and the banking industry to develop and implement a 
coordinated and comprehensive response to the threat posed to the nation’s financial system by 
money launderers. terrorist financiers and criminal organizations. The OCC recognizes that the 
determination and ingenuity of those who commit financial crimes requires ongoing vigilance. 
We also recognize that technical innovations, new and more convenient financial services 
products, and globalization trends are rapidly changing the BSA/AML landscape. These are 
major challenges for both the financial services industry and its regulators and, for our part, we 
are committed to meeting them. 
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U.S. VULNERABILITIES TO MONEY LAUNDERING, 
DRUGS, AND TERRORIST FINANCING: 

HSBC CASE HISTORY 


This Report examines the anti-money laundering (AML) and 
terrorist financing vulnerabilities created when a global bank uses its 
U.S. affiliate to provide U.S. dollars, U.S, dollar services, and access to 
the U.S. financial system to high risk affiliates, high risk correspondent 
banks, and high risk clients. This Report also offers recommendations to 
strengthen correspondent AML controls to combat money laundering, 
drug trafficking, and terrorist financing. 

I. EXECUTIVE SUMMARY 

Over the last decade, the U.S. Senate Permanent Subcommittee on 
Investigations has worked to strengthen U.S. AML efforts by 
investigating how money launderers, terrorists, organized crime, corrupt 
officials, tax evaders, and other wrongdoers have utilized U.S. financial 
institutions to conceal, transfer, and spend suspect funds.' In 2001, the 
Subcommittee focused, in particular, on how U.S. banks, through the 
correspondent services they provide to foreign financial institutions, had 
become conduits for illegal proceeds associated with organized crime, 
drug trafficking, and financial fraud." Correspondent banking occurs 
when one financial institution provides services to another financial 
institution to move funds, exchange currencies, cash monetary 
instruments, or carry out other financial transactions. The 
Subcommittee’s 200 1 investigation showed not only how some poorly 
managed or corrupt foreign banks used U.S. bank accounts to aid and 
abet, commit, or allow clients to commit wrongdoing, but also how U.S. 
financial institutions could protect themselves and the U.S. financial 
system from misuse. 

In response to that investigation and the money laundering 
vulnerabilities exposed by the 9/1 1 terrorist attack. Congress enacted 
stronger AML laws as part of the Patriot Act of 2002, including stronger 


’ Sec, e.g., U.S. Senate Permanent Subcommittee on Investigations, “Keeping Foreign 
Corruption out of the United States,” S.Hrg. 1 1 1-540 (Feb. 4, 2010); “Tax Haven Banks and U.S. 
Tax Compliance,” S.Hrg. 1 10-614 (July 17 and 25, 2008); “Tax Haven Abuses: The Enablers, 
The Tools and Secrecy,” S.Hrg. 109-797 (Aug. 1, 2006); “Money Laundering and Foreign 
Corruption: Enforcement and Effectiveness of the Patriot Act,” S.Hrg. 108-633 (July 15,2004); 
“Role of U.S. Correspondent Banking in International Money Laundering,” S.Hrg. 107-84 
(March 1, 2 and 6, 2001); and “Private Banking and Money Laundering: A Case Study of 
Opportunities and Vulnerabilities,” S.Hig. 106-428 (Nov. 9 and 10, 1999). See also U.S. Senate 
Committee on Homeland Security and Governmental Affairs, “State Business Incorporation - 
2009,” STIrg. 1 1 1-953 (June 1 8 and Nov. 5, 2009). 

^ “Role of U.S. Correspondent Banking in Internationa! Money Laundering,” U.S. Senate 
Permanent Subcommittee on Investigations, S.Hrg. 107-84 (March 1, 2 and 6, 2001)(hereinafter 
“200 ! Subcommittee Hearing on Correspondent Banking”), at 1 . 
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provisions to combat the misuse of correspondent services? Federal 
bank regulators followed with stronger regulations'* and examination 
requirements’ to guard against money laundering through correspondent 
accounts. In response, over the next ten years, U.S. banks substantially 
strengthened their correspondent AML controls. Before the 2002 Patriot 
Act, for example, most U.S. banks opened correspondent accounts for 
any foreign bank with a banking license; now, most U.S. banks evaluate 
the riskiness of each foreign bank’s owners, business lines, products, 
clients, and AML controls before agreeing to open an account. They 
also routinely monitor account activity and wire transfers for suspicious 
activity, with enhanced monitoring of high risk correspondents. In 
addition, before the 2002 Patriot Act, some U.S. banks readily opened 
accounts for foreign shell banks, meaning banks without any physical 
presence in any jurisdiction; today, in accordance with the Patriot Acfs 
ban on shell bank accounts, all U.S. banks take measures to ensure they 
don’t provide services to such banks, the ban on shell bank accounts has 
become an international AML standard,* and the thousands of stand- 
alone shell banks licensed by the Bahamas, Cayman Islands, Nauru, and 
other jurisdictions have virtually disappeared. 

At the same time, the money laundering risks associated with 
correspondent banking have not been eliminated. Correspondent 
accounts continue to provide a gateway into the U.S. fmaneial system, 
and wrongdoers eontinue to abuse that entryway. This investigation 
takes a fresh look at the U.S. vulnerabilities to money laundering and 
terrorist financing associated with correspondent banking, focusing in 
particular on the operations of global banks with U.S. affiliates that 
enable foreign financial institutions to gain access to the U.S. financial 
system. 

HSBC Case Study. To examine the current money laundering and 
terrorist financing threats associated with correspondent banking, the 
Subcommittee selected HSBC as a case study. HSBC is one of the 
largest financial institutions in the world, with over $2.5 trillion in 
assets, 89 million customers, 300,000 employees, and 201 1 profits of 
nearly $22 billion. HSBC, whose initials originally stood for Hong 


^ See, e.g., Sections 312, 313, and 31 9(b) of the USA Patriot Act (requiring due diligence to be 
conducted when opening accounts for foreign banks, with enhanced due diligence for offshore 
banks and banks in high risk jurisdictions; prohibiting the opening of correspondent accounts for 
shell banks; and strengthening the ability of U.S. regulators to obtain correspondent account 
records). 

^ See, e.g., 31 CFR §§103.175,103.176, 103.177, 103.185. 

^ See, e.g., 4/29/2010 “Bank Secrecy Act/Anti-Money Laundering Examination Manual,” issued 
by the Federal Financial Institutions Examination Council, “Foreign Correspondent Account 
Recordkeeping and Due Diligence,” at 117-129, 183-187, 

http://www.ffiec.gov/bsa_aml_infobase/documents/BSA_AML_Man_201 0. pdf. Prior versions 
of this Manual were issued in 2005 and 2007. 

^ See “International Standards on Combating Money Laundering and the Financing of Terrorism 
& Proliferation; The FATF Recommendations,” issued by the Financial Action Task Force 
(2/2012), FATF Recommendation 13. 
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Kong Shanghai Banking Corporation, now has operations in over 80 
countries, with hundreds of affiliates spanning the globe. Its parent 
corporation, HSBC Holdings pic, called“HSBC Group,”is headquartered 
in London, and its Chief Executive Officer is located in Hong Kong. 

Its key U.S. affiliate is HSBC Bank USA N.A. (HBUS). HBUS 
operates more than 470 bank branches throughout the United States, 
manages assets totaling about $200 billion, and serves around 3.8 
million customers. It holds a national bank charter, and its primary 
regulator is the U.S. Office of the Comptroller of the Currency (OCC), 
which is part of the U.S. Treasury Department. HBUS is headquartered 
in McLean, Virginia, but has its principal office in New York City. 
HSBC acquired its U.S. presence by purchasing several U.S. financial 
institutions, including Marine Midland Bank and Republic National 
Bank of New York. 

A senior HSBC executive told the Subcommittee that HSBC 
acquired its U.S. affiliate, not just to compete with other U.S. banks for 
U.S. clients, but primarily to provide a U.S. platform to its non-U.S. 
clients and to use its U.S. platform as a selling point to attract still more 
non-U.S. clients. HSBC operates in many jurisdictions with weak AML 
controls, high risk clients, and high risk financial activities including in 
Asia, the Middle East, and Africa. Over the past ten years, HSBC has 
also acquired affiliates throughout Latin America. In many of these 
countries, the HSBC affiliate provides correspondent accounts to foreign 
financial institutions that, among other services, are interested in 
acquiring access to U.S. dollar wire transfers, foreign exchange, and 
other services. As a consequence, HSBCs U.S. affiliate, HBUS, is 
required to interact with other HSBC affiliates and foreign financial 
institutions that face substantial AML challenges, often operate under 
weaker AML requirements, and may not be as familiar with, or 
respectful of, the tighter AML controls in the United States. HBUS’ 
correspondent services, thus, provide policymakers with a window into 
the vast array of money laundering and terrorist financing risks 
confronting the U.S. affiliates of global banks. 

The Subcommittee also examined HSBC because of its weak AML 
program. In September 2010, the OCC issued a lengthy Supervisory 
Letter citing HBUS for violating Federal AML laws, including by 
maintaining an inadequate AML program. In October 2010, the OCC 
issued a Cease and Desist Order requiring HSBC to strengthen multiple 
aspects of its AML program.’ The identified problems included a once 
massive backlog of over 17,000 alerts identifying possible suspicious 


’ On the same day, in coordination with the OCC, the Federal Reserve issued a Cease and Desist 
order to HBUS’ holding company, HSBC North America Holdings, Inc. (HNAH), citing HNAH 
for an inadequate AML program and requiring it to revamp and strengthen both its program and 
that of HBUS. 
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activity that had yet to be reviewed; ineffective methods for identifying 
suspicious activity; a failure to file timely Suspicious Activity Reports 
with U.S. law enforcement; a failure to conduct any due diligence to 
assess the risks of HSBC affiliates before opening correspondent 
accounts for them; a 3-year failure by HBUS, from mid-2006 to mid- 
2009, to conduct any AML monitoring of $15 billion in bulk cash 
transactions with those same HSBC affiliates, despite the risks 
associated with large cash transactions; poor procedures for assigning 
country and client risk ratings; a failure to monitor $60 trillion in annual 
wire transfer activity by customers domiciled in countries rated by 
HBUS as lower risk; inadequate and unqualified AML staffing; 
inadequate AML resources; and AML leadership problems. Since many 
of these criticisms targeted severe, widespread, and longstanding AML 
deficiencies, they also raised questions about how the problems had been 
allowed to accumulate and why the OCC had not compelled corrective 
action earlier. 

During the course of its investigation into HSBCs AML 
deficiencies, the Subcommittee issued multiple subpoenas and collected 
and reviewed over 1.4 million documents, including bank records, 
correspondence, emails, and legal pleadings. The Subcommittee staff 
also conducted over 75 interviews with officials at HSBC Group, 

HBUS, and other HSBC affiliates, as well as with U.S. banking 
regulators. In addition, the Subcommittee received numerous briefings 
from HSBC legal counsel, initiated inquiries with foreign banks that had 
HSBC accounts, and consulted with experts on AML and terrorist 
financing issues. HSBC was fully cooperative with the inquiry, 
producing documentation and witnesses from around the world, 
including documents for which it could have claimed privilege. 

As a result of its investigation, the Subcommittee has focused on 
five issues illustrating key AML and terrorist financing problems that 
continue to impact correspondent banking in the United States. They 
include opening U.S. correspondent accounts for high risk affiliates 
without conducting due diligence; facilitating transactions that hinder 
U.S. efforts to stop terrorists, drug traffickers, rogue jurisdictions, and 
other from using the U.S. financial system; providing U.S. 
correspondent services to banks with links to terrorism; clearing bulk 
U.S. dollar travelers cheques despite signs of suspicious activity; and 
offering high risk bearer share corporate accounts. Avoiding the money 
laundering risks involved in these activities requires an effective AML 
program, with written standards, knowledgeable and adequate staff, the 
infrastructure needed to monitor account and wire transfer activity for 
suspicious transactions, effective AML training, and a compliance 
culture that values obtaining accurate client information. In addition to 
focusing on these five issues at HBUS, the Subcommittee investigation 
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examined the regulatory failures that allowed these and other AML 
problems to fester for years. 

Servicing A High Risk Affiliate. In 2001, the Suhcommitteds 
investigation dehunked the notion that U.S. hanks should open a 
correspondent account for any foreign bank with a banking license, 
establishing instead the need to use due diligence to evaluate the money 
laundering and terrorist financing risks posed by a specific foreign 
financial institution before opening an account. Today, some U.S. 
affiliates of global banks engage in an equally ill-advised practice, 
opening correspondent accounts for any affiliate owned by the parent 
holding corporation, with no analysis of the AML or terrorist financing 
risks. 


Until recently, HSBC Group policy instructed its affiliates to 
assume that all HSBC affiliates met the Group’s AML standards and to 
open correspondent accounts for those affiliates without additional due 
diligence. For years, HBUS followed that policy, opening U.S. 
correspondent accounts for HSBC affiliates without conducting any 
AML due diligence. Those affiliates have since become major clients of 
the bank. In 2009, for example, HBUS determined that'HSBC Group 
affiliates clear[ed] virtually all USD [U.S. dollar] payments through 
accounts held at HBUS, representing 63% of all USD payments 
processed by HBUS!* HBUS failed to conduct due diligence on HSBC 
affiliates despite a U.S. law that has required all U.S. banks, since 2002, 
to conduct these due diligence reviews before opening a U.S. 
correspondent account for any foreign financial institution, with no 
exception made for foreign affiliates. 

One HSBC affiliate that illustrates the AML problems is HSBC 
Mexico, known as HBMX. HBUS should have, but did not, treat 
HBMX as a high risk correspondent client subject to enhanced due 
diligence and monitoring. HBMX operated in Mexico, a country under 
siege from drug crime, violence and money laundering; it had high risk 
clients, such as Mexican casas de cambio and U.S. money service 
businesses; and it offered high risk products, such as U.S. dollar 
accounts in the Cayman Islands. In addition, from 2007 through 2008, 
HBMX was the single largest exporter of U.S. dollars to HBUS, 
shipping $7 billion in cash to HBUS over two years, outstripping larger 
Mexican banks and other HSBC affiliates. Mexican and U.S. authorities 
expressed repeated concern that HBMXs bulk cash shipments could 
reach that volume only if they included illegal drug proceeds. The 
concern was that drug traffickers unable to deposit large amounts of cash 
in U.S. banks due to AML controls were transporting U.S, dollars to 
Mexico, arranging for bulk deposits there, and then using Mexican 

See 9/9/2009 chart entitled, “HSBC Profile,” included in “HSBC OF AC Compliance Program,” 
a presentation prepared by HSBC and provided to the OCC, at HSBC OCC 8874197. 
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financial institutions to insert the cash back into the U.S. financial 
system. 

In addition to its high risk location, clients, and activities, HMBX 
had a history of severe AML deficiencies. Its AML problems included a 
widespread lack of Know Your Customer (KYC) information in client 
files; a dysfunctional monitoring system; bankers who resisted closing 
accounts despite evidence of suspicious activity; high profile clients 
involved in drug trafficking; millions of dollars in suspicious bulk 
travelers cheque transactions; inadequate staffing and resources; and a 
huge backlog of accounts marked for closure due to suspicious activity, 
but whose closures were delayed. For eight years, from 2002 to 2010, 
HSBC Group oversaw efforts to correct HBMXs AML deficiencies, 
while those efforts fell short. At the same time, HSBC Group watched 
HBMX utilize its U.S. correspondent account, without alerting HBUS to 
the AML risks it was incurring. 

HBUS compounded the AML risks it incurred from HBMX 
through its own AML deficiencies, which included failing to investigate 
or evaluate HBMXs AML risks. HBUS also failed, from mid-2006 to 
mid-2009, to conduct any AML monitoring of its U.S. dollar 
transactions with HSBC affiliates, including HBMX, despite the obvious 
well-known risks attendant with large cash transactions. In addition, 
because HBUS deemed HBMX to be located in a low risk country, 
HBUS failed until 2009, to monitor HBMXs wire transfer or account 
activity. HBMX illustrates the money laundering and drug trafficking 
risks that result when the U.S. affiliate of a global bank serves as the 
U.S. gateway for a high risk affiliate allowed to operate with no initial 
due diligence or ongoing monitoring. 

Circumventing OFAC Prohibitions. The United States has 
devoted significant resources to stopping some of the most dangerous 
persons and jurisdictions threatening the world today from utilizing the 
U.S. financial system, including terrorists, persons involved with 
weapons of mass destruction, drug traffickers, and persons associated 
with rogue jurisdictions such as Iran, North Korea, and Sudan. To 
implement the law, the U.S. Treasury Depaitmenfs Office of Foreign 
Assets Control (OFAC) has developed a list of prohibited persons and 
countries which banks use to create an'OFAC filtef’to identify and halt 
potentially prohibited transactions. Transactions stopped by this filter 
typically undergo an individualized review to see if the transaction can 
proceed or the funds must be blocked. 

Because the OFAC filter can end up delaying or blocking 
transactions that are permitted under U.S. law or by other jurisdictions, 
some non-U.S. financial institutions have used tactics to circumvent it. 
Common tactics include stripping information from wire transfer 
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documentation to conceal the participation of a prohibited person or 
country, or characterizing a transaction as a transfer between banks in 
approved jurisdictions, while omitting underlying payment details that 
would disclose participation of a prohibited originator or beneficiary. In 
the case of Iran, some foreign banks also abused what were known as“U- 
turri’ transactions, which were allowable transactions under Treasury 
regulations prior to November 2008. In recent years, the United States 
has imposed steep penalties on banks that violated the OFAC 
prohibitions. 

At HBUS, documents provided to the Subeommittee indicate that, 
for years, some HSBC affiliates took action to circumvent the OFAC 
filter when sending OFAC sensitive transaetions through their U.S. 
dollar correspondent accounts at HBUS. From at least 2001 to 2007, 
two HSBC affiliates, HSBC Europe (HBEU) and HSBC Middle East 
(HBME), repeatedly sent U-tum transactions through HBUS without 
disclosing links to Iran, even though they knew HBUS required full 
transparency to process U-tums. To avoid triggering the OFAC filter 
and an individualized review by HBUS, HBEU systematieally altered 
transaction information to strip out any reference to Iran and 
characterized the transfers as between banks in approved jurisdictions. 
The affiliates’ use of these practiees, which even some within the bank 
viewed as deceptive, was repeatedly brought to the attention of HSBC 
Group Compliance, by HBUS compliance personnel and by HBEU 
personnel who objected to partieipating in the document alteration and 
twice announced deadlines to end the activity. Despite this information, 
HSBC Group Compliance did not take decisive action to stop the 
conduct or inform HBUS about the extent of the activity. At the same 
time, while some at HBUS elaimed not to have known they were 
processing undisclosed Iranian transactions from HSBC affiliates, 
internal documents show key senior HBUS officials were informed as 
early as 2001 . In addition, HBUS' OFAC filter repeatedly stopped 
Iranian transactions that should have been disclosed to HBUS by HSBC 
affiliates, but were not. Despite evidence of what was taking place, 
HBUS failed to get a full accounting of what its affiliates were doing or 
ensure all Iranian transactions sent by HSBC affiliates were stopped by 
the OFAC filter and reviewed to ensure they were OFAC compliant. In 
addition, documents show that, from 2002 to 2007, some HSBC 
affiliates sent potentially prohibited transactions through HBUS 
involving Burma, Cuba, North Korea, Sudan, and other prohibited 
countries or persons. Other documents indicate that some HSBC 
affiliates may have sent non-U.S. dollar messaging traffic through U.S. 
servers in which the OFAC filter was not turned on or was restricted. 

An outside auditor hired by HBUS has so far identified, from 2001 
to 2007, more than 28,000 undisclosed, OFAC sensitive transactions that 
were sent through HBUS involving $19.7 billion. Of those 28,000 
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transactions, nearly 25,000 involved Iran, while 3,000 involved other 
prohibited countries or persons. The review has characterized nearly 
2,600 of those transactions, including 79 involving Iran, and with total 
assets of more than $367 million, asTransactions of Interest’ requiring 
additional analysis to determine whether violations of U.S. law occurred. 
While the aim in many of those cases may have been to avoid the delays 
associated with the OFAC filter and individualized reviews, rather than 
to facilitate prohibited transactions, actions taken by HSBC affiliates to 
circumvent OFAC safeguards may have facilitated transactions on 
behalf of terrorists, drug traffickers, or other wrongdoers. While HBUS 
insisted, when asked, that FISBC affiliates provide fully transparent 
transaction information, when it obtained evidence that some affiliates 
were acting to circumvent the OFAC filter, HBUS failed to take decisive 
action to confront those affiliates and put an end to the conduct. HBUS’ 
experience demonstrates the strong measures that the U.S. affiliate of a 
global bank must take to prevent affiliates from circumventing OFAC 
prohibitions. 

Disregarding Links to Terrorism. For decades, HSBC has 
been one of the most active global banks in the Middle East, Asia, 
and Africa, despite being aware of the terrorist financing risks in 
those regions. In particular, HSBC has been active in Saudi 
Arabia, conducting substantial banking activities through affiliates 
as well as doing business with Saudi Arabia’s largest private 
financial institution, A1 Rajhi Bank. After the 9/1 1 terrorist attack 
in 2001, evidence began to emerge that A1 Rajhi Bank and some of 
its owners had links to financing organizations associated with 
terrorism, including evidence that the bank’s key founder was an 
early financial benefactor of al Qaeda. In 2005, HSBC announced 
internally that its affiliates should sever ties with Al Rajhi Bank, 
but then reversed itself four months later, leaving the decision up 
to each affiliate. HSBC Middle East, among other HSBC 
affiliates, continued to do business with the bank. 

Due to terrorist financing concerns, HBUS closed the 
correspondent banking and banknotes accounts it had provided to 
Al Rajhi Bank. For nearly two years, HBUS Compliance 
personnel resisted pressure from HSBC personnel in the Middle 
East and United States to resume business ties with Al Rajhi Bank. 

In December 2006, however, after Al Rajhi Bank threatened to pull 
all of its business from HSBC unless it regained access to HBUS” 

U.S. banknotes program, HBUS agreed to resume supplying Al 
Rajhi Bank with shipments of U.S. dollars. Despite ongoing 
troubling information, HBUS provided nearly $1 billion in U.S. 
dollars to Al Rajhi Bank until 2010, when HSBC decided, on a 
global basis, to exit the U.S. banknotes business, HBUS also 
supplied U.S. dollars to two other banks, Islami Bank Bangladesh 
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Ltd. and Social Islami Bank, despite evidence of links to terrorist 
financing. Each of these specific cases shows how a global bank 
can pressure its U.S. affiliate to provide banks in countries at high 
risk of terrorist financing with access to U.S. dollars and the U.S. 
financial system. 

Clearing Suspicious Bulk Travelers Cheques. Another AML 
issue involves HBUS’ clearing more than $290 million in bulk U.S. 
dollar travelers checks in less than four years for a Japanese regional 
bank, Hokuriku Bank, despite evidence of suspicious activity. From at 
least 2005 to 2008, HBUS cleared bulk travelers cheques for Hokuriku 
Bank on a daily basis, at times clearing $500,000 or more in U.S. dollars 
per day. The cheques were in denominations of $500 or $1,000, 
submitted in large blocks of sequentially numbered cheques, and signed 
and countersigned with the same illegible signature. An OCC 
examination which determined that HBUS was clearing travelers 
cheques with inadequate AML controls, discovered the stacks of 
Hokuriku travelers cheques being processed on a daily basis, and 
directed HBUS to investigate. When HBUS sought more information, 
Hokuriku Bank at first delayed responding, then provided minimal 
information, and finally declined to investigate further, claiming to be 
constrained by bank secrecy laws from disclosing client-specific 
information. HBUS eventually learned that the travelers cheques were 
purchased by Russians from a bank in Russia, a country at high risk of 
money laundering. HBUS also learned that the Japanese bank had little 
KYC information or understanding why up to $500,000 or more in bulk 
U.S. dollar travelers cheques purchased in Russia were being deposited 
on a daily basis into one of 30 different Japanese accounts of persons 
and corporations supposedly in the used car business. 

In October 2008, under pressure from the OCC, HBUS stopped 
processing the travelers cheques, but continued the correspondent 
relationship, despite the Japanese banks poor AML controls. Two years 
later, in 2010, an OCC examination uncovered the ongoing relationship 
between HSBC and Hokuriku, which the OCC thought had ended. In 
2012, after the Subcommittee inquired about the account, HBUS closed 
it. Since travelers cheques have been misused by terrorists, drug 
traffickers, and other criminals, the HBUS experience shows how a U.S. 
affiliate with ineffective AML controls can end up clearing suspicious 
bulk travelers cheques and facilitating the movement of hundreds of 
millions of U.S. dollars across international lines to unknown recipients. 

Offering Bearer Share Accounts. Over the course of a decade, 
HBUS opened over 2,000 accounts in the name of bearer share 
corporations, a notorious type of corporation that invites secrecy and 
wrongdoing by assigning ownership to whomever has physical 
possession of the shares. At its peak, HBUS” Miami office had over 
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1,670 bearer share accounts; the New York office had over 850; and the 
Los Angeles office had over 30. The Miami bearer share accounts alone 
held assets totaling an estimated $2.6 billion, and generated annual bank 
revenues of $26 million. Multiple internal audits and regulatory 
examinations criticized the accounts as high risk and advocated that 
HBUS either take physical custody of the shares or require the 
corporations to register the shares in the names of the shareholders, but 
HBUS bankers initially resisted tightening AML controls, and regulators 
took no enforcement action. 

Two examples of the accounts illustrate the risks they posed. In 
the first, Miami Beach hotel developers, Mauricio Cohen Assor and 
Leon Cohen Levy, father and son, used bearer share accounts they 
opened for Blue Ocean Finance Ltd. and Whitebury Shipping Time- 
sharing Ltd. to help hide $ 1 50 million in assets and $49 million in 
income. In 2010, both were convicted of criminal tax ifaud and filing 
false tax returns, sentenced to ten years in prison, and ordered to pay 
back taxes, interest, and penalties totaling more than $17 million. A 
second example involves a wealthy and powerful Peruvian family which 
pressed HBUS to grant a waiver from its AML requirements that bearer 
share corporations either register their shares or place those shares in 
bank custody. Bank documents showed how HBUS bankers pressed 
Compliance personnel to grant the waiver to please a wealthy client. 
These accounts demonstrate the AML risks associated with bearer share 
accounts, whose owners seek to hide their identities. Today, following 
an initiative that concluded in 201 1, HBUS has reduced its bearer share 
accounts to 26, most of which are frozen, while at the same time 
maintaining a policy that allows the bank to open new bearer share 
accounts in the future. 

Regulatory Failures. HBUST severe AML deficiencies did not 
happen overnight; they accumulated over time, even though its primary 
regulator, the OCC, conducted regular AML examinations. Part of the 
reason HBUS’ AML problems were not cured is attributable to certain 
peculiar and ineffective aspects of the OCCs AML oversight effort. 

First, unlike other U.S. bank regulators, the OCC does not treat 
AML deficiencies as a matter of bank safety and soundness or a 
management problem. Instead it treats AML deficiencies as a consumer 
compliance matter, even though AML laws and consumer protection 
laws have virtually nothing in common. One consequence of this 
approach is that the OCC considers AML problems when assigning a 
banks consumer compliance rating, but not when assigning the banks 
management rating or its overall composite rating. As a result, AML 
deficiencies do not routinely lower the ratings that national banks 
receive as part of their safety and soundness evaluations, and so do not 
increase the deposit insurance that banks pay for incurring heightened 
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risk, contrary to how AML problems are handled at other Federal 
banking agencies. At HBUS, after eiting the bank for severe AML 
deficiencies, the OCC lowered its consumer compliance rating but not 
its management rating. 

A second problem is that the OCC has adopted a practice of 
foregoing the citation of a statutory or regulatory violation in its 
Supervisory Letters and annual Reports of Examination when a bank 
fails to comply with one of the four mandatory components of an AML 
program. The four minimum statutory requirements of an AML 
program are AML internal controls, an AML compliance officer, AML 
training, and independent testing of the effectiveness of its AML 
program. By consistently treating a failure to meet one or even several 
of these statutory requirements as a'Matter Requiring Attentiori’ instead 
of a legal violation, the OCC diminishes the importance of meeting each 
requirement, sends a more muted message about the need for corrective 
action, and makes enforcement actions more difficult to pursue if an 
AML deficiency persists. In contrast, citing a violation of law when one 
critical component of a banks AML program is inadequate sends a 
strong message to bank management that its AML program is deficient, 
does not meet minimum statutory requirements, and requires 
remediation to ensure compliance with the law. At HBUS, the OCC 
identified 83 Matters Requiring Attention over five years, without once 
citing a legal violation of Federal AML law. It was only when the OCC 
found HBUS’ entire AML program to be deficient that the OCC finally 
cited the bank for a legal violation. 

Additional problems illustrated by the HBUS case history include 
the OCCs practice of conducting narrowly focused AML examinations 
of specific banking units without also assessing HBUS’ overall AML 
program; the OCCs reluctance, despite mounting AML deficiencies, to 
make timely use of formal and informal enforcement actions to compel 
improvements in HBUS’ AML program; and the practice by some OCC 
examiners to issue Supervisory Letters that sometimes muted AML 
examination criticisms or weakened recommendations for AML reforms 
at HBUS. 

While the OCC insists that its AML approach has merit, the HSBC 
case history, like the Riggs Bank case history examined by this 
Subcommittee eight years ago,^ provides evidence that the current OCC 
system has tolerated severe AML deficiencies for years, permitted 
national banks to delay or avoid correcting identified problems, and 
allowed smaller AML issues to accumulate into a massive problem 
before OCC enforcement action was taken. An experienced OCC AML 
examiner told the Subcommittee:"! thought I saw it all with Riggs but 

^ See “Money Laundering and Foreign Corruption: Enforcement and Effectiveness of the Patriot 
Act,” L.S. Senate Permanent Subcommittee on Investigations, S.Hrg. 108-633 (July 15, 2004). 
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HSBC was the worst situation Fd ever seenFyet during the six-year 
period from 2004 to 2010, OCC officials did not take any formal or 
informal enforcement action to compel HBUS to strengthen its AML 
program, essentially allowing its AML problems to fester. In 2009, after 
learning of two law enforcement investigations involving AML issues at 
the bank, the OCC suddenly expanded and intensified an ongoing AML 
examination and allowed it to consider a wide range of AML issues. 

The OCC examination culminated in the issuance, in September 2010, 
of a blistering supervisory letter listing numerous, serious AML 
problems at the bank. In October 2010, the OCC also issued a Cease 
and Desist Order requiring HBUS to revamp its AML controls. 

In response, HBUS has announced a number of key organizational 
and policy initiatives to improve its AML program in the United States 
and globally. While those initiatives are promising, HBUS announced 
similarly promising AML reforms in 2003, when confronted with an 
AML enforcement action by the Federal Reserve Bank of New York and 
New York State Banking Department. Even before the OCC lifted that 
order in 2006, HBUS’ AML program deteriorated. Both HBUS and the 
OCC will have to undertake a sustained effort to ensure the newest 
round of changes produce a better AML outcome. 

HSBC is the quintessential global bank, operating hundreds of 
affiliates in 80 countries, with its U.S. affiliate acting as the gateway into 
the U.S. financial system for the entire network. The OCC allowed AML 
problems at HBUS to build up until they represented major AML 
vulnerabilities for the United States. Going forward, HBUS needs far 
stronger controls to ensure it doesn’t leave AML risks to the U.S. 
financial system unattended; and the OCC needs a much better approach 
to resolve AML problems in a more effective and timely manner. 

A. Findings 

This Report makes the following findings of fact. 

(1) Longstanding Severe AML Deficiencies. HBUS operated 
its correspondent accounts for foreign financial institutions 
with longstanding, severe AML deficiencies, including a 
dysftinctional AML monitoring system for account and wire 
transfer activity, an unacceptable backlog of 1 7,000 
unreviewed alerts, insufficient staffing, inappropriate country 
and client risk assessments, and late or missing Suspicious 
Activity Reports, exposing the United States to money 
laundering, drug trafficking, and terrorist financing risks. 
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(2) Taking on High Risk Affiliates. HBUS failed to assess the 
AML risks associated with HSBC affiliates before opening 
correspondent accounts for them, failed to identify high risk 
affiliates, and failed for years to treat HBMX as a high risk 
accountholder. 

(3) Circumventing OFAC Prohibitions. For years in 
connection with Iranian U-tum transactions, HSBC allowed 
two non-U.S. affiliates to engage in conduct to avoid 
triggering the OFAC filter and individualized transaction 
reviews. While HBUS insisted, when asked, that HSBC 
affiliates provide fully transparent transaction information, 
when it obtained evidence that some affiliates were acting to 
circumvent the OFAC filter, HBUS failed to take decisive 
action to confront those affiliates and put an end to conduct 
which even some within the bank viewed as deceptive. 

(4) Disregarding Terrorist Links. HBUS provided U.S. 
correspondent accounts to some foreign banks despite 
evidence of links to terrorist financing. 

(5) Clearing Suspicious Bulk Travelers Cheques. In less than 
four years, HBUS cleared over $290 million in sequentially 
numbered, illegibly signed, bulk U.S. dollar travelers cheques 
for Hokuriku Bank, which could not explain why its clients 
were regularly depositing up to $500,000 or more per day in 
U.S. dollar travelers cheques obtained in Russia into 
Japanese accounts, supposedly for selling used cars; even 
after learning of Hokuriku’s poor AML controls, HBUS 
continued to do business with the bank. 

(6) Offering Bearer Share Accounts. Over the course of a 
decade, HBUS opened over 2,000 high risk bearer share 
corporate accounts with inadequate AML controls. 

(7) Allowing AML Problems to Fester. The OCC allowed 
HBUS’ AML deficiencies to fester for years, in part due to 
treating HBUS’ AML problems as consumer compliance 
matters rather than safety and soundness problems, failing to 
make timely use of formal and informal enforcement actions 
to compel AML reforms at the bank, and focusing on AML 
issues in specific FIBUS banking units without also viewing 
them on an institution-wide basis. 
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B. Recommendations 

This Report makes the following recommendations. 

(1) Screen High Risk Affiliates. HBUS should reevaluate its 
correspondent relationships with HSBC affiliates, including 
by reviewing affiliate AML and compliance audit findings, 
identifying high risk affiliates, designating affiliate accounts 
requiring enhanced monitoring, and closing overly risky 
accounts. HBUS should conduct a special review of the 
HBMX account to determine whether it should be closed. 

(2) Respect OFAC Prohibitions. HSBC Group and HBUS 
should take concerted action to stop non-U. S. HSBC 
affiliates from circumventing the OFAC filter that screens 
transactions for terrorists, drug traffickers, rogue 
jurisdictions, and other wrongdoers, including by developing 
audit tests to detect undisclosed OFAC sensitive transactions 
by HSBC affiliates. 

(3) Close Accounts for Banks with Terrorist Financing 
Links. HBUS should terminate correspondent relationships 
with banks whose owners have links to, or present high risks 
of involvement with, terrorist financing. 

(4) Revamp Travelers Cheque AML Controls. HBUS should 
restrict its acceptance of large blocks of sequentially 
numbered U.S. dollar travelers cheques from HSBC affiliates 
and foreign financial institutions; identify affiliates and 
foreign financial institutions engaged in suspicious travelers 
cheque activity; and stop accepting travelers cheques from 
affiliates and foreign banks that sell or cash U.S. dollar 
travelers cheques with little or no KYC information. 

(5) Boost Information Sharing Among Affiliates. HSBC 
should require AML personnel to routinely share information 
among affiliates to strengthen AML coordination, reduce 
AML risks, and combat wrongdoing. 

(6) Eliminate Bearer Share Accounts. HBUS should close its 
remaining 26 bearer share corporate accounts, eliminate this 
type of account, and instruct financial institutions using 
HBUS correspondent accounts not to execute transactions 
involving bearer share corporations. U.S. financial regulators 
should prohibit U.S. banks from opening or servicing bearer 
share accounts. 
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(7) Increase HBUS’ AML Resources. HBUS should ensure a 
full time professional serves as its AML director, and 
dedicate additional resources to hire qualified AML staff, 
implement an effective AML monitoring system for account 
and wire transfer activity, and ensure alerts, including OFAC 
alerts, are reviewed and Suspicious Activity Reports are filed 
on a timely basis. 

(8) Treat AML Deficiencies as a Matter of Safety and 
Soundness. The OCC should align its practice with that of 
other Federal hank regulators by treating AML deficiencies 
as a safety and soundness matter, rather than a consumer 
compliance matter, and condition management CAMELS 
ratings in part upon effective management of a banks AML 
program. 

(9) Act on Multiple AML Problems. To ensure AML 
problems are corrected in a timely fashion, the OCC should 
establish a policy directing that the Supervision Division 
coordinate with the Enforcement and Legal Divisions to 
conduct an institution-wide examination of a banks AML 
program and consider use of formal or informal enforcement 
actions, whenever a certain number of Matters Requiring 
Attention or legal violations identifying recurring or 
mounting AML problems are identified through 
examinations. 

(10) Strengthen AML Examinations. The OCC should 
strengthen its AML examinations by citing AML violations, 
rather than just Matters Requiring Attention, when a bank 
fails to meet any one of the statutory minimum requirements 
for an AML program; and by requiring AML examinations to 
focus on both specific business units and a banks AML 
program as a whole. 
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11. GENERAL BACKGROUND 

This section provides a general overview of HSBC Group, HSBC 
Bank USA (HBUS), and the HBUS compliance and anti-money 
laundering (AML) program, 

A. Background on HSBC Group and HBUS 

HSBC Group is one of the largest financial institutions in the 
world, with over $2.5 trillion in assets, 89 million customers, and 2011 
profits of nearly $22 hiilion.'° Its parent corporation, HSBC Holdings 
pic, often referred to hy the bank as‘HSBC Group” is headquartered in 
London. Despite its London headquarters, the principal office of the 
Group Chief Executive is located in Hong Kong." Altogether, HSBC 
has about 300,000 employees and 7,200 offices in over 80 countries, 
including North America, Europe, Asia, Latin America, the Middle East, 
and Africa.'^ 

United States Operations. Among other entities, the Group owns 
HSBC Overseas Holdings (UK) Ltd. (HSBC Overseas Holdings), which 
oversees its operations in the United States and Canada. HSBC 
Overseas Holdings owns, in turn, HSBC North America Holdings Inc. 
(HNAH, pronounced“HannaH), one of the ten largest bank holding 
companies in the United States. HNAH has assets of about $345 billion, 
is headquartered in New York City, and is overseen by the Federal 
Reserve." Through various subsidiaries, HNAH owns three key HSBC 
financial institutions in the United States; HSBC Bank USA N.A. 
(HBUS); HSBC Securities (USA) Inc. (HSBC Securities); and HSBC 
Finance Corporation, 

HBUS operates more than 470 bank branches throughout the 
United States, manages assets totaling about $210 billion, and serves 
around 4 million customers.'”* It holds a national bank charter and its 


See “HSBC Holdings pic 201 1 Results-Highlights,” (2/12/12), at 1-2, http;//www.hsbc.com/ 
l/PA_esf'Ca-app-conlent/content/assets/invc5tor_reIations/hsbc201 lam.pdf; “HSBC Holdings 
pic Annua! Report and Accounts 2011,” at 1, http://www.hsbc.eom/l/P A_esf-ca-app- 
content/content/assets/investor_relations/ hsbc201 lara0.pdf (hereinafter “HSBC Group 2011 
Annua! Report”). 

' 'See “HSBC Announces New Leadership Team,” (9/24/10), media release prepared by HSBC, 
hUp://www.hsbc.com/l/2/newsroom/news/20IO/hsbc-announces-new-leadership. 

HSBC Group 2011 Annual Report at 1; “HSBC Announces New Leadership Team,” 

(9/24/10), media release prepared by HSBC, http://www.hsbc,coin/i/2/newsroom/news/ 

20 1 0/hsbc-announces-ne w-ieadership. 

See “HSBC North America Holdings Inc. Fact Sheet,” at 1, http://www.us.hsbc.eom/I/PA_l_ 
083Q9FJ08A002FBP5S00000000/content/usshared/Ins!de%20HSBC/About%20HSBC/Corporat 
e%20Information/Corporate%20Facts/hnah_fectsheet_09 1 1 .pdf. 

“HSBC Bank USA, National Association Fact Sheet,” at I, http://www.us.hsbc.eom/l/PA 
_1 083Q9FJ08A002FBP5S00000000/content/usshared/Iriside%20HSBC/About%20HSBC/Corp 
orate%20Informalion/Corporatc%20Facts/hbiis_factshect_091 1 ,pdf (hereinafter “HBUS Fact 
Sheet”). 
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primary regulator is the Office of the Comptroller of the Currency 
(OCC), which is part of the U.S. Treasury Department. Because it holds 
insured deposits, its secondary regulator is the Federal Deposit Insurance 
Corporation (FDIC). HBUS is the principal subsidiary of HSBC USA 
Inc. (HUSI), a bank holding company which is a wholly-owned 
subsidiary of HNAH.'^ HBUS is headquartered in McLean, Virginia, 
and has its principal office in New York City.'* 

HSBC Securities is a licensed broker-dealer regulated by the 
Securities and Exchange Commission (SEC). HSBC Finance 
Corporation, formerly subprime lender Household International, 
provides credit cards, automobile loans, consumer lending, and 
insurance products, and is overseen by several U.S. regulators including 
the Consumer Financial Protection Bureau. 

FINAH also owns an Edge Act corporation in Miami, HSBC 
Private Bank International.’’ The Edge Act allows U.S. national banks 
to form U.S. subsidiaries designed to engage solely in international 
banking operations, including holding deposits for non-U.S. persons.'* 
Edge Act corporations are chartered and regulated by the Federal 
Reserve. In addition, HNAH sponsors the HSBC Latin American 
International Center, also referred to as“HSBC Miami Offshore!’ in 
Miami. This center, like HSBC Private Bank International, is designed 
to help meet the needs of Latin American clients with banking needs in 
the United States.'’ 

HNAH owns several other subsidiaries as well, including HSBC 
Trust Company, N.A., of Delaware, and HSBC Bank Nevada, N.A., of 
Las Vegas, Nevada. 

HBUS Major Lines of Business. HBUS has six major lines of 
business in the United States.’” The first is“Retail Banking and Wealth 
Management’ which provides deposits, checking, savings, mortgages, 
loans, brokerage products, and certificates of deposit (CDs) to 
customers.” HSBC Premier is a product within the retail bank that 
provides services for more affluent clients.” 


Id. 

Id. at 2. 

See “FAQs-HSBC Money Laundering Enforcement Action,” attached to 10/6/2010 email 
from OCC James Vivenzio to OCC colleagues, “HSBC FAQs,” OCC-PSI-00898845-857. 

See Ihe Edge Act, P.L. 102-242 (1919), codified at 12 U.S.C. § 611 et seq. 

See HSBC Latin American International Center website, https://www.us.hsbc.eom/l/2/3/ 
hsbepremier/miami-offshore. 

HBUS Fact Sheet at 1-2. According to the OCC, HBUS has a total of 32 tines of business 
altogether. Subcommittee interviews of OCC examiners Joseph Boss (1/30/2012) and Eisade la 

Garza (1/9/2012). 

See https://www.us.hsbc.eom/l/2/3/hsbcpremier/miami-offshoreretail. 

HBUS Fact Sheet at I. 
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The HBUS “Private Banking” offers wealth management services 
for high net worth individuals and families with deposits of at least $1 
million.^^ HSBC Private Bank provides banking, investment, custody, 
wealth planning, trust and fiduciary, insurance, and philanthropic 
advisory services to its customers. Clients receive a dedicated 
“relationship manager” to manage their Private Bank accounts. 

The HBUS “Commercial Banking” offers global banking services 
to financial institutions, companies, governmental entities, and non- 
profit organizations worldwide.^^ These services include deposits, 
checking, remote deposit capture, payments and cash management, 
pouch services, corporate loans and financing, merchant services, and 
insurance products. HBUS assigns each client a dedicated relationship 
manager to handle its accounts.^ 

The HBUS “Global Banking and Markets” line of business, with 
offices in more than 60 countries, provides a wide range of “tailored 
financial solutions” to major government, corporate, and institutional 
clients.^^ This line of business includes an extensive network of 
correspondent banking relationships, in which HBUS provides banks 
from other countries with U.S. dollar accounts to transact business in the 
United States. Due to its affiliates in over 80 countries, HSBC is one of 
the largest providers of correspondent banking services in the world. In 
2010, it had about 2,400 correspondent customers, including for more 
than 80 HSBC affiliates.^* Among other services, HSBC provides 
financial institution clients with access to the U.S. financial system by 
handling international wire transfers, clearing a variety of U.S. dollar 
instruments, including travelers cheques and money orders, and 
providing foreign exchange services. HBUS Payment and Cash 
Management (PCM) is a key banking division, located in New York, 
that supports HBUS’ correspondent relationships.^^ 

In addition, as part of this line of business, until 2010, HBUS 
housed the Global Banknotes Department, which used offices in New 
York City, London, Hong Kong, and elsewhere to buy, sell, and ship 


Id. at 2; Subcommittee interview of HSBC representatives (6/9/201 1). 
HBUS Fact Sheet at 2. 

25 UDI TC Qt 1 


See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
Laundering (‘BSA/AML’) Examination - Program Violation (12 U.S. C. § I818(s); 12C.F.R. § 
21.21),” OCC-PSI-00864335-365, at 7. [Sealed Exhibit.] Subcommittee briefing by HSBC 
legal counsel (6/20/2012). 

9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
Laundering (‘BSA/AML') Examination-Program Violation (12 U.S. C. § i818(s); 12C.F.R. § 
21.21),” OCC-PSI-00864335-365, at 341-342 [Sealed Exhibit.]; Subcommittee interview of 
Michael Gallagher (6/13/2012). 
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large amounts of physical U.S. dollars.^“ The Banknotes Department 
derived its income from the trading, transportation, and storage of bulk 
cash, doing business primarily with other banks and currency exchange 
businesses, but also with HSBC affiliates.^' In addition, for a number of 
years, HBUS held a contract with the U.S. Federal Reserve Bank of New 
York (FRBNY) to operate U.S. currency vaults in several cities around 
the world to assist in the physical distribution of U.S. dollars to central 
banks, large commercial banks, and businesses involved with currency 
exchange.^^ In June 2010, however, HBUS exited the wholesale U.S. 
banknotes line of business, later selling portions of the business to other 
banks.^^ It also did not renew its contract to operate FRBNY currency 
vaults. 

The HBUS “Global Asset Management” line of business offers 
worldwide investment management services to clients, and currently 
manages nearly $400 billion in assets.^'* It is one of the largest 
investment businesses in the world. Finally, “HSBC Insurance” 
provides a wide variety of insurance products to customers in the United 
States and Canada."^ 

In addition to these major lines of business, in recent years, HBUS 
has become a leader in providing banking services to foreign embassies 
with a presence in the United States. HBUS began this business after 
Riggs Bank and Wachovia Bank stopped providing those services in 
2005, and embassies began looking for a new financial institution.^* 

Through its correspondent banking and Payments and Cash 
Management (PCM) businesses, HBUS has become one of the largest 
facilitators of cash transfers in the world. Between 2005 and 2009, the 
total number of PCM wire transactions at HBUS grew from 20.4 million 
to 30.2 million transfers per year, with a total annual dollar volume that 
climbed from $62.4 trillion to $94.5 trillion.^’ In 2008, HBUS processed 


" See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, OCC-PSI-00864335-365, at 341-342. 
[Sealed Exhibit.] 

Id. at OCC-PSI-00864342. 

See Form 10-Q filed by HSBC USA Inc. with the SEC for the quarter ending June 30, 201 ! , at 
9-!0. 

Id. In 2010, HSBC Holdings pic sold its U.S. wholesale banknotes business in Asia to United 
Overseas Bank Limited (UOB) for $i I million, and in 201 1, sold its European banknotes 
business to HSBC Dank pic. It recorded total closure costs of $14 million during 2010. Id. 

HBUS Fact Sheet at 2. 

Id. 

See 1/30/2006 OCC Supervisory Letter regarding HBUS Embassy Banking, OCC-PSI- 
00107529-736, at 529-530; “HSBC to Open D.C. Branch, Pursue Embassy Clients,” Washington 
Post, Terence O’Hara (10/5/2004)(quoting Riggs spokesperson: “As a service to our remaining 
embassy clients, Riggs is working closely with HSBC to ensure a smooth transition.”), 
http://www.washingtonpost.com/ac2/wp-dyn/A7285-20040ct4?language=printer. 

See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anli-Money 
Laundering (‘BSA/AML’) Examination -Program Violation (12 U.S.C. § 1818(s); 12 C.F.R. § 
21.21),” OCC-PSI-00864335-365, at 7. [Seded Exhibit.] 
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about 600,000 wire transfers per week.^* In 2009, PCM was the third 
largest participant in the CHIPS wire transfer service which provides 
over 95% of U.S. dollar wire transfers across U.S. borders and nearly 
half of all wire transfers within the United States, totaling $1.5 trillion 
per day and over $400 trillion in 2011.^^ 

HSBC Affiliates. HSBC has hundreds of affiliates located in over 
80 countries. At least 80 HSBC affiliates have turned to HBUS for 
access to U.S. dollars tind the U.S. financial system. These affiliates 
typically interact with HBUS by opening a correspondent account at 
HBUS headquarters in New York. Many use the account to clear U.S. 
dollars wire transfers; some use the account to cash U.S. dollar 
instruments like travelers cheques or money orders; still others use the 
account for foreign exchange purposes. In addition, some opened a 
separate account to buy or sell physical U.S. dollars as part of HBUS’ 
wholesale banknotes business, until it was shuttered in 2010. 

HSBC affiliates have accounted for a large portion of HBUS’ U.S. 
dollar activities. In 2009, for example, HSBC determined that “HSBC 
Group affiliates clear[ed] virtually all USD [U.S. dollar] payments 
through accounts held at HBUS, representing 63% of all USD payments 
processed by HBUS.”''® HSBC also calculated that, over an eight-year 
period, its U.S. dollar clearing business had increased over 200%, from 
processing an average daily amount of $185 billion in 2001, to $377 
billion in 2009.“" HBUS also executes transactions through HSBC 
affiliates in other countries. It has been estimated that, in 2009, HBUS 
processed 19.4 million transactions, involving $45.9 trillion, through 
HSBC affiliates."^ 

One of the largest HSBC affiliates is The Hongkong Shanghai 
Banking Corporation Ltd., which is incorporated in Hong Kong and is 
Hong Kong’s largest bank.**^ Established in 1 865, when Hong Kong was 
part of the British empire, it is the founding member of the HSBC 
Group, but now operates as a subsidiary of HSBC Holdings pic, the 
Group’s parent corporation. With more than 71,400 employees, it 
oversees a network of hundreds of HSBC affiliates in 20 countries 


See 7/28/2008 OCC memorandum, “OFAC Examination - Payment and Cash Management 
(PCM),” OCC-PSl-01274962, at 4. [Sealed Exhibit.] 

Id. See also The Clearing House website, “About CHIPS,” 
http://\vww. chips.org/about/pages/033738.php. 

See 9/9/2009 chart entitled, “HSBC Profile,” included in “HSBC OFAC Compliance 
Program,” a presentation prepared by HSBC and provided to the OCC, at HSBC OCC 8874197, 
Id. at “USD Payment Statistics - Fact Sheet,” HSBC OCC 887421 1 . 

See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
Laundering (‘BS A/AML’) Examination - Program Violation (12 U.S.C. § 1818(s); 12 C.F.R. § 
21.21),” OCC-PSI-00864335-365, at 7. [Sealed Exhibit] 

See “Hongkong Shanghai Banking Corporation Limit^ Annual Report and Accounts 2011,” 
at 2, http://www.hsbc. com. hk/l/PA_l_3_S5/content/about/financial-information/financial- 
repons/bank/pdf/201 lreport.pdf. 
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throughout Asia and the Pacific Region, including Australia, 

Bangladesh, China, India, Japan, Malaysia, New Zealand, Thailand, and 
Vietnam.'*'’ It is sometimes referred to in internal HSBC documents as 
HBAP, an abbreviation for HSBC Bank Asia Pacific. 

A second key affiliate is HSBC Bank Middle East Ltd. (HBME). 
Incorporated in Jersey in the Channel Islands and owned through a chain 
of subsidiaries reaching back to the Group’s parent corporation in 
London, HBME oversees a network of financial institutions throughout 
the Middle East and North Africa.'’^ With more than 5,000 employees, 
HBME provides banking services through nearly 45 branches in Algeria, 
Bahrain, Jordan, Kuwait, Lebanon, Oman, Pakistan, Qatar, and the 
United Arab Emirates.'”’ In 1998, HSBC Group established “HSBC 
Araanah,” a “global Islamic financial services division” designed to 
“serve the particular needs of Muslim communities” in compliance with 
Islamic law.'’’ HBME offers Amanah banking services to many of its 
clients in the Middle East and North Africa. 

A third affiliate discussed in this Report is HSBC Mexico S.A. 
Banco (HBMX), the principal operating company of Grupo Financiero 
HSBC, S.A. de C.V., which owns HSBC’s businesses in Mexico. 
HSBC’s Mexican group is one of Mexico’s largest financial service 
conglomerates, with over 1 ,000 branches throughout the country, nearly 
$2 billion in assets, and over 8 million clients.'’® HSBC purchased 
HBMX in 2002, when it operated under the name of Banco 
Intemacional, S.A. and was part of Grupo Financiero Bital, S.A. de 
C.V."*^ HBMX and its Mexican parent are headquartered in Mexico City 
and together have about 1 9,000 employees.^” 

HSBC Leadership. Over the last few years, HSBC leadership has 
undergone significant change. In 2010, HSBC Holdings pic appointed a 

41 

■ See “HSBC Bank Middle East Limited Annual Report and Accounts 20 1 1 
http://www.hsbc.ae/l/PA_l_083Q9FJ08A002FBP5S00000000/content/uae_pws/pdf/enyannual_r 
eport_201 l.pdf. 

See id. at 32. See also “HSBC Wins its Eighth Best Cash Management Bank in the Middle 
East Award,” http://www.hsbc.ae/l/2/about-hsbc/newsrooni/eighth-best-cash-management, 
viewed 4/2/12; “HSBC Research Picks Up More Regional Awards,” (1/12/12), 
http;//www.hsbc.ae/]/PA_l_083Q9FJ08A002FBP5S00000000/content/uae_pws/pdf/en/newsroo 
m/euromoney-research-awards-jan-12.pdf, viewed 4/12/12. HSBC provides banking services in 
Saudi Arabia through both HSBC Saudi Arabia, in which it is a 49% shareholder, and Saudi 
British Bank (SABB), in which it is a 40% shareholder. See “HSBC Research Picks Up More 
Regional Awards,” (1/12/12), 

http://www.hsbc.ae/I/PA_l_083Q9FJ08A002FBP5S00000000/content/uae_pws/pdf/en/newsroo 
m/euromoney-research-aw'ards-jan-I2.pdf, viewed 4/12/12. 

See HSBC website, “About HSBC Amanah,” http://www.hsbcamanah.com/amanah/about- 
amanah. 

See HSBC website, Grupo HSBC Mexico, http;//www.hsbc.com.mx/i/2/grupo, viewed 4/2/12. 

See “HSBC Consuma la Adquision de GF BITAL,” (1 1/25/02), 
http;//www.hsbc.com.mx/l/PA_l_l_S5/content/home_en/inveslor_relations/press_releases/infpr 
ess/hsbc_consuma.pdf. 

See HSBC website, Grupo HSBC Mexico, http://www.hsbc.com. mx/l/2/grupo, viewed 4/2/12. 
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new Chairman of the Board of Directors, Douglas J. Flint, replacing 
Stephen Green, who had become a U.K. Cabinet Minister.^’ A new 
Group Chief Executive was also selected, replacing Michael Geoghegan, 
who retired, with Stuart T. Gulliver. In 2012, HSBC Holdings pic also 
appointed a new Chief Legal Officer, Stuart Levey, former 
Undersecretary for Terrorism and Financial Intelligence at the U.S. 
Treasury Department. Mr. Levey replaced the Group’s General 
Counsel, Richard Bennett.^^ 

Also in 2010, Sandy Flockhart became Chairman of Europe, 
Middle East, Africa, Latin America, Commercial Banking; as well as 
Chairman ofHSBC Bank plc.^^ Mr. Flockhart, who first joined HSBC 
in 1974, is an emerging markets specialist and, among other posts, 
headed HBMX in Mexico for five years, from 2002 to 2007.^^ He was 
also appointed to the HSBC Group Board of Directors in 2008, and 
became a director ofHSBC Bank Middle East in July 2011.^^ 

HNAH Leadership. At HNAH, the U.S. bank holding company, 
the persons holding leadership positions have often overlapped with 
those of HNAH’s key subsidiaries, HBUS, HSBC Securities, and HSBC 
Finance Corporation. HNAH’s eurrent Chief Executive Officer (CEO), 
for example, is Irene Domer, who is also the CEO of HBUS. Her 
immediate predecessor at HNAH, for less than a year, was Niall Booker, 
who was preceded by Brendan McDonagh, former Chief Operating 
Officer (COO) of HBUS. Before Mr. McDonagh, HNAH was headed 
by Siddharth (Bobby) N. Mehta, who was also head ofHSBC Finance 
Corporation, but left the bank when HSBC Finance Corporation’s 
subprime mortgage portfolio incurred huge losses during the recent 
financial crisis. 

The current HNAH COO is Gregory Zeeman; the current General 
Counsel is Stuart Alderoty; and the current Chief Auditor is Mark 
Martinelli, each of whom currently holds the same position at HBUS.^’ 


See “HSBC Announces New Leadership Team,” (9/24/10), media release prepared by HSBC, 
http://vAvw.hsbc.coni/l/2/newsroom/news/2010/hsbc-announces-new-leadership. 

“HSBC appoints Chief Legal Officer,” (1/13/12), media release prepared hy HSBC, 
http://www.hsbc.eom/l/2/newsroom/news/20I2/chief-legal-officer. Mr. Levey held his position 
at the Treasury Department from July 2004 to February 2011. Id. Mr. Bennett had headed 
HSBC Group’s Legal and Compliance department since 1998; in 2010, he had become General 
Counsel. 

See “HSBC Announces New Leadership Team,” (9/24/10), media release prepared by HSBC, 
http://www.hsbc.eom/l/2/newsrooni/news/2010/hsbc-announces-new-leadership. 

See HSBC Group “Board of Directors,” http://www.hsbc,com/l/2/about/board-of-directors 
(describing Mr. Flockhart as “a career banker, being an emerging markets specialist with over 35 
years’ experience with HSBC in Latin America, the Middle East, US and Asia”). 

Id. 

See “Leadership: HSBC North America Holdings Inc.,” 
https://v,'ww.us.hsbc.com/l/2/3/personal/inside/about/corporate-information/ieadership/hnah. 

Id. 
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HNAH’s Chief Risk Officer is Mark Gunton who holds the same 
position at both HBUS and HSBC Finance Corporation. 

HBUS Leadership. Over the last ten years, HBUS has undergone 
numerous changes in leadership, with the head of the bank turning over 
four times.^* The current head is Irene Domer who serves as HBUS’ 
Chairman of the Board, President, and CEO. She was appointed to those 
positions in 2010, after having served as the CEO of HSBC Bank 
Malaysia and as a director on the HBUS Board. Her immediate 
predecessor was Paul J. Lawrence who headed HBUS from 2007 to 
2010. His predecessor was Sandy L. Derickson who served in the post 
for less than one year and left the bank along with Mr. Mehta after 
HSBC Finance Corporation, where he was second-in-command, 
incurred substantial losses. His predecessor was Martin J.G. Glynn who 
headed HBUS from 2003 to 2006, and then retired. 

HBUS has a six-person Board of Directors. Its current members 
are Ms. Domer; William R.P. Dalton, former CEO of HSBC Bank pic in 
London; Anthea Disney, former Executive Vice President of 
NewsCorporation; Robert Herdman, former SEC Chief Accountant; 
Louis Hernandez, Jr., CEO of Open Solutions Inc.; and Richard A. 
Jalkut, CEO of TelePacific Communications. 

Within HBUS, the current Chief Operating Officer (COO) is 
Gregory Zeeman.^’ His immediate predecessor was David Dew^® who 
was preceded by Brendan McDonagh, who served as the COO from 
2004 to 2006. Some other key HBUS executives are Marlon Young, 
the head of Private Banking Americas; Kevin Martin, the head of Retail 
Banking and Wealth Management; and Mark Watkinson, the head of 
Commercial Banking.^’ Since 2007, the bank’s Chief Auditor has been 
Mark Martinelli. From 2000 to 201 1, the head of HBUS Payments and 
Cash Management (PCM) was Michael Gallagher. The head of Global 
Banknotes, from 2001 to 2010, was Christopher Lok. 

HBUS’ current General Counsel is Stuart A. Alderoty.^^ His 
predecessor was Janet Burak who served as the bank’s General Counsel 

Information on tlBUS’ leadership is taken from its SEC annua] reports. 

See “Leadership: HSBC Bank USA, N.A.,” 

https://www.us.hsbc.com/l/2/3/personal/inside/aboiit/corporate-information/leadership/hbus. 

Mr. Dew served as HBUS COO from March 2007 to 2008; prior to that, he served for a month 
as HBUS Chief Administrative Officer from February 2007 to March 2007; prior to that he 
served as audit head at HUSI and HSBC North America Inc. from 2006 to 2007, and as audit 
head of HSBC North America Holdings Inc. from 2004 to 2007. Mr. Dew currently works as 
Managing Director of the Saudi British Bank which is 40% owned by HSBC. Subcommittee 
interview of David Dew (3/5/20 1 2). 

See “2011 HSBC Annual Report,” 

http://www.us.hsbc.eom/l/2/3/personaI/inside/about/corporatc-inforTnation/leadership/hbus, 
viewed 3/23/12. 

“ See “Leadership: HSBC Bank USA, N.A,,” 

https://www.us.hsbc.eom/l/2/3/personal/inside/about/corporate-information/Ieadership/hbus. 
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from 2004 to 2010. In 2007, she was also made the Regional 
Compliance Officer for North America.*^ 

B. HBUS AML Program 

The compliance and anti-money laundering (AML) programs at 
HBUS have undergone continual organizational and leadership changes 
since 2005. In April 2003, the Federal Reserve and New York State 
Banking Department, which oversaw HBUS’ predecessor bank, cited the 
bank for multiple, severe AML deficiencies and required it to enter into 
a written agreement to revamp and strengthen its AML program.®”' It 
was at that time that HBUS renamed itself and converted to a national 
bank charter under the supervision of the OCC. During its first year 
under OCC supervision, HBUS reorganized its AML program, 
revamping its AML controls, country and client risk assessment criteria, 
Know Your Customer (KYC) due diligence requirements, and systems 
for detecting and reporting suspicious activity.®® HBUS also acquired a 
new system for monitoring account activity, called the Customer 
Activity Monitoring Program (CAMP) and established criteria to 
produce alerts requiring additional reviews. In addition, HBUS created 
a system of KYC client profiles with standard due diligence information 
requirements for each client and which was updated on a regular basis 
and had to be approved by compliance and other bank officials for an 
account to be kept open. HBUS also established a Financial Intelligence 
Group to conduct enhanced due diligence reviews. 

Although the OCC gave positive reviews to the bank’s initial 
efforts,®® by 2010, the OCC issued a lengthy Supervisory Letter again 
citing the bank for numerous AML deficiencies and requiring HBUS to 
revamp its AML program a second time. In response, the bank issued an 
action plan to correct identified problems. HBUS has, for example, 
acquired a new AML monitoring system, NORKOM to replace CAMP, 
and is working to refine its parameters for detecting suspicious activity. 
In its first month of operation, NORKOM detected more than 100,000 
transactions needing further review, demonstrating its ability to catch 
many transactions that went previously unchecked under CAMP. 

HBUS has also revamped its approach to FISBC affiliates, which 
make up an important segment of HBUS’ correspondent banking, wire 


See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
Laundering (‘BS A/AML’) Examination - Program Violation ( 1 2 U.S.C. § I818(s); 12 C.F.R. § 
21.21)/’ OCC-PSl-00000230-259, at 256. [Sealed Exhibit.] 

See HSBC Bank USA. Federal Reserve Bank of New York, and New York State Banking 
Department. Docket No. 03-012-WA/RB-SM (Board of Governors of the Federal Reserve 
System, Washington, D.C.), Written Agreement (4/30/2003), OCC-PSI-00907803-8 1 1 . 

See OCC Report of Examination of HBUS, for the examination cycle ending March 31, 2005, 
OCC-PSI-00423650. [Sealed Exhibit.] 

Id. at 10-1 1 (describing the forma! agreement). 
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transfer, and cash management businesses and previously operated 
without due diligence controls and at times with minimal or no AML 
monitoring. Among other changes, HBUS now requires all subsidiaries 
to conduct due diligence on all other HSBC affiliates, including by using 
internal audit information identifying their AML risks and AML 
controls; identifies affiliates posing high AML risks; and treats them 
accordingly, thus ending all polieies exempting affiliates from standard 
AML account and wire transfer monitoring. In addition, HBUS has 
revamped its country and client risk assessment criteria, which now 
identify high risk clients in a more robust manner; reviewed its 
correspondent banking business to reduce the number of high risk 
financial institutions; and closed some high risk business lines including 
its U.S. banknotes program, HBUS has also hired new AML leadership 
and significantly expanded its AML staffing and resources. HBUS 
currently employs over 1,000 compliance personnel.®’ 

Some of HBUS’ changes have been criticized by the OCC as 
inadequate. HBUS has been informed by the OCC that it must do 
additional work on its monitoring system in order to implement the 
requirements of the 2010 Cease and Desist Order. The individual hired 
by HBUS in 201 1 to serve as its Chief Compliance Officer left after a 
little more than a year. Both HBUS and the OCC will have to work hard 
to ensure that the latest round of changes will produce a better AML 
outcome than the changes made in 2004. 

(1) HBUS Compliance and AML Leadership 

Over the last five years, HBUS has experienced high turnover in its 
Compliance and AML leadership, making reforms difficult to 
implement. Since 2007, HBUS has had four Compliance heads and five 
AML directors. Currently, both positions are held by the same person, 
Gary Peterson. Mr. Peterson has extensive AML experience and was 
hired in 2010, to be the AML director, but after the Compliance head 
was asked to leave in 2010, has since held both posts. In 2012, Mr. 
Peterson is expected to relinquish his duties as AML director to his 
deputy, Alan Schienberg, so that the top Compliance and AML positions 
at HBUS will each have a full time professional.®* 

The top compliance position at HBUS is the Chief Compliance 
Officer who oversees all compliance issues for the bank. In the AML 
field, HBUS has specified two posts which have been held by the same 
person, the Anti-Money Laundering (AML) Director who is tasked with 
ensuring bank compliance with U.S. AML laws and regulatory 


See 7/10/2012 HSBC Group News, “HSBC to Testify at U.S. Senate Hearing.” letter by 
HSBC Group Chief Executive Stuart Gulliver, PSl-HSBC-76-000 1-002, at 002. 

See HSBC website, “Leadership: HSBC Bank USA, N.A.,” 
https://www.us.hsbc.eom/l/2/3/personal/inside/aboirt/corporate-information/leadership/hbus. 
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requirements.*^ HBUS’ Compliance and AML leadership positions 
were relatively stable until 2007, after which the bank has struggled to 
hire and retain experienced compliance professionals. 

HBUS’ Chief Compliance Officer from 2000 to 2008 was Carolyn 
Wind. Prior to that position, Ms. Wind worked for Republic Bank of 
New York as a compliance officer and, before that, as an OCC bank 
examiner. For the first three years she held the job, Ms. Wind also 
served as the AML Director. In 2003, the bank hired a separate AML 
Director, Teresa Pesce, who served in that post nearly four years, from 
2003 to March 2007. Before taking the position at the bank, Ms. Pesce 
was a Federal prosecutor with the U.S. Attorney’s Office in New York. 
Ms. Pesce left the bank in 2007, after which Ms. Wind headed both the 
Compliance and AML Compliance functions until she left the bank in 
2008. As discussed below, Ms. Wind was dismissed by HBUS after 
raising the issue of inadequate AML resources with the audit committee 
of the board of directors of the bank’s holding company, HNAH. 

In 2007, as part of a “Compliance Transformation Initiative,” 
HSBC established a North America Compliance department at HNAH 
headed by a Regional Compliance Officer.™ HNAH appointed Janet 
Burak, then Regional Legal Department Head for North America, to also 
serve as the Regional Complianee Offieer; she held both positions from 
2007 to 2010.^' At the time, HSBC Group Compliance head David 
Bagley expressed concern about eombining the two roles, arguing that 
each required too much effort for a single person, but was overruled.™ 
Two years later, in March 2009, the Federal Reserve issued a negative 
critique of Ms. Burak’s performanee, noting in particular that she did not 
have an adequate understanding of AML risk or controls.^^ The OCC 


The AML Director also serves as HBUS’ Bank Secrecy Act Compliance Officer. 

See also Federal Reserve, at BOG-A-205485. 

” See 9/13/2010 OCC Supervisory Letter HSBC'20!0*22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA/AML’) Examination - Program Violation (12 U.S.C. § 1818(s); 12 C.F.R. § 
21,21),’’ OCC-PSI-00864335-365, at 27. [Sealed Exhibit.) 

See 6/21/2007 email from HSBC David Bagley to HSBC Richard Bennett, HSBC OCC 
8873871-5 (conveying to HSBC Group’s most senior legal counsel, Richard Bennett, the 
concern of HBUS compliance personnel about “the capability of one person to manage a very 
large legal function and a compliance function” and that “compliance will be pushed down 
below Legal”). See also 7/28/2010 email from HSBC David Bagley to HSBC Michael 
Geoghegan, HSBC OCC 8873871-75 (expressing to HSBC CEO Michael Geoghegan, that with 
regard to the 2007 decision to combine the two roles into one: “I fully accepted that Brendan 
[McDonagh], Paul [Lawrence] and Richard [Bennett] had the right to make this call, although as 
I said to you in Vancouver I now wish I had been more vociferous and in the current way ray 
role operates I am confident that I would have a far stronger say.”). 

The March 2009 Federal Reserve’s Summary of Ratings stated: “Interviews conducted as part 
of our recent governance review revealed that Janet Burak, HNAH Legal and Compliance chief 
risk officer has only broad understanding of BSA/AML risk and relies on the HNAH BSA/AML 
officer [Midzain] to manage the risk. ... Midzain, as previously stated has weak BSA/AML 
knowledge and industry experience. Burak’s heavy reliance on the inexperienced Midzain is a 
concern. An example of Burak’s limited management oversight of BSA/AML was revealed 
when we recently met with her to clarify a few items from our Governance review she was 
unable to respond to the question about the distribution and the purpose of annual AML 
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also later criticized her performance as well as the decision to combine 
the regional legal and compliance roles, noting in 2010, that Ms. Burak 
“has had to balance a wide range of legal and compliance duties, 
including establishing the strategic direction for both functions and 
representing both functions on senior committees at the Group level.”’'' 
The OCC stated that, as a consequence, Ms. Burak had “not regularly 
attended key committee or compliance department meetings” and had 
failed to keep herself and other bank executives “fully informed about 
issues and risks within the BSA/AML compliance program.”’® It also 
placed some of the blame at her feet for a recently discovered backlog of 
17,700 alerts indicating possible suspicious activity at the bank, which 
had not been reviewed, noting that “[b]acklogged alerts needed to 
receive the highest level of attention from senior bank management at a 
much earlier stage to ameliorate the problem.”’*’ Soon after this critique, 
Ms. Burak left the bank. 

In the two years she held the regional posts, Ms. Burak oversaw 
three functional compliance teams at HNAH called “Compliance 
Advisory,” “Compliance Center of Excellence,” and “Compliance 
Shared Services Utility.”” Each team was headed by a senior 
Compliance manager: Curt Cunningham, Anthony Gibbs, and Lesley 
Midzain. 

Ms. Midzain was hired in 2007 to replace Carolyn Wind and so 
worked, not only for HNAH, but also for HBUS as both its Compliance 
head and AML director. She held these compliance posts for two years, 
from 2007 until 2009. Prior to being placed at the helm of the bank’s 
AML program, Ms. Midzain had no professional experience and little 
familiarity with U.S. AML laws. In December 2008, HNAH’s regulator, 
the Federal Reserve, provided a negative critique of Ms. Midzain’s 
management of the bank’s AML program. The Federal Reserve wrote 
that Ms. Midzain did “not possess the technical knowledge or industry 
experience to continue as the BSA/AML officer.”’® It noted that she 
“was interviewed by OCC examiners from another team and they 
supported the conclusion of the OCC resident staff that Midzain’s 
knowledge and experience with BSA/AML risk is not commensurate to 


statements. She subsequently communicated via email that she does not review the annual AML 
statements provided to her by the HNAH/BSA/AML officer (Midzain). Burak forwards the 
statements to Group.” 3/25/2009 “Summary of Ratings for HSBC North America Holdings,” 
Federal Reserve Bank of Chicago, OCC-PSl-00899234. 

9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA/AML’) Examination -Program Violation (12 U.S.C. § 1818(s); 12 C.F.R. § 
21,21),” OCC-PSI-00864335-365, at 27. [Sealed Exhibit.] 

Id. 

Id. 

Id. See also Federal Reserve, at BOG-A-205485. 

Federal Reserve Bank of Chicago Summary of Ratings for HSBC North America Holdings, 
March 25, 2009, OCC-PSI-00899234. 
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HNAH’s BSA/AML high risk profile, especially when compared to 
other large national banks.”™ 

In 2009, the OCC also concluded that Ms. Midzain did not have 
the requisite AML expertise for her position. An OCC Supervisory 
Letter echoed the criticisms leveled earlier by the Federal Reserve: 

“Ms. Midzain was selected as the Compliance Director and BSA 
Officer although she does not have the qualifications or the 
experience to manage a BSA program at an institution with the 
size and amount of BSA compliance risk that HBUS has. She is a 
Canadian lawyer (a barrister and solicitor) who formerly worked 
for HNAH. She is also a member of Group’s executive 
development program. . . . Ms. Midzain’s assignment as HBUS’ 
BSA Officer and Compliance Director has been her first 
assignment outside of Canada as a part of that program. . . . During 
its 2009 compliance management examination, the OCC 
determined that Ms. Midzain lacked the experience and expertise 
to be the BSA Officer, and the OCC included an MRA in its 
supervisory letter that required the bank to strengthen its 
BSA/AML compliance leadership by hiring a BSA Officer who is 
highly qualified and very experienced.”*'’ 

In response to the Federal Reserve and OCC criticisms, HBUS 
removed Ms. Midzain from the AML post, but retained her as head of 
HBUS’ Compliance department. In the fall of 2009, HBUS hired a new 
AML Director, Wyndham Clark, a former U.S. Treasury official, who 
assumed the post in the middle of an intensifying AML examination by 
the OCC and a host of serious AML problems facing the bank. Mr. 
Clark was required to report to Curt Cunningham, an HBUS Compliance 
official who freely admitted having no AML expertise,*' and through 
him to Ms. Midzain, whom the OCC had also found to lack AML 
expertise. Shortly after he arrived, Mr. Clark began requesting 
additional resources.*^ After 30 days at the bank, Mr. Clark sent Mr. 
Cunningham a brief memorandum with his observations, noting that 
HBUS had an “extremely high risk business model from AML 
perspective,” had seen recent high turnover in its AML directors, and 
granted only limited authority to the AML director to remedy problems: 


™ Id. 

9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA/AML’) Examination - Program Violation (12 U.S. C. § I818(s); 12C.F.R. § 
21.21),” OCC-PSI-00864335-365, at 28. [Sealed Exhibit.] 
id. at 28. 

See, e.g., 10/19/2009 email exchange between HBUS Wyndh^n Clark and HBUS Debra 
Bonosconi, “OFAC resources,” OCC-PSI-OOI62661 (Mr. Clark commented after Janet Burak 
had recently approved three new compliance personnel positions, “Clearly a positive, although I 
understand that these were requested quite a while ago. I hope that isn’t the typical response 
time.” Ms. Bonosconi responded: “Oh, this express time. Trust me on that. Usually the 
response is ‘no.’”). 
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“AML Director has the responsibility for AML compliance, but 
very little control over its success. 

Operate under ‘crisis’ mode, actions are reactive rather than 
forward thinking. 

AML Director unable to manage at high level. 

Several AML Directors/BSA Officers in a short period of time.’’*^ 

As he continued his work, Mr. Clark grew increasingly concerned 
that the bank was not effectively addressing its AML problems. In 
February 2010, Mr. Clark met with the Audit Committee of the HNAH 
board of directors and informed the committee that he had never seen a 
bank with as high of an AML risk profile as HBUS.*'* He also informed 
them that AML resources were “insufficient versus current risks and 
volumes,” and the bank’s systems and controls were “inconsistent with 
AML risk profile.”*^ On May 10, 2010, Mr. Clark wrote to a senior 
HBUS Compliance official that with regard to the bank’s AML 
compliance program, “With every passing day I become more 
concerned. ..if that’s even possible.”**’ 

In July 2010, less than a year after taking the post, Mr. Clark 
decided to resign. He sent an email to the head of HSBC Group 
Compliance David Bagley explaining that he did not have the authority 
or support from senior compliance managers needed to do his job as 
AML director: 

“[T]he bank has not provided me the proper authority or reporting 
structure that is necessary for the responsibility and liability that 
this position holds, thereby impairing my ability to direct and 
manage the AML program effectively. This has resulted in most 
of the critical decisions in Compliance and AML being made by 
senior Management who have minimal expertise in compliance, 
AML or our regulatory environment, or for that matter, knowledge 
of the bank (HBUS) where most of our AML risk resides. Until 
we appoint senior compliance management that have the requisite 
knowledge and skills in these areas, reduce our current reliance on 
consultants to fill our knowledge gap, and provide the AML 


i 0/15/2009 HBUS memorandum from Wyndham Clark to ttNAH Curt Cunningham, “30 Day 
Observations and Recommendations Report from AML Director,” HSBC PSI PROD 0065332. 

Subcommittee interview of Wyndham Clark (1 1/30/2011); 2/17/2010 “HNAH AML Program, 
Board Audit Committee Presentation,” by HBUS Wyndham Clark to the Audit Committee of the 
HNAH board of directors, HSBC OCC 3800290. 

2/17/2010 “HNAH AML Program, Board Audit Committee Presentation,” by HBUS 
Wyndham Clark to the Audit Committee of the HNAH board of directors, HSBC OCC 3900290. 

5/10/2010 email from HBUS Wyndham Clark to HBUS Anne Liddy, “AML Townhall,” 
OCC-PSI-00672582. See also 5/9/2010 email from HBUS Wyndham Clark to HNAH Curt 
Cunningham, “AML Townhall,” OCC-PSl-0067257 1 (“Essentially AML decisions are now 
being made without AML SME [subject matter expertise]. This will be very apparent to the 
regulators.”). 


14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm00217 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



204 


VerDate Nov 24 2008 


30 

Director appropriate authority, we will continue to have limited 

credibility with the regulators.”*’ 

When asked about his experience at the bank, Mr. Clark told the 
Subcommittee that he did not have either the authority or resources 
needed as AML director.** After his departure, the bank hired Gary 
Peterson, who was then an AML consultant to the bank, appointing him 
as HBUS’ new AML director. 

Around the same time that Mr. Clark left the bank in 2010, Ms. 
Midzain also departed, leaving open the post of Chief Compliance 
Officer. That post remained vacant until 201 1, when HBUS hired Eric 
Larson. He left after fifteen months on the job.*’ HBUS then asked 
Gary Peterson to serve, not only as HBUS’ AML Director, but also as its 
Compliance head, and as HNAH’s Regional Compliance Officer 
following Ms. Burak’s departure in 2010. Mr. Peterson agreed and has 
served in all three posts since 2010. Altogether, these personnel changes 
meant that, over the last five years, HBUS has had four Chief 
Compliance Officers and five AML Directors. 

At HSBC Group, HBUS’ parent organization, for nearly ten years, 
from 2002 to the present, David Bagley has served as the HSBC Group’s 
head of Compliance. He is located in London and oversees both general 
and AML compliance issues. His second-in-command is Warren 
Learning, Deputy Head of HSBC Group Compliance, who has been in 
that position since January 1 , 2007. Susan Wright serves as the head of 
HSBC’s AML efforts. She is also located in London and has served in 
that position for more than a decade. John Root is a senior Group 
Compliance officer who has concentrated on compliance and AML 
issues, in part in Mexico and Latin America. Compliance personnel 
work with Matthew King who has served as the head of HSBC Group 
Audit since 2002, 

(2) HBUS AML Program 

Federal law requires banks operating in the United States to have a 
minimum of four elements, an AML compliance officer in charge of the 
program, AML internal controls, AML training, and an independent 
testing of the AML program to ensure its effectiveness.” HBUS’ AML 
program must address a wide range of AML issues, from customer due 
diligence, to monitoring account and wire transfer activity, to reporting 

7/14/2010 email from HBUS Wyndham Clark to HSBC David Bagley, OCC'PSi-00676731 . 
Mr. Clark formally left the bank in August 2010. Subcommittee interview of Wyndham Clark 

(1I/30/20U). 

Subcommittee interview of Wyndham Clark (11/30/2011). Mr. Clark told the Subcommittee 
that, prior to his leaving, the bank finally approved a number of new AML hires. Id. 

Subcommittee interview of OCC Examiner Teresa Tabor (5/17/2012). 

See 31 U.S.C. §5318(h); 12C.F.R. §21.21. 
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suspicious activity to law enforcement. It must also cover a wide range 
of business lines and products, including Correspondent Banking, 
International Private Banking, Domestic Private Banking, Embassy 
Banking, Payment and Cash Management, and Banknotes services. 

Inadequate Staffing. Despite its high AML risks, millions of 
customers, and employment of more than 1 6,500 employees overall, 
from 2006 to 2009, HBUS’ entire Compliance Department numbered 
less than 200 full time employees; its AML Compliance staff was a 
subset of that and also included staff in India.’' HBUS personnel told 
the Subcommittee that inadequate AML staffing was one of the biggest 
problems they faced. OCC examinations also routinely identified 
inadequate staffing as a key AML problem, including with respect to 
unreviewed alerts,^^ PCM processing,’'' Correspondent Banking,’^ 

OFAC reviews,’" Embassy Banking,” and the Compliance Review Unit 
that tested the bank’s AML controls.’* 

Bank documents show that Compliance and AML staffing levels 
were kept low for many years as part of a cost cutting measure. In 2007, 
HBUS announced a “1509 Initiative” to increase the bank’s return on 
equity by 2009, largely through cost cutting measures. One component 
of the plan was to ensure that 2007 and 2008 headcounts remained flat. 
This hiring freeze caused HBUS Compliance and the AML staffing 
requests to be denied or unanswered. At one point, HBUS Compliance 
and AML management resorted to requesting temporary staff when 
persistent AML alert backlogs grew to unmanageable levels. In 2007, 
HBUS fired its longtime AML head after she raised resource concerns 
with the HNAH Audit Committee; an AML director hired in 2009 left 
after being denied the authority and resources he considered necessary to 


Subcommittee briefing by HSBC legal counsel (6/30/201 1). 

Subcommittee interview of HBUS Debra Bonosconi (1 1/17/201 1) (Ms, Bonosconi reported to 
the Subcommittee that staffing was her biggest issue and that by March 2008 it was evident that 
more staff was needed. She made several requests for additional resources.); Subcommittee 
interview of HBUS Anne Liddy (2/22/2012) (Ms. Liddy made a request for resources to Carolyn 
Wind, but was told that there was no appetite to bring on additional staff.); Subcommittee 
interview of HBUS Carolyn Wind (3/7/2012); Subcommittee interview of HBUS Teresa Pesce 
(3/30/2012) (Ms. Pesce asked for business to provide funding for more AML Compliance 
positions because Compliance did not have the money.). 

” 3/3/2010 OCC Supervisory Letter HSBC-2010-03, “Backlog of Monitoring Alerts and 
Enhanced Due Diligence Requests,” OCC-PSI-0085 1542-545. [Sealed Exhibit.] 

3/18/2009 OCC Supervisory Letter HSBC-2008-40, “Payment and Cash Management 
BSA/AML Examination,” OCC-PSl-00107624-625. [Sealed Exhibit] 

3/3/2009 OCC Supervisory Letter HSBC-2008-34, “Correspondent Banking BSA/AML 
Examination,” OCC-PSI-00107618-620. [Sealed Exhibit.] 

7/28/2008 OCC memorandum, “OFAC Examination - Payment and Cash Management 
(PCM),” OCC-PSl-01274962; 1/20/2009 OCC Supervisory Letter HSBC-2008-41, “Office of 
Foreign Asset Control Examination,” OCC-PSI-00000434-436. [Sealed Exhibits.] 

See 3/19/2007 OCC Supervisory Letter HSBC-2006-30, “Government and Institutional 
Banking BSA/AML Examination,” OCC-PSI-001 07567-571; 1/30/2006 OCC Supervisory Letter 
regarding HBUS Embassy Banking, OCC-PSl-001 07529-536. [Sealed Exhibits.] 

See 6/14/2006 OCC Supervisory Letter HSBC-2006-16, “Compliance Review Unit 
Examination,” OCC-PSI-0000034I-345. [Sealed Exhibit.] 
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do his job. After the OCC issued its lengthy Supervisory Letter 
criticizing multiple aspects of HBUS’ AML program, bank management 
began to significantly increase AML staff and resources. 

AML Staffing Problems. In 2006, HBUS Compliance was 
already struggling to “handle the growing monitoring requirements” 
associated with the bank’s correspondent banking and cash management 
programs, and requested additional staff. In October 2006, HBUS 
Compliance officer Alan Ketley wrote that despite having very efficient 
processes, each month his Compliance team was “handling an average 
of 3,800 [alerts] per person and [was] becoming overwhelmed thus 
potentially placing the business and the bank at risk.”'"'’ Despite 
requests for additional AML staffing, HBUS decided to hold staff levels 
to a flat headcount."” 

1509 Initiative and Hiring Freeze. In 2007, against the backdrop 
of losses stemming from its troubled acquisition of Household 
International and the beginning of the global financial crisis, HBUS 
launched the 1509 Initiative which sought to achieve a 15% return on 
equity for the bank by 2009, primarily by cutting costs. One facet of the 
1509 Initiative was the “$100 Million Dollar Cost Challenge,” which set 
a goal of cutting costs of $100 million in 2007."^^ 

The hiring freeze began in September 2007, when HBUS 
Compliance had a headcount of 198 full time employees, one below its 
December 2006 level. When Compliance sought to fill six open 
positions, David Dew, HBUS Chief Operating Officer (COO), informed 
Compliance head and AML director Carolyn Wind that the positions 
could not be filled: 

“This increase will be almost impossible to Justify and therefore I 

must ask you to please cancel the open positions and ensure that 

your FTE as at 3 1 Dec 2007 does not exceed 1 99.””’'* 

To make the case for increased staffing resources, in September 
2007, HBUS Compliance personnel reached out to compliance peers at 


See 10/31/2006 email from HBUS Alan Ketley to HBUS Michael Gallagher, Denise Reilly, 
and Charles DelBusto, “Additional Compliance headcount needed to support PCM,“ HSBC 
OCC 0616340-43, at 341. 

Id. at HSBC OCC 0616342. 

See, e.g., 10/31/2006 email exchange between HBUS Michael Gallagher and HBUS Tony 
Murphy, Charles DelBusto, Alan Ketley, and others, “Additional Compliance headcount needed 
to support PCM,” HSBC OCC 0616340-343; 9/25/2006 email exchange between HBUS 
Michael Gallagher and HBUS Teresa Pescc, Alan Ketley, Charles DelBusto, and others, 
“Additional monitoring resources,” HSBC OCC 7688655-657. 

See HSBC internal presentation entitled, “1509,” HSBC OCC 06162241-242. 

9/14/2007 email from HBUS David Dew to HBUS Carolyn Wind, Janet Burak, and Kathryn 
Hatem, “HEADCOUNT,” HSBC OCC 0616262. 
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other banks and learned that at the three major banks that provided some 
information, each had a greater number of monitoring staff in the 
correspondent banking area than HBUS."*^ In addition, HBUS 
Compliance personnel noted that HBUS Compliance filed many fewer 
Suspicious Activity Reports (SARs) than its competitors;'”* while 
HBUS filed three to four per month in the correspondent banking area, 
its peers filed 30 to 75 per month, and one major international bank 
disclosed that it filed approximately 250 SARs per month. Despite 
these statistics, the Compliance department and AML staff remained 
stagnant. 

Fired After Raising Staffing Concerns to Board. After being 
turned down for additional staff, Carolyn Wind, longtime HBUS 
Compliance head and AML director, raised the issue of inadequate 
resources with the HNAH board of directors. A month after that board 
meeting, Ms. Wind was fired. 

On October 24, 2007, Ms. Wind met with the Audit Committee of the 
HNAH board of directors and, during the meeting, raised the staffing 
issue, particularly with respect to the Embassy Banking area which had 
been the subject of two recent OCC examinations uncovering severe 
AML deficiencies. Her supervisor. Regional Compliance Officer Janet 
Burak, also attended the Audit Committee meeting. The day after the 
meeting, in an email to HSBC Group Compliance head David Bagley, 
Ms. Burak expressed displeasure that Ms. Wind’s comments had caused 
“inappropriate concern” at the Audit Committee: 

“I indicated to her [Ms. Wind] my strong concerns about her ability to 
do the job I need her to do, particularly in light of the comments made 
by her at yesterday’s audit committee meeting .... 1 noted that her 


On 9/6/2007, Mr. Ketley wrote: “Every bank that responded and provided information about 
monitoring staff has more than HBUS.” 9/6/2007 email from HBUS Alan Ketley to HBUS Alan 
Williamson, Judy Stoldt, and George Tsugranes, “Correspondent survey,” HSBC OCC 0616384- 
385. See also 9/6/2007 HBUS chart, “Correspondent Banking Survey,” HSBC OCC 3400666. 
[Sealed Exhibit.] See also emails indicating HBUS Compliance personnel were not 
compensated at levels consistent with its competitors, and risked losing qualified personnel. See, 
e.g., 2/1/2007 email exchange among HBUS Carolyn Wind, HBUS Teresa Pesce and others, 
“MIP overages - URGENT,” HSBC OCC 0616314-316, at 314 (“We are not at market with our 
current comp[ensation]” and “[tjhese officers and AML officers can get new jobs in a 
heartbeat”); 2/27/2007 email from HBUS Karen Grom to HBUS Carolyn Wind, Denise Reilly, 
Teresa Pesce, David Dew and others, “HUSI Compensation Review,” HSBC OCC 0616318 
(“The banks who are approaching our employees have deep pockets and are willing to pay to get 
the talent. ... In many cases, we are paying under the ‘market data point’ (50'^ percentile).” and 
“The offers from head-hunters are in some cases double base salaries and double bonuses[.j”). 

9/6/2007 email from HBUS Alan Ketley to HBUS Alan Williamson, Judy Stoldt, and George 
Tsugranes, “Correspondent survey,” HSBC OCC 0616384-385 (Mr. Ketley wrote; “Our 
competitors all acknowledge filing more SARs than we do.”); 9/6/2007 HBUS chart, 
“Correspondent Banking Survey,” HSBC OCC 3400666. [Sealed Exhibit.] 

8/27/2007 email from HBUS Alan Ketley to HBUS Michael Gallagher, Charles DelBusto, 
Chris Davies, and Alan Williamson, “Addressing negative information,” HSBC OCC 7688584- 
587, at 587. 
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comments caused inappropriate concern with the committee around: 
our willingness to pay as necessary to staff critical compliance 
functions (specifically embassy banking AML support), and the 
position of the OCC with respect to the merger of AML and general 
Compliance.”'”* 

A month after the board meeting, after seven years as HBUS’ 
Compliance head, Ms. Wind was notified that she was being fired. In a 
January 22, 2008 letter to the head of HBUS Human Resources, Ms. 
Wind wrote: 

“I was told on November 30, 2007 that I was being terminated 
effective 2/28/08, due to the fact that the Board had lost confidence in 
me. ... If the Board has lost confidence in me based on my 
comments at the October, 2007 Audit Committee, why have I been 
allowed to continue to run this critical department without additional 
supervision or any direct follow-up from Group Compliance?” 

Ms. Wind also wrote: “David [Dew] and I disagree on the extent to 
which my organization can withstand cost cuts and still maintain an 
effective compliance risk mitigation program. I also believe in an open 
dialog with the Board and its committees, which may go against the 
desires of some in the organization.”'”’ When asked about this 
document, Ms. Wind told the Subcommittee that she believed she was 
fired for telling the HNAH board about the need for additional 
Compliance resources."” 

Hiring Freeze Continues. After her departure, the hiring freeze 
continued throughout 2008."' In February 2008, prior to her leaving the 
bank, Ms. Wind discussed the staffing freeze with HNAH COO 
Anthony Gibbs: 

“HBUS Compliance has been required to manage down overall 
FTE [full time employees] while at the same time redeploying 
resources to priority needs. We also are in the midst of a ‘hiring 
pause’ which means that approval from appropriate EXCO 
members is required to fill any open position. I do not expect a lot 


10/25/2007 email from Janet Burak to David Baglcy, OCC-PSI-00704789. 

January 22, 2008 letter from Carolyn Wind to Jeanne Ebersole, HSBC OCC 7730334. 

' Subcommittee interview of Carolyn Wind (3/07/2012). Anne Liddy also reported that Ms. 
Wind told her in 2007 that she had been terminated due to Ms. Wind raising resource concerns to 
the board’s audit committee. Subcommittee interview of Anne Liddy (2/22/2010). Also see. 
Minutes of the Audit Committee Meeting, October 24, 2007, JISBC OCC 3516806. 

"’On 1/17/08, Jeanne Ebersole, Executive Vice President HBUS Human Resources, wrote to 
the HBUS Executive Committee [EXCO], “Attached is a draft of the non-hiring freeze note to be 
sent to all GCBs 0, 1, 2 and the final headcount report for 2007 which we will discuss tomorrow 
at EXCO.” 1/17/2008 email from HBUS Jeaime Ebersole to HBUS Chris Davies, David Dew, 
Janet Burak and others, “Draft Materials for EXCO,” HSBC OCC 0616259-260, at 259. 
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of support for overall HBUS Compliance headcount increasing 
even if a portion of the time is allocated to other affiliates.”' 

In June 2008, a senior PCM operations manager emailed senior 
HBUS Compliance official Anne Liddy about growing backlogs in the 
OF AC Compliance program: 

“I have put forth the suggestion of hiring up some first level 
checkers for OFAC processing in the GSC. . .we’re strapped and 
getting behind in investigations (on OFAC cases) and have some 
of our key managers in the queues releasing items. . . I’m told I 
cannot hire first level staff unless it’s offshored...”"^ 

An OCC examination later found that eight Compliance officers were 
under “rigorous pressure” to complete manual reviews of about 30,000 
OFAC alerts per week."'' 

In July 2008, however, HSBC Group senior management 
determined that the hiring freeze would continue to the end of the year. 
CEO Michael Geoghegan wrote to HNAH CEO Brendan McDonagh 
and others: “We have agreed that we will have a headcount freeze until 
the end of the year.”"^ 

HBUS Compliance personnel, with the support of their business 
units, attempted to obtain an exception to the hiring freeze. In a 
September 2008 email, Michael Gallagher, PCM head at HBUS, 
requested additional Compliance staff, explaining: “I have expressed 
considerable concern for some time over the lack of resources both in 
compliance and within pcm [Payments and Cash Management] to 
adequately support kyc [Know Your Customer] and related regulatory 
requirements.” Lesley Midzain, then HBUS Chief Compliance 
Officer, echoed his concerns and requested four additional full time 
employees: 

“Given the hiring freeze in global businesses, I understand that it 
may also need approval by Paul Lawrence, but this has continued 

2/12/2008 email from HBUS Carolyn Wind to HBUS Anthony Gibbs, Curt Cunningham, 
Denise Reilly and others, “Organizational Changes,” HSBC OCC 0616264. 

‘ See 6/19/2008 email exchanges among HBUS Anne Liddy and HBUS Nancy Hedges, 

“OFAC processing in GSC’s,” HSBC OCC 0616349-350, at 349. 

’ 7/28/2008 OCC memorandum, “OFAC Examination - Payment and Cash Management 

(PCM),” OCC-PSl-0 1274962 (“the bank’s Compliance teams are under rigorous pressure to 
process alerts and deteiTnin[e] a disposition in a timely manner”). [Sealed Exhibit.] 

7/23/2008 email from HSBC Michael Geoghegan to HNAH Brendan McDonagh and others, 
“2nd Half Costs,” OCC-PSI-00727922, 

' See 9/4/2008 email exchanges among HBUS Michael Gallagher and HBUS David Dew, 
Lesley Midzain, Andrew Long, Chris Davies and others, “Kyc hires,” HSBC OCC 0616352-356, 
at 356. When asked about this document, Mr, Gallagher said that Mr. Dew had informed him 
that broader concerns in the U.S. and at Group necessitated a flat headcount. Subcommittee 
interview of Michael Gallagher (6/13/2012). 
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to be an area of notable risk and regulatory attention and which 

needs some stabilization for Compliance resources.”"^ 

After expressing concern over how additional hires would impact 
operating expenses, Mr. Dew, HBUS COO, asked Ms. Midzain if “a 
couple of temps for two months” would “do the trick.”' '* 

Hiring did not improve during 2009. Wyndham Clark, who had 
been hired in 2009, as the new HBUS AML director, noted in an email 
that Janet Burak had recently approved three new compliance positions. 
He wrote: “Clearly a positive, although I understand that these were 
requested quite a while ago. 1 hope that isn’t the typical response time.” 
A senior PCM operations officer responded: “Oh, this was express time. 
Trust me on that. Usually the response is ‘no.’”"* The Subcommittee 
was told that in September 2009, the HBUS Compliance department had 
130 full time employees handling AML compliance issues.™ 

OCC Examination. During late 2009 and the first half of 2010, 
the OCC expanded and intensified its examination of the bank’s AML 
program as a whole. Mr. Clark made increasing use of temporary 
employees and contractors to answer OCC inquiries and address AML 
deficiencies. In August, he left the bank. By then, he was using nearly 
100 temporary employees and contractors and had requested 50 
additional permanent full time Compliance personnel.*^' Even with 
those additional resources, the OCC’s September 2010 Supervisory 
Letter identifying AML deficiencies at the bank criticized HBUS’ failure 
“to provide adequate staffing and resources to implement and maintain a 
BSA/AML compliance program commensurate with the bank’s high risk 
profile.”'^^ The OCC Supervisory Letter also noted: “Management is 
still in the process of determining an appropriate level of resources as 
they consider recommendations from outside consultants and make 
strategic decisions about the business and risk on a prospective basis.”'^'* 
By October 2010, the Compliance department had increased to over 400 
full time employees.'^* 

AML Monitoring Deficiencies. In addition to AML leadership 
problems and inadequate AML staffing, another key component of 
HBUS’ AML program involved its monitoring systems. During the 

Id. at HSBC OCC 0616354. 

"* Id, at HSBC OCC 0616352. 

10/19/2009 email exchange between HBUS Wyndham Clark and HBUS Debra Bonosconi, 
‘'OF AC resources,” OCC-PSI-001 62661. 

Subcommittee briefing by HSBC legal counsel (6/30/2011). 

9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA/AML’) Examination - Program Violation (12 U.S.C. § 1818(s); 12 C.F.R. § 
21.2I),”OCC-PSi-00864335-365,at29. [Sealed Exhibit.] 

Id. 

Id. 

Subcommittee briefing by HSBC and HBUS executives (6/26/2012). 
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period reviewed by the Subcommittee, dating from 2004, HBUS used a 
monitoring system called the Customer Activity Monitoring Program 
(CAMP). This system had many limitations and often required manual 
reviews by HBUS Compliance and AML staff. 

By 2006, as indicated earlier, HBUS Compliance was already 
struggling to handle the monitoring alerts generated by the bank’s 
growing correspondent banking and cash management programs and 
described its personnel as “becoming overwhelmed.”’^^ Backlogs of 
unreviewed alerts in different areas of the bank began to accumulate, 
including with respect to alerts generated by CAMP monitoring of client 
accounts and wire transfer activity; alerts triggered by the OF AC filter 
on transactions by potentially prohibited persons identified on OF AC 
lists of terrorists, drug traffickers, and other wrongdoers; and alerts 
related to potentially suspicious activity in Embassy Banking accounts. 

With respect to the general CAMP system alerts for PCM, HBUS 
Compliance set a goal that no more than 2% of AML alerts should 
remain in the system for over 120 days without being resolved. In 
addition, the system notified increasingly senior management if the 
backlog exceeded certain thresholds. For example, when the CAMP 
alerts hit 3%, bank compliance officials like Anne Liddy were alerted; 
when it hit 4%, higher level compliance personnel such as AML director 
Lesley Midzain were notified; if the backlog hit 6%, HNAH’s Regional 
Compliance Officer Janet Burak was notified. In November 2009, the 
percentage of AML alerts in the system for longer than 1 20 days spiked 
from 4% in October to 9%.'^’ The backlog remained at 9 or 1 0% for the 
next four months, from December 20 1 0 to February 20 1 0, and then 
stayed around 6 or 7% from March to May 2010.’^* In early 2010, as 
part of its expanded AML examination, the OCC discovered the CAMP 
backlog of more than 1 7,000 unreviewed alerts as well as a backlog of 
requests for enhanced due diligence (EDD) reviews. On March 3, 
2010, an OCC Supervisory Letter ordered the bank to eliminate the alert 
and EDD backlog by June 30, 2010.'^'’ The bank met the deadline using 
“offshore reviewers in India, HBUS staff in Delaware, HBUS temporary 
volunteers, [and] outside contractors.”’’" A subsequent review by the 


See 1 0/31/2006 email from HBUS Alan Ketley to HBUS Michael Gallagher, Denise Reilly, 
and Charles DelBusto, “Additional Compliance headcount needed to support PCM,” HSBC 
OCC 0616340-43, at 342. 

“Bankwide KRI AML Transaction Monitoring Alert Aging - K02854,” HSBC OCC 
7688689. 

Id. 

Id. 

3/3/2010 OCC Supervisor)'' Letter HSBC -2010-03, “Backlog of Monitoring Alerts and 
Enhanced Due Diligence Requests,” OCC-PSI-0085 1 542. [Sealed Exhibit.] 

Id. 

9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BS A/AML’) Examination - Program Violation (12 Lf.S.C. § 1818{s); 12 C.F.R. § 
21.21),” OCC-PSl-00864335-365, at 9. [Sealed Exhibit] 
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OCC, however, found “deficiencies in the quality of the work,” and 
required an independent assessment.'^^ The independent assessment 
found that 34% of the alerts supposedly resolved had to be re-done. 

As Ms. Wind reported to the board in October 2007, backlogs were 
also an issue in Embassy Banking. A 2008 OCC examination identified 
a backlog of over 3,000 alerts identifying potentially suspicious activity 
in Embassy accounts that had yet to be reviewed. In response, HBUS 
initiated a concentrated effort to review and resolve those alerts prior to 
a followup OCC examination in July 2008.'^“* The followup 
examination found a backlog of about 1,800 alerts, some of which dated 
from 2007. The OCC examiners recommended issuance of a Cease and 
Desist Order to the bank in part due to the backlog, but the OCC instead 
issued a Supervisory Letter, identified the backlog as a Matter Requiring 
Attention by the bank, and required the backlog to be cleared by 
September 15, 2008.'^^ The bank met that deadline.'^’’ 

A third category of alert backlog involved transactions that were 
stopped by the OF AC filter as possible violations of OF AC regulations. 
Each transaction had to be manually reviewed and resolved by two 4- 
person OF AC Compliance teams in New York and Delaware. In July 
2007, HSBC introduced a new payment system, GPS, in the United 
States.'^’ The system had undergone several adjustments just prior to its 
launch, including changes to its OF AC filters, which caused 
unexpectedly large backlogs.'^* HBUS assigned a team to assist with 
clearing the backlog, but the problem still took weeks to resolve. 


■’Hd. 

8/14/2008 OCC memorandum, “Government and Institutional Banking Update,” OCC-PSI- 
00899227-233, at 23 1 . [Sealed Exhibit.) 

July 31, 2008 Memorandum from HBUS Debra Bonosconi to HBUS David Dew, Lesley 
Midzain, and Cam Hughes. OCC-PSI-00409095. Also see 7/14/2008 Memorandum from 
HBUS Debra Bonosconi to HBUS David Dew, Lesley Midzain, Cam Hughes (“As shown in the 
chart below, we currently (as of 7/1 5) have a total of 1,793 open alerts which is a reduction of 
1,519 from 3,312 on June 27*^. There are a total of 203 that are open in excess of 120 days and 
1 47 open in excess of 90 days (350 combined) and we are concentrating our efforts on reducing 
those first. We are closing an average of 84 alerts daily (including Saturday) and based upon 
current projections, we should have total of 1,499 pending alerts when the OCC arrives on July 
21, 2008.”), OCC-PSI-00285742 

See 9/4/2008 OCC Supervisory Letter HSBC-2008-07, “Government and Institutional 
Banking BSA/AML Examination,” OCC-PSl-00107607-6il, [Sealed Exhibit.] 

9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
Laundering (‘BSA/AML’) Examination -Program Violation (12 U.S.C. § 1818(s); 12 C.F.R. § 
21.21),”OCC-PSI-00864335-365,at9. [Sealed Exhibit.] 

See, e.g., 7/29/2007 email from HBUS /Vndrew Long to HBUS Michael Gallagher, “draft 
strawman,” HSBC OCC 7688680-682; 7/18/2007 email from HBUS Carolyn Wind to HBUS 
William Johnson, David Dew, Michael Gallagher, Andrew Long, David Bagley and others, 
“HBUS GPS Day 2 and 3 Update ” HSBC OCC 7688676-678, at 677. 
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In December 2009, HBUS’ OF AC Compliance team in New York 
had accumulated a backlog of greater than 700 OFAC alerts.'^^ The 
OF AC Compliance team requested five or six people from PCM for ten 
days to help clear the backlog.*'"’ PCM responded that it had no 
resources to loan, and suggested asking the Compliance team in 
Delaware for help. The OFAC Compliance team in New York indicated 
the Delaware Compliance staff was already “fully deployed” dealing 
with general alerts from the CAMP monitoring system: 

“We have considered all options at this point[;] the Compliance 
team in DE is already fully deployed dealing with wire camp alerts 
and bank examiner requests for the current exam. There is no 
bandwidth there at all[;] they are behind on the current alert 
clearing process which we are also dealing with.”*'" 

Understaffed, HBUS Compliance and AML staff constantly battled 
alert backlogs while requesting additional resources. These requests, if 
answered, generally resulted in additional temporary staff dispatched 
only when backlogs grew to unmanageable levels. As the backlog 
increased, tensions grew, and in February 2010, Mr. Clark, the AML 
Director who had been on the job only a few months, wrote: “[W]e are 
in dire straights [sic] right now over backlogs, and decisions being made 
by those that don’t understand the risks or consequences of their 
decisions!!!!”*'*^ 

The problems with HBUS’ AML monitoring system were not 
limited to the backlogs. Additional issues involved an array of 
problematic decisions on what clients and countries should be 
designated high risk and subject to enhanced monitoring; what accounts 
and wire transfer activity should be subject to or excluded from routine 
AML monitoring; what parameters should be used to trigger alerts, 
including dollar thresholds, key words or phrases, and scenario rules that 
combine specified elements; and what “negative rules” should be used to 
decrease the number of alerts that would otherwise be generated for 


^ 12/1 1/2009 email exchange among HBUS CamiUus Hughes and HBUS Michael Gallagher, 
Charles DelBusto, Sandra Peterson, Thomas Haipin, Chris Davies, and Lesley Midzain, “OFAC 
Payments,” HSBC OCC 7688668-670, at 670. 

■™id. 

Id, at HSBC OCC 7d886d8. 

2/26/2010 email from HBUS Wyndham Clark to HBUS Debra Bonosconi, OCC-PSI- 
00165898. In another email the next day, Mr. Clark wrote; “At this point the businesses are not 
accepting that they own the risk, I can think of one exception, making the difficult decisions and 
taking the necessary steps to mitigate the risk. My view is the risks are being ignored by the 
business, and they are simply waiting for compliance to tell them what the risks are and to 
convince them as to what actions need to be taken. If they don’t know what the risks are, then 
why are they opening accounts or continuing with the relationship?” On the same day, Anne 
Liddy responded; “[W]e spend a lot of energy pushing our point and holding our ground and 
certainly Group member referred rclationships/transactions have increased our HBUS risk.” 
2/27/2010 email exchange between HBUS Anne Liddy, Wyndham Clark, and Debra Bonosconi, 
OCC-PSI-00165932. 
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review.''*^ The OCC’s September 2010 Supervisory Letter identified 
multiple problems with each of these elements of HBUS’ AML 

• • 144 

monitoring systems. 

Current Status of HBUS AML Program. In the two years since 
the OCC issued its September 2010 Supervisory Letter and both the 
OCC and Federal Reserve issued October 2010 Cease and Desist Orders 
to HBUS and HNAH regarding the many AML deficiencies in their 
programs, both HBUS and HNAH, as well as HSBC, have made 
commitments to strengthen their AML programs, including by directing 
more resources to compliance needs. HBUS told the Subcommittee that 
Gary Peterson will remain as its Compliance head, and his deputy will 
take over the duties of AML director, to ensure both positions have a full 
time executive.'"'^ HBUS also informed the Subcommittee that as of 
July 20 1 2, it had increased its Compliance and AML staff to over 1 ,000 
full time employees.''"* It is also in the process of replacing CAMP with 
an improved AML monitoring system, NORKOM. Additional reforms 
include scaling back its correspondent banking and embassy banking 
relationships by closing higher risk accounts, as well as closing its 
banknotes business in 2010.''’’ With respect to HSBC affiliates, HBUS 
told the Subcommittee it has initiated due diligence reviews of all such 
affiliates to identify those that are high risk, enabled all affiliates to 
obtain internal audit findings and other information to improve affiliate 
risk assessments, ended any limits on the monitoring of affiliates, and 
increased affiliate information sharing to strengthen AML 
compliance. '''* 

In addition, on April 30, 2012, HSBC Group issued a new Group 
Circular Letter (GCL) 1 200 1 4, announcing the intention of the bank to 
use the highest global compliance standards for every HSBC affiliate. 
The HSBC GCL stated: 

“We must adopt and enforce the adherence to a single standard 
globally that is determined by the highest standard we must apply 
anywhere. Often, this will mean adhering globally to U.S. 
regulatory standards, but to the extent another jurisdiction requires 


See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA/AML’) Examination - Program Violation (12 U.S.C. § 18I8(s); 12 C.F.R. § 
21.21),” OCC-PSI-00864335-365, at 10-21. [Sealed Exhibit.) 

Subcommittee briefing by HSBC and HBUS executives (6/26/2012). 

Id. See also, 7/10/2012 HSBC Group News, “HSBC to Testify at U.S. Senate Hearing.” 
letter by HSBC Group Chief Executive Stuart Gulliver, PSI-HSBC-76-0001-002, at 002. 

As of June 2012, HBUS had closed all banknotes accounts, 24 embassy accounts, and 326 
correspondent relationships. In August 2010, as part of this review to exit relationships, HBUS 
CEO Irene Domer noted that she was recommending closing relationships with 121 international 
banks that “do not meet either risk or return hurdles.” 9/20/2010 email from Irene Domer to 
Andrew Long and others, HSBC OCC 8876104-106, 

Subcommittee briefing by HSBC and HBUS executives (6/26/2012). 
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higher standards, then that jurisdiction’s requirements must shape 

our global standard.”'"'^ 

This new GCL could represent a groundbreaking approach for the bank 
if it, in fact, pushes its affiliates toward uniform and high compliance 
standards. 

These reforms, like those announced in 2004 after the bank’s last 
AML enforcement action, have the potential to resolve the AML 
deficiencies at the bank and push HBUS to an improved level of AML 
compliance. While HBUS has committed to making major changes, the 
bank made similar commitments under the 2003 enforcement action, 
which the OCC lifted in 2006, after which the bank’s AML program 
quickly deteriorated. On many occasions since then, HBUS responded 
to AML problems identified by the OCC by instituting new policies and 
procedures that appeared to be effective remedies. However, it has often 
been the case that regulators would subsequently cite HBUS for failing 
to comply with its own policies and procedures. In 2006, for example, 
when the OCC lifted the AML enforcement action, HBUS had already 
incurred over 30 AML-related Matters Requiring Attention, many of 
which cited AML problems similar to those that had formed the basis of 
the written agreement. 

In addition, not all of the AML reforms proposed since 2010 have 
proceeded smoothly. The new compliance head hired by the bank left 
after fifteen months. The bank’s new monitoring system has been the 
subject of OCC criticisms aimed at whether its monitoring parameters 
have been correctly set to identify suspicious activity and provide 
adequate AML oversight ofclient account and wire transfer activity.'^'’ 
While the recent GCL could represent an important advance in requiring 
bank affiliates to adhere to the highest AML standards globally, as this 
report documents, it can take months, if not years, for HSBC affiliates to 
come into compliance with HSBC GCL directives. The burden of proof 
is on HSBC Group to show that its latest directive is taking hold and its 
affiliates are complying with the highest AML stands, and on HBUS to 
show that it is moving from an ineffective AML program to one that 
safeguards the U.S. financial system from abuse. 


GCL 120014 - HSBC Global Standards. 

See 5/25/2012 OCC Supervisory Letter HSBC-2012-t9, “Payments and Cash Management 
(PCM); Bank Secrecy Act and Anti-Money Laundering (BSA/AML) System Examination,” PSl- 
OCC-37-0004. [Sealed Exhibit.] See also 6/25/2012 HSBC response letter. Supervisory Letter 
HSBC 2012-19 “Payments and Cash Management (PCM); Bank Secrecy Act and Anti-Money 
Laundering (BSA/AML) System Examination,” HSBC-PSI-PROD-0200315-341. [Sealed 
Exhibit.] 
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III. HBMX: PROVIDING U.S. ACCESS TO A HIGH RISK 

AFFILIATE 

HBUS has opened correspondent accounts for approximately 80 
HSBC affiliates around the world, providing them with access to the 
U.S. financial system through clearing U.S. dollar wire transfers, 
cashing U.S. dollar checks, buying and selling physical U.S. dollars, and 
other services.’^' Some of those HSBC affiliates operate in high risk 
countries, provide services to high risk clients, or offer high risk 
financial products. Until recently, HSBC Group policy, however, 
allowed its affiliates to assume that any HSBC affiliate owned 50% or 
more by the Group met Group AML standards, were low risk, and 
required no due diligence prior to opening a correspondent account.'^^ 

In conformance with that HSBC Group policy, for years, HBUS did not 
conduct any due diligence analysis or risk assessment of an HSBC 
affiliate prior to supplying it with a U.S. account. HBUS took that 
approach, even though U.S. statutory and regulatory requirements 
explicitly direct U.S. banks to conduct due diligence prior to opening a 
correspondent account for any foreign financial institution, with no 
exception for foreign affiliates.'^^ 

HBMX, an HSBC affiliate in Mexico, illustrates how providing a 
correspondent account and U.S. dollar services to a high risk affiliate 
increased AML risks for HBUS. HBMX was created when HSBC 
Group purchased a Mexican bank known as Bital in 2002. A pre- 
purchase review disclosed that the bank had no functioning compliance 
program, despite operating in a country confronting both drug 
trafficking and money laundering. For years, HSBC Group knew that 
HBMX continued to operate with multiple AML deficiencies while 
serving high risk clients and selling high risk products. HSBC Group 
also knew that HBMX had an extensive correspondent relationship with 


As of February 2010, HBUS had about 2,400 clients in its Payments and Cash Management 
(PCM) department. See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy 
Act/Anti-Money Laundering (‘BSA/AML’) Examination ~ Program Violation (12 U.S.C. § 
1818(s); 12C.F.R. § 2L2I),”OCC-PSI-00864335-365, at 7. [Sealed Exhibit] In June 2012, 
HBUS had a total of nearly 1,200 correspondent clients, of which 80 were HSBC affiliates. The 
HSBC affiliates had 395 HBUS accounts, of which 7 or 8 related to HBMX. Subcommittee 
briefing by HSBC legal counsel (6/20/2012). 

See, e.g., 4/9/2010 memorandum from OCC legal counsel to OCC Washington Supervision 
Review Committee, “Order of Investigation - HSBC Bank USA, N.A., New York, NY,” OCC- 
PSI-00899482-485, at 2 (citing HBUS’s 12/1/2008 AML Procedures Manual at 12: “The only 
exception to the KYC Profile requirement is any client who is an HSBC Group affiliate in which 
HSBC has an ownership interest of 50% or more.”). After the Setember 2010 OCC Supervisory 
Letter criticizing its practice, HSBC Group changed its policy and now requires ail affiliates to 
perform due diligence on all other affiliates. 

See, e.g., 4/9/2010 memorandum from OCC legal counsel to OCC Washington Supervision 
Review Committee, “Order of Investigation - HSBC Bank USA, N.A.,New York, NY,” OCC- 
PSf-00899482-485, at 2 (“The Bank is obligated to conduct due diligence, and, where necessary, 
EDD [Enhanced Due Diligence], on foreign correspondent accounts. 3 1 U.S.C. § 531 8(i)(l ). . . . 
Section 531 8(i) does not exempt foreign correspondent accounts that a bank maintains for its 
affiliates.”). 
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HBUS and that suspect funds moved through the HBMX account, but 
failed to inform HBUS of the extent of the AML problems at HBMX so 
that HBUS could treat HBMX as a high risk account. Instead, until 
2009, HBUS treated HBMX as low risk. 

Contrary to its designation, HBMX engaged in many high risk 
activities. It opened accounts for high risk clients, including Mexican 
casas de cambio and U.S. money service businesses, such as Casa de 
Cambio Puebla and Sigue Corporation which later legal proceedings 
showed had been used on occasion, from 2005 to 2007 for Puebla and 
from 2003 to 2005 for Sigue, to launder funds from illegal drug sales in 
the United States. HMBX also offered high risk products, including 
providing U.S. dollar accounts in the Cayman Islands to nearly 50,000 
clients with $2.1 billion in assets, many of which supplied no KYC 
information and some of which misused their accounts on behalf of a 
drug cartel. HBMX was also the single largest exporter of U.S. dollars 
to HBUS, transferring over $3 billion in 2007 and $4 billion in 2008, 
amounts that far outstripped larger Mexican banks and other HSBC 
affiliates. Mexican and U.S. taw enforcement and regulatory authorities 
expressed concern that HBMX’s bulk cash shipments could reach that 
volume only if they included illegal drug proceeds that had been brought 
back to Mexico from the United States. In addition, for a three-year 
period from mid-2006 to m id-2009, HBUS failed to conduct any AML 
monitoring of its U.S. dollar transactions with HSBC affiliates, 
including HBMX, which meant that it made no effort to identify any 
suspicious activity, despite the inherent risks in large cash 
transactions.'^"* 

HBMX conducted these high risk activities using U.S. dollar 
correspondent and banknotes accounts supplied by HBUS. HBMX used 
those accounts to process U.S. dollar wire transfers, clear bulk U.S. 
dollar travelers cheques, and accept and make deposits of bulk cash, all 
of which exposed, not only itself, but also HBUS, to substantial money 
laundering risks. HBMX compounded the risks through widespread, 
weak AML controls, while HBUS magnified them by omitting the due 
diligence and account monitoring it applied to other accounts. HSBC 
Group also compounded the AML risks by failing to alert HBUS to 
HBMX’s ongoing, severe AML deficiencies. 

A. HSBC Mexico 

In November 2002, HSBC Group purchased Mexico’s fifth largest 
bank. Banco Intemacional, S.A., then part of Grupo Financiero Bital, 


See 9/13/2010 OCC Supen-isory Letter HSBC 2010-22, OCC-PSl-00000230, at 2. [Sealed 
Exhibit.] 
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S.A. de C.V. (Bital), for about $1.1 billion.'^^ At the time of the 
purchase, Bital had roughly 6 million customers and 15,400 staff 
This acquisition significantly increased HSBC’s banking presence in 
Mexico.'^’ HSBC later changed the name of the bank to HSBC Mexico 
S.A. Banco (HBMX) and the name of the holding company to Grupo 
Financiero HSBC, S.A. de C.V. (GF HSBC). GF HSBC is now one of 
Mexico’s largest financial service conglomerates, owning not only 
HBMX but also a network of other financial firms. HBMX currently 
has over 1,100 branches, $2 billion in assets, and over 8 million 
clients. HBMX and its Mexican parent are headquartered in Mexico 
City and together have over 19,000 employees.'*^ HSBC typically 
refers to its Mexican operations as HSBC Mexico. 

Since the purchase of Bital, three persons have served as the head 
of HSBC Mexico. The first was Alexander (Sandy) Flockhart who 
served as Chairman and Chief Executive Officer (CEO) of HBMX, and 
later also as CEO of HSBC’s Latin America operations, from 2002 to 
2007.'*' After he was made Latin American regional head,'“ Paul 
Thurston took the post of HSBC Mexico CEO and later also served as 
the HSBC Latin America CEO.'*" Mr. Thurston headed the Mexico 
operations for just over a year, from February 2007 to May 2008. When 


See “HSBC Consume la Adquision de GF BITAL,” (1 1/25/02), 
http://www.hsbc.com.mx/l/PA_l_I_S5/content/home_en/investor_relations/press__releases/infpr 
ess/hsbc_consuma.pdf; “HSBC Buys Mexican Bank Bital,” CNN, com (8/25/2002), 
http://archives.cnn.eom/2002/BUSlNESS/asia/08/21/uk.hsbc. 

8/21/2002 “HSBC agrees to acquire Grupo Financiero Bital,” HSBC press release, 
http://www.hsbc.eom/l/2/newsroom/news/2002/hsbc-agrees-to-acquire-grupo-financiero-bital. 

Two years earlier, in 2000, HSBC had acquired a smaller bank in Mexico, Republic National 
Bank ofNew York (Mexico) S.A. See 10/21/201 l“Doing Business in Mexico,” HSBC 
publication, at 34, 

http://www.hsbc.eom/l/content/assets/business_banking/l 1 1021_doing_busmessjn_mexico.pdf 

Among other entities, GF HSBC owns a securities firm, insurance company, and pension 
fund. See HSBC Mexico website, “Grupo HSBC Mexico,” http://www.hsbc. com.mx/l/2/grupo. 
Former HBMX head Paul Thurston told the Subcommittee that HBMX experienced rapid growth 
from its purchase in 2002. Subcommittee interview of Paul Thurston (5/1/2012). 

See 10/21/201 l“Doing Business in Mexico,” HSBC publication, at 6, 
http://www.hsbc.eom/l/conlent/assets/business_banking/l 1 1021_doing_business_in_mexico.pdf 
; “Grupo HSBC Mexico,” HSBC website, http;//www.hsbc.com.mx/l/2/grupo. 

See HSBC website, Grupo HSBC Mexico, http;//\vww.hsbc.com.mx/l/2/grupo, viewed 
4/2/12. 

He was Group General Manager, Chairman and Chief Executive Officer of HBMX from 
2002 to 2006, and Group Managing Director Latin America from 2006 to July 2007. See his 
biography on the HSBC website, http://www.hsbc.coni/l/PA_esf-ca-app- 
content/content/assets/newsroom/raedia_kit/biogs/l 00223_sandy_flockhart.pdf. HSBC also has 
affiliates in Colombia, Panama, Peru, and Uruguay, among other Latin American locations. 

In July 2007, Mr. Flockhart was appointed CEO of The Hongkong and Shanghai Banking 
Corporation Limited. See his biography on the HSBC website, htlp://www.hsbc.com/l/PA_e.sf- 
ca-app-content/content/assets/newsrooni/media_kit/biogs/l 00223_sandy_flockhart.pdf. 

In May 2008, Mr, Thurston was appointed head of GF HSBC, and later co-head of the Latin 
American Region. See his biography on the HSBC website, http://www.hsbc.eom/l /PA_esf-ca- 
app-content/conlent/ assets/newsroom/media_kit/biogs/i01210_paul _thurston.pdf; “HSBC 
makes key international appointments,” (4/15/2008), 

http://www.hsbc.eom/l/2/newsroom/news/2008/hsbc-makes-kcy-intemational-appointments. 
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he was promoted and relocated to London,'^'' Luis Pena Kegel became 
the new HSBC Mexico CEO and remains in that post today. 

Mexican banks, including HBMX, are regulated by the Comision 
Nacional Bancaria y de Valores (CNBV) which oversees Mexican banks 
and securities firms. The Mexican central bank. Banco de Mexico, the 
Mexican Ministry of Finance, the Mexican Treasury Department 
(SHCP), and the Mexican Financial Intelligence Unit (FIU) also perform 
oversight functions. Mexico has a well-developed set of AML laws and 
regulations. Mexican regulators and law enforcement agencies work 
with their U.S. counterparts to combat drug trafficking and money 
laundering in both countries. 

HBMX is a large, sophisticated bank offering a full range of 
banking services, including deposits, checking, foreign exchange, 
commercial banking services, private banking and wealth management, 
and correspondent banking. HMBX offers correspondent accounts to a 
wide range of financial institutions. HBMX also maintains 
correspondent accounts for itself at other banks around the world, 
including in the United States. In 2002, at the time Bital was purchased, 
the bank had $647 million in correspondent banking deposits in Mexico, 
$700 million in the Cayman Islands, and $143 million in New York.'®® 
According to CEO Paul Thruston, HBMX experienced rapid growth in 
the early years after its acquisition.'®’ HBMX also operates a branch in 
the Cayman Islands, HSBC Mexico S.A, which was established by Bital 
in 1980, with authority to offer customers U.S. dollar accounts.'®* At its 
peak in 2008, the Cayman branch, which has no offices or employees of 
its own and is run by HBMX personnel in Mexico, had nearly 50,000 
client accounts and assets totaling $2.1 billion.'®’ 

HBMX has had an extensive relationship with HBUS, obtaining 
U.S. dollar services through both correspondent and banknotes accounts. 
HBMX used its HBUS correspondent account primarily to process 


In May 2008. Mr. Thurston was appointed Managing Director of UK Banking, in charge of 
HSBC’s retail and commercial banking operations in the United Kingdom. See “HSBC makes 
key international appointments,” (4/15/2008), 

http://www.hsbc.eom/l/2/newsroom/news/2008/hsbc-makes-key-intcmational-appointments. 

Mr. Pena was appointed head of GF HSBC. Id. Mr. Pena had previously headed Grupo 
Financiero Banorte and worked for 25 years at Banamax/Citigroup in Mexico. Id. Emilson 
Alonso was appointed Chief Executive of HSBC Latin America. Id. 

'^^“Compliance Due Diligence Trip by John Root: Bital (Mexico City) - 4-8 Nov02,” prepared 
by HSBC John Root, HSBC OCC 8877802-807, at 5. 

' ’ Subcommittee interview of Paul Thurston (5/1/2012). 

This branch operates under a “Class B license,” which is given by the Cayman Islands 
Monetary Authority to offshore banks authorized to do business only with non-residents of the 
Cayman Islands. See list of Cayman offshore banks at http://www.offshore- 
library.com^anki^g/cayman_islands/page_3; Subcommittee briefing by HSBC legal counsel on 
the Cayman accounts (4/20/2012). 

See chart at HSBC OCC 8876787, attached to 9/12/2008 email from HSBC John Root to 
HSBC Adrian Cristiani, “Cayman Accounts,” HSBC OCC 8876784. 
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international wire transfers and clear U.S. dollar monetary instruments 
such as travelers cheques. It also made use of HBUS’ Remote Deposit 
Capture service which enabled HBMX to send monetary instruments to 
HBUS electronically for processing. HBMX interacted at times with the 
HBUS Payment and Cash Management (PCM) division regarding this 
account. In addition, HBMX interacted with the HBUS Global 
Banknotes division, until the Global Banknotes business was 
discontinued in 2010. HBMX used its banknotes account primarily to 
sell U.S. dollars received from its customers to HBUS, which HBMX 
typically transported to HBUS via armed car or aircraft. In one three- 
month period from November 2006 to February 2007, HBMX shipped 
nearly $742 million in U.S. dollars to HBUS; at its peak, HBMX 
exported $4 billion in bulk cash shipments to HBUS over the course of 
one year, 2008. Until it sharply curtailed its U.S. dollar services in 
Mexico in January 2009, HBMX shipped more U.S. dollars to HBUS 
than any other Mexican bank or HSBC affiliate. 

B. Mexico 

To understand HBMX’s AML risks and, therefore, the risks HBUS 
incurred as its U.S. correspondent, it is necessary also to understand the 
AML risks in its home country, Mexico. From 2000 until 2009, HSBC 
Group and HBUS gave Mexico their lowest AML risk rating, despite 
overwhelming information indicating that Mexico was a high risk 
jurisdiction for drug trafficking and money laundering. In May 2009, 
HBUS suddenly increased its risk rating for Mexico by three notches, 
from its lowest to its highest risk level, where it remains today.'’'* 

HSBC Group did not follow suit until 2012 when it raised its risk rating 
for Mexico from “cautionary” to “high risk.”'” 

(1) U.S. Assessment of AML Risk in Mexico 

INCSR Reports. In its annual International Narcotics Control 
Strategy Reports (INCSRs), which contain a country-by-country 
assessment of drug trafficking and money laundering risks, the U.S. 

State Department has consistently classified Mexico as a country of 
“primary” concern for money laundering, its highest risk rating.'” In 
2002, the State Department described Mexico’s drug trafficking and 
money laundering risks as follows: 


See 4/9/2010 memorandum from OCC legal counsel to OCC Washington Supervision 
Review Committee, “Order of Investigation - HSBC Bank USA, N. A., New York, NY,” OCC- 
PSI-00899482-485, at 484. 

Subcommittee briefing by HSBC legal counsel (7/5/2012). 

See, e.g., “2000 Internationa! Narcotics Control Strategy Report,” U.S. Department of State 
(hereinafter “2000 INCSR”), at 621 ; 2002 INCSR at XlI-60; 2006 INCSR Vol. II at 39; 2008 
INCSR Vol. II at 62; 2012 INCSR Vol. H, at 33, 
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“Mexico faces a myriad of drug-related problems that include the 
production and transshipment of illicit drugs, money laundering, 
consumption and illicit firearms trafficking. ... The Government 
of Mexico’s (GOM) longstanding commitment to combat drug 
trafficking and related crimes resulted in tangible successes against 
the Arellano Felix Organization (AFO), the Carrillo Fuentes 
Organization (CFO), and the Gulf Cartel - widely considered the 
top three drug groups in the country. ... Mexico remains a major 
supplier of heroin, methamphetamine, and marijuana, and the 
transit point for more than one half of the cocaine sold in the U.S. 

. . . The industrial-scale drug trade has transformed 
narcotrafficking into one of Mexico’s deadliest businesses. . . . 
These organizations have demonstrated blatant disregard for 
human life as the executions of law enforcement personnel, 
government officials, and innocent bystanders have increased. . . . 
In recent years international money launderers have turned 
increasingly to Mexico for initial placement of drug proceeds into 
the global financial system.””^ 

The State Department also wrote: 

“The smuggling of bulk shipments of U.S. currency into Mexico 
and the movement of the cash back into the United States via 
couriers and armored vehicles, as well as through wire transfers, 
remain favored methods for laundering drug proceeds. Mexico’s 
financial institutions engage in currency transactions involving 
international narcotics-trafficking proceeds that include significant 
amounts of U.S. currency or currency derived from illegal drug 
sales in the United States. Although drug trafficking continues to 
be the principal source of the laundered proceeds, other crimes 
including corruption, kidnapping, firearms trafficking, and 
immigrant trafficking are also major sources of illegal 
proceeds.”'^'' 

Equally negative assessments of Mexico’s drug trafficking and 
money laundering risks appeared in the State Department’s annual 
INCSR reports over the next four years. In 2006, for example, the State 
Department wrote: 

“The illicit drug trade continues to be the principal source of funds 
laundered through the Mexican financial system. Mexico is a 
major drug producing and drug-transit country. Mexico also 
serves as one of the major conduits for proceeds from illegal drug 
sales leaving the United States. Other crimes, including 
corruption, kidnapping, firearms trafficking, and immigrant 

2002 INCSR, at V-27-V-28. 

Id.atXlI-161. 
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trafficking are also major sources of illegal proceeds. The 
smuggling of bulk shipments of U.S. currency into Mexico and the 
movement of the cash back into the United States via couriers, 
armored vehicles, and wire transfers, remain favored methods for 
laundering drug proceeds. . . . 

According to U.S. law enforcement officials, Mexico remains one 
of the most challenging money laundering jurisdictions for the 
United States, especially with regard to the investigation of money 
laundering activities involving the cross-border smuggling of bulk 
currency from drug transactions. While Mexico has taken a 
number of steps to improve its anti-money laundering system, 
significant amounts of narcotics-related proceeds are still 
smuggled across the border. In addition, such proceeds can still be 
introduced into the financial system through Mexican banks or 
casas de cambio, or repatriated across the border without record of 
the true owner of the fimds.”'^* 

The State Department’s relentlessly negative assessments of 
Mexico’s drug trafficking and money laundering vulnerabilities 
continued unabated. In 2008, the State Department wrote that “U.S. 
officials estimate that since 2003, as much as U.S. $22 billion may have 
been repatriated to Mexico from the United States by drug trafficking 
organizations. Four years later, in 2012, the State Department wrote 
that drug cartels were using Mexican and U.S. financial institutions to 
launder as much as $39 billion each year: “According to U.S. 
authorities, drug trafficking organizations send between $19 and $39 
billion annually to Mexico from the United States.”'^’ 

Warnings. The State Department is far from the only 
governmental agency to have warned about the money laundering risks 
in Mexico. The U.S. Congress has held repeated hearings over the years 
highlighting money laundering and drug trafficking problems in 
Mexico.’^* Witnesses have included the U.S. Justice Department, 


2006 INCSR, at 268-269. 

2008 INCSR, at 327. 

'”2012 INCSR, at 140. 

See, e.g., “Money Laundering Activity Associated with the Mexican Narco-Crime 
Syndicate,” U.S. House Banking and Financial Subcommittee on General Oversight and 
Investigations, Serial No. 104-72 (9/5/1996); “Drug Control: Update on United States-Mexican 
Countemarcotics Efforts,” Senate Caucus on International Narcotics Control, S.Hrg. 1 06-60 
(2/24/1 999); “Federal Strategies to End Border Violence,” Senate Judiciary Committee, S .Hrg. 
109-556 (3/1/2006); “Antidrug Package for Mexico and Central America: An Evaluation,” 
Senate Committee on Foreign Relations, S.Hrg. 1 10-31 1 (11/15/2007); “Escalating Violence in 
Mexico and the Southwest Border as a Result of the Illicit Drug Trade,” House Judiciary 
Subcommittee on Crime, Teirorism, and Homeland Security, Serial No. 111-25 (5/6/2009); 
“Exploring Drug Gangs’ Ever Evolving Tactics to Penetrate the Border and the Federal 
Government's Ability to Stop Them,” Senate Homeland Security and Governmental Affairs Ad 
Hoc Subcommittee on Disaster Recovery and Intergovernmental Affairs, S.Hrg. 1 12-384 
(3/31/2011). 
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Homeland Security Department, Federal Bureau of Investigations, Drug 
Enforcement Administration (DEA), Financial Crimes Enforcement 
Network (FinCEN) of the U.S. Treasury Department, Internal Revenue 
Service (IRS), Customs and Border Patrol, and Coast Guard, among 
others. From 1 996 to 201 1, these hearings have painted the same grim 
picture drawn in the State Department’s annual reports regarding the 
drug trafficking and money laundering threats in Mexico. 

In addition, warnings about money laundering problems in Mexico 
have been directed specifically to financial institutions operating in the 
United States. In 2005, multiple U.S. agencies worked together to 
produce a U.S. Money Laundering Threat Assessment which identified 
thirteen key money laundering methods and specifically identified 
Mexico as a high risk jurisdiction for several of them, including bulk 
cash smuggling, misuse of money orders, and suspicious funds sent 
through money service businesses.'™ In 2006, FinCEN issued an 
advisory to all U.S. financial instimtions to “better guard against an 
increasingly prevalent money laundering threat involving the smuggling 
of bulk U.S. currency into Mexico,” warning in particular against “the 
abuse of their financial services” by Mexican casas de cambio.'*" The 
advisory explained that drug traffickers were smuggling bulk cash from 
the United States into Mexico, then depositing the funds with casas de 
cambio who were sending the cash back to the United States via 
armored transport or by selling the U.S. dollars to U.S. banks.'*' The 
advisory also warned about multiple wire transfers that “bear no 
apparent business relationship” with a particular casa de cambio, and 
U.S. deposits by casas de cambio of sequentially numbered monetary 
instruments.'*^ 

Wachovia Prosecution. Criminal prosecutions also alerted U.S. 
financial institutions to the money laundering problems in Mexico. In 
2008, for example, news articles warned how Mexican drug cartels sent 
millions of dollars in illegal drug proceeds through a major U.S. 
financial institution, Wachovia Bank.'*^ In 2010, the United States filed 
a deferred prosecution agreement detailing how Wachovia Bank had 


See Dec. 2005 “U.S. Money Laundering Threat Assessment ” issued by the Money 
Laundering Threat Assessment Working Group, which included the U.S. Departments of 
Treasury, Justice, and Homeland Security, Federal Reserve, and Postal Service. 

“Guidance to Financial Institutions on the Repatriation of Currency Smuggled into Mexico 
from the United States,” FinCEN Advisory No. FIN-2006-A003 (4/28/2006), at 1. 
http;//www.fmcen.gov/slatutes_regs/guidance/pdf/advis04282006.pdf. 

Id. at 1-2. 

1“ Id. at 2, 

See, e.g., “Waehovia Is Under Scrutiny in Latin Drug-Money Probe,” Wall Street Joumat . 
Evan Perez, Gienn Simpson (4/26/2008)(describ!ng AML cases involving not only Wachovia 
Bank, but also American Express International Bank, which forfeited $55 million as part of a 
2007 Federal deferred prosecution agreement, and Union Bank of California, which forfeited 
$21 .6 million as part of a 2007 Federal deferred prosecution agreement, both of which were also 
charged with inadequate AML programs and suspected of being used by Mexican drug cartels to 
launder funds). 
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been used by Mexican foreign exchange businesses to launder at least 
$110 million in drug proceeds.'*'* Filings in the case describe how, from 
2003 to 2008, Wachovia Bank provided a variety of services for 22 
Mexican casas de camhio (CDCs), despite evidence of suspicious 
activity. Those services included processing numerous U.S. dollar wire 
transfers for deposit into bank accounts around the world;'*^ clearing 
large volumes of sequentially numbered U.S. travelers cheques;'*'’ and 
accepting numerous hulk cash shipments transported hy armored car 
from the CDCs.'*'' The filings report that, over a three-year period, the 
wire activity exceeded $374 billion and the bulk cash shipments 
exceeded $4,7 billion, far exceeding expected volumes.'* Wachovia 
Bank also processed $20 million in sequentially numbered travelers 
cheques, the majority of which contained illegible names and unusual 
markings.'*^ The deferred prosecution agreement and supporting factual 
statement charged Wachovia Bank with willfully failing to maintain an 
effective AML program,”" detailing numerous AML deficiencies 
including a failure to conduct due diligence on high risk clients; a failure 
to monitor wire transfers, pouch activities, and bulk cash shipments; and 
a failure to report suspicious activity to law enforcement.'"' To avoid 
prosecution, Wachovia Bank acknowledged responsibility for its 
conduct, paid $160 million in criminal and civil fines, and agreed to 
undertake significant AML reforms.'"^ The Wachovia case received 
widespread media attention, providing further notice of the money 
laundering dangers in Mexico.'"* 

(2) HSBC Assessment of Risk in Mexico 

Despite the overwhelming information available about substantial 
money laundering risks in Mexico, from 2002 until 2009, HBUS gave 
Mexico its lowest risk rating for AML purposes.'"" As a consequence. 


See United Slates v. Wachovia Bank N.A. . Case No. 10-20i65-CR-Lenard (USDC SDFU), 
Deferred Prosecution Agreement (3/16/2010) and Information (3/12/2010). 

See id., Factual Statement, Exhibit A to Deferred Prosecution Agreement (3/16/2010), at ^ 
20, 24(1). 

'^Md. at ^122, 24(2), 35. 

Id. at^21,24(3). 

Id. at ^23. 

Id. at 135. 

See United States v. Wachovia Bank N.A. . Case No. 10-20165-CR-Lenard (USDC SDFL), 
Deferred Prosecution Agreement (3/16/2010), atH 3-4. 

See id., Factual Statement, Exhibit A to Deferred Prosecution Agreement (3/16/2010), at H 
28,30-35. 

Id., at 11 38-40; Deferred Prosecution Agreement (3/16/2010); “Wachovia Enters into 
Deferred Prosecution Agreement,” U.S. Attorney’s Office for the Southern District of Florida 
press release, (3/17/2010), http://www.justice.gov/usao/fls/ PressReleases/1 003 17-02.html. 

See, e.g., “Wachovia is Under Scrutiny in Latin Drug-Money Probe,” Wall Street Journal . 
Evan Perez and Glenn Simpson, April 26, 2008; “How a big U.S. bank laundered billions from 
Mexico’s murderous drug gangs,” The Observer. Ed Vulliamy, (4/2/201 1), 
htlp://www.guardian.co.uk/world/20Il/apr/03/us-bank-mexico-drug-gangs. 

See, e.g., Feb. 2009 “Rating 2009,” prepared by HBUS, HSBC-PSI-PROD-0096390-397 
(rating over 235 countries and territories). [Sealed Exhibit.] 
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under HSBC Group policy, clients from Mexico were not subjected to 
enhanced monitoring by HBUS, unless they were also designated a 
Special Category Client (SCC), a relatively rare designation that 
indicates a client poses high AML risks. Had Mexico carried one of the 
two highest risk ratings, all Mexican clients at HBUS would have been 
subjected to enhanced due diligenee and account monitoring. Instead, 
HBUS failed to conduct AML monitoring of most Mexican client 
account and wire transfer activity involving substantial funds. 

Risk Rating Process. Until recently, HSBC Group and HBUS 
issued AML country risk assessments using four categories of increasing 
risk, “standard,” “medium,” “cautionary,” and “high.” HSBC Group 
created a chart listing its country risk assessments, sent the chart to its 
affiliates characterizing its assessments as recommendations, and then 
allowed each HSBC affiliate to make its own assessment decisions.'^^ 

At HBUS, the country risk assessments were compiled every six months 
by an AML compliance officer who gathered information from a 
number of sources, assigned numerical scores to each source, and then 
compiled aggregate scores for over 200 eountries.'’® 

Those scores were then supposedly used to assign risk ratings. In 
fact, however, countries receiving similar scores often received different 
risk ratings. Those differences were attributable, in part, to an “HBUS 
discretion” factor which was listed as an official factor in the risk 
assessment process, included in the risk assessment chart, and used, 
according to the OCC, to alter the risk ratings for over 60 countries in 
2009.'^^ The OCC noted that HBUS offered “no discussion or 
documentation as to what constitute[d] permissible reasons to change the 
risk rating” using the HBUS discretion factor.”® The OCC also found 
that HBUS did not apply its risk-rating methodology “in a consistent 
manner.” The OCC wrote that, in 2009, of 73 countries that received a 
zero risk assessment score: 

“32 (44 percent) were rated standard, 32 (44 percent) were rated 
medium, 1(1 percent) was rated cautionary, and 8(11 percent) 
were rated Unclassified. The OCC found no documentation or 
support for the difference between the final ratings and the scores. 
While the bank elevated the risk ratings versus the scores, the bank 
has not adopted a repeatable, standardized procedure.””^ 


Subcommittee interview of Ali Kazmy (2/29/2012). 

Id. See also Feb. 2009 “Rating 2009,” prepared by HBUS, HSBC-PSI-PROD-0096390-397. 
See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA/AML’) Examination - Program Violation (12 U.S.C. § 1818{s); 12C.F.R. § 
21,21),” OCC-PSI-00864335-365, at 19. [Sealed Exhibit.] 

Id. 
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The OCC criticized the HSBC country risk assessment process for 
not taking into account readily available country-specific information on 
money laundering and drug trafficking risks, including in the annual 
State Department INCSR reports.^®® Although INCSR information was 
often included in HBUS KYC client profiles, the INCSR country- 
specific risk ratings were inexplicably excluded from the official HBUS 
country risk assessment scoring matrix.^®' 

Still another OCC criticism was the HSBC Group’s “unacceptable 
practice of assigning an overall risk rating to its non-SCC customers 
based solely on the risk rating that the bank has given the country where 
the customer is located.”^®^ One result of this practice, according to the 
OCC, was that HSBC had excluded from its routine AML monitoring 
“more than $60 trillion of wire transfers each year for customers 
domiciled in countries risk rated as ‘standard’ or ‘medium,’ representing 
two-thirds of the total dollar volume” of wire transfers at HSBC.^®^ 

With respect to Mexico, the HSBC policy meant that, due to its low risk 
rating, all clients based in Mexico were considered low risk, unless rated 
an see, an outcome that the OCC viewed as a critical AML deficiency. 
One consequence was that high risk clients residing in low risk countries 
routinely escaped enhanced due diligence and account monitoring. 

2009 Change in Mexico Risk Rating. In February 2009, HBUS 
issued a chart with its latest country risk assessments.^®^ The chart 
provided risk scores and categories for 239 countries. ^®^ It assigned a 
score of “2” for Mexico, which was one of the lowest scores. When 
asked about this low score, the HBUS compliance officer then 
responsible for country risk assessments, Ali Kazmy, told the 
Subcommittee that, since 2006, HBUS’ assessments had inadvertently 
failed to take into account a 2006 FinCEN advisory related to Mexico 
that would have added 10 points to its score each year.^®® As a result of 
its low score, Mexico was rated a “standard” risk, the lowest of the four 
risk ratings.^®^ 


See Feb. 2009 “Rating 2009,” prepared by HBUS, HSBC-PSI-PROD-0096390-397, 

9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
Laundering (‘BSA/ AML') Examination - Program Violation (12 U.S.C. § 1818(s); 12C.F.R. § 
21.21),” OCC-PSI-00864335-365, at 18. [Sealed Exhibit.] 

Id. at 2. 

See Feb. 2009 “Rating 2009 ” prepared by HBUS, HSBC-PSI-PROD-0096390-397. 

Id. The risk scores ranged from 0 to 28, and produced ratings of standard, medium, 
cautionary, and high. 

Subcommittee interview of Ali S. Kazmy (2/29i20i2). See also Feb. 2009 “Rating 2009,” 
prepared by HBUS, HSBC-PSI-PROD-0096390-397. Mr. Kazmy took over the country risk 
rating process from Lynda Cassell who left HBUS in mid-2006. The FinCEN Advisory was 
issued in April 2006, just before Ms. Cassell left. 

Mexico had received the same standard rating in 2008. See 2008 HBUS Country Risk 
Assessment for Mexico at HSBC-PSI-PROD-0096398-441 and 422. 
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This low risk rating was awarded despite a May 2008 email from 
Susan Wright, AML Compliance head for the HSBC Group, singling out 
AML concerns related to Mexico. Referencing “RMM - Country Risk,” 
Ms. Wright wrote to HSBC Group Compliance head David Bagley and 
other colleagues: 

“I believe you have sight of our Country Reputational Risk Table 
but, as previously discussed, unless there are some specific 
concerns it is not proposed to highlight the highest risk countries as 
a matter of course. ... 

Mexico - there are specific risks in relation to pressure from the 
US with regard to the laundering of the proceeds of drug 
trafficking through Mexican cas[a]s de carabios. HBMX have a 
number of customers who are cambios/money service businesses 
(MSBs) with links to the US and consequently payments from 
HBMX are made through HBUS. ... [TJhese are notoriously 
difficult businesses to monitor .... [Tjhere is also US concern with 
regard to the amount of USD cash deposits and transactions 
between the US and Mexico and HBMX has been identified as one 
of the banks with the highest level of activity in this area.”^°* 

This email shows that the head of HSBC AML Compliance was aware 
of and communicated to other Compliance personnel the serious AML 
risks related to Mexico involving drug trafficking, suspect casas de 
cambio, and bulk cash smuggling, yet the February 2009 HBUS country 
risk assessments again assigned Mexico the lowest possible risk rating. 

Three months after issuing the country risk assessments in 
February 2009, however, on May 1, 2009, HBUS suddenly revised 
Mexico’s risk rating, increasing it by three notches from the lowest to its 
highest risk rating.^ ^ When asked by the Subcommittee about the 
timing, Mr. Kazmy explained that, “in early 2009,” he had been asked 
by his supervisor, Anne Liddy, to take another look at Mexico’s risk 
rating due to OCC concerns. 

Ms. Liddy ’s request coincided with an intensifying law 
enforcement interest in Mexican casas de cambio suspected of 
laundering illegal drug proceeds through U.S. financial institutions, 
including HBUS. In February 2008, and again in November 2008, as 
detailed below, Mexican regulators confronted HBMX with suspicions 
that drug proceeds were moving through its accounts at HBUS. In 

5/14/2008 email from HSBC Susan Wright to HBUS David Bagley, HSBC Karl Barclay, 
HBEU Derek Leatherdaie, and others, “RMM - Country Risk,” HSBC OCC 8873750. 

See 4/9/2010 memorandum from OCC legal counsel to OCC Washington Supervision 
Review Committee, “Order of Investigation -HSBC Bank USA, N.A., New York, NY,” OCC- 
PSI-00899482-485,at484. 

Subcommittee interview of AH S, Kazmy {2/29/2012), 
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January 2009, according to an internal HBUS email, a U.S. Homeland 
Security Department’s Immigration and Customs Enforcement (ICE) 
agent met with HBUS about a money laundering investigation involving 
one of their clients in Mexico.^" That same month, in response to 
Mexican AML regulatory concerns, HBMX stopped accepting U.S. 
dollar deposits at any of its Mexican branches. 

In June 2009, ICE also informed the OCC that ICE was 
investigating possible money laundering aetivity involving banknote 
accounts at HBUS.^'^ ICE indicated that Mexican drug traffickers 
appeared to be using the black market peso exchange in New York to 
transfer funds through a particular Mexican financial institution, which 
then sent the funds through its U.S. correspondent account at HBUS.^'^ 
Dan Stipano, OCC Deputy Chief Counsel, explained the scheme to the 
OCC Examiner-In-Charge at HBUS as follows: 

“The scheme ... is similar to activity that we have seen at Union 
Bank, Wachovia, and Zions. Basically, the way it works is that 
drug money is physically hauled across the border into Mexico, 
then brought back into the United States through wire transfers 
from casas de cambio or small Mexican banks, or else smuggled 
across the border in armored cars, etc., before being deposited in 
US. Institutions. According to AUSA [Assistant U.S. Attorney] 
Weitz, most U.S. banks, recognizing the risks involved, have 
gotten out of this business, but HSBC NY is one of the last 
holdouts (although, interestingly, he said that HSBC-Mexico will 
no longer accept U.S. currency).”^''' 

What U.S. law enforcement officials had found was that, because drug 
traffickers in the United States were having difficulty finding a U.S. 
financial institution that would accept large amounts of cash, due to 
strict U.S. AML controls, many were instead transporting large volumes 
of U.S. dollars to Mexico, and depositing the dollars at Mexican 
financial institutions. The drug traffickers could then keep their deposits 
in U.S. dollars through the Mexican financial institution’s correspondent 
account at a U.S. bank, or exchange the dollars for pesos. The Mexican 


See 1/19/2009 email from HBUS Denise Reilly to HBUS Lesley Midzain, “HBMX 
Banknotes Business - HSBC Mexico Press Release and Q&A,” HSBC OCC 3633806-807. In a 
Subcommittee interview, HBUS AML Compliance officer Daniel Jack indicated that he attended 
the meeting, and the ICE agent expressed concern about possible money laundering through 
Consultoria, a former Mexican casa dc cambio that had converted into a bank. Mr. Jack told the 
Subcommittee that HBUS closed the Consultoria account six months later. Subcommittee 
interview of Daniel Jack (3/13/2012). 

See 9/29/2009 email from Dan Stipano to Sally Belshaw, at 3, OCC-PSI-00928758; 

6/28/2009 notes of telephone conversations, prepared by OCC Jim Vivennzio, OCC-PSI- 
00928759-761 (noting ICE agents had met with HBUS). [Sealed Exhibit.] 

See 6/28/2009 notes of telephone conversations, prepared by Jim Vivenzio, OCC-PSI- 
00928759. [Seated Exhibit.] 

See 9/29/2009 email from Dan Stipjuio to Sally Belshaw, at 3, OCC-PSI-00928758. 
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banks, casas de cambio, and other financial institutions that were the 
recipients of the cash typically shipped the physical dollars back to the 
United States for credit to their own U.S. dollar correspondent accounts 
at U.S. banks. HBUS’ awareness of the increasing U.S. law 
enforcement and regulatory interest in Mexico may have contributed to 
its decision to review and, ultimately, in May 2009, to increase its risk 
rating for Mexico. 

One key consequence of the higher risk rating for Mexico was that, 
under Group AML policy, HBUS was required to conduct enhanced 
monitoring of all of its Mexican clients. HBUS’ higher risk rating may 
have also put pressure on HSBC Group and other HSBC affiliates to 
boost their risk rating of Mexico as well. 

On June 1 8, 2009, Ms. Wright sent an email to Ms. Liddy asking 
her about the higher rating for Mexico. Ms. Wright wrote: 

“It has been drawn to my attention that in the latest US Country 
Risk Assessment Mexico has gone from a lower risk to high. I 
have received a number of queries from around the Group as to the 
reason for what they see as quite a dramatic change. 

Whilst I appreciate the risks involved in doing business with 
Mexico I would be grateful for some further and more detailed 
clarification as to why the change has been so dramatic. This will 
enable me to deal with a number of these queries.”^’^ 

In response, Ms. Liddy asked Mr. Kazmy, the AML officer 
responsible for compiling the countiy risk ratings, to write up the 
reasoning for the higher risk rating. He wrote: 

“A number of sources are reviewed, a majority of which are 
government and international agencies, such as World Bank, IMF, 
FATF, CFATF, BIS, Central Banks, Transparency International, 
etc. in order to determine risk levels .... The U.S. Department of 
State issues detailed annual assessment[s] of each country via the 
International Narcotics Control Strategy Report highlighting, inter 


6/18/2009 email from HSBC Susan Wright to HBUS Anne Liddy, “Group CRRT and US 
Country Risk Assessments,” OCC-PSl-00652829. See also 6/9/2009 email from HSBC David 
Bagley to HBMX Emilson Alonso, copies to HSBC Michael Geoghegan and others, “GMO 
Business reviews - LATAM,” HSBC OCC 8874895 (“I fully acknowledge the level of priority 
and focus that you and the team have given to these issues and the progress that has been made 
particularly in Mexico and have taken all of this into account. . . . The basis for the rating is 
however: The inherent AML risk in Mexico is still very high and [tjhere are not many other 
parts of the Group that have what is effectively a drugs war being conducted on the streets and 
also have the risk posed by potential sting and other operations by the US authorities. We have 
of course remediated our high risk accounts, but the historic weak account opening processes 
mean that we have overall lower levels of KYC across the customer base as a whole. . . . Happy 
to discuss further.”). 
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alia, money laundering, terrorist financing, corruption, and 
regulatory regime/oversight. An excerpt of such a report on 
Mexico ... is attached below. ... 

As a result of events occurring in Mexico during the past several 
months with respect to drug trafficking and money laundering, as 
well as the general unrest these developments have caused, we 
have downgrade[d] Mexico to ‘high’ risk. The deteriorated 
situation is recognized by the Government of Mexico as evidence 
through the involvement of agencies tasked with the Anti-Money 
Laundering and Counter Financing of Terrorist (AML/CFT) efforts 
towards drafting an AML/CFT National Strategy . . . expect[ed] to 
be issued sometime during 2009. ... Our rating is in conformity 
with the view of the U.S. law enforcement.”^' 

Ms. Liddy asked him how Mexico had been rated by the State 
Department in 2009, and whether that rating was worse than in the 
previous report, apparently not realizing that the State Department had 
consistently given Mexico its highest risk rating for years.^'^ Mr. 

Kazmy told Ms. Liddy, incorrectly, that the State Department INCSR 
report did not rate countries for risk, but also provided numerous details 
from the 2009 INCSR report indicating that money laundering and drug 
trafficking risks had increased.^'* 

In 2010, when the OCC sent HBUS a supervisory letter on AML 
deficiencies at the bank, the letter included criticism of its country rating 
system.^'® Under the heading, “Inadequate and Ineffective Procedures 
for Country Risk Ratings,” the OCC listed “significant flaws” with the 
scoring and risk rating methodology, as well as with HBUS’ decision 
not to monitor wire transfer activity for foreign financial institutions or 
other clients located in a standard or medium risk country, unless 
designated as an SCC client. The OCC wrote: 

“The bank’s country risk ratings for its PCM [Payment and Cash 
Management division] wire monitoring are critical, due to the 
bank’s unacceptable practice of assigning an overall risk rating to 
its non-SCC customers based solely on the risk rating that the bank 
has given the country where the customer is located. However, 
compounding this deficiency, the bank’s procedures for 


6/19/2009 email from HBUS Ali Kazmy to HBUS Anne Liddy, “Group CRRT and US 
Country Risk Assessments,” OCC-PSI-00652829. 

6/22/2009 email from HBUS Anne Liddy to HBUS Ali Kazmy, “Group CRRT and US 
Country Risk Assessments,” OCC-PSI-00652829. 

6/24/2009 email from HBUS Ali Kazmy to HBUS Anne Liddy, “Group CRRT and US 
Country Risk Assessments,” OCC-PSI-00652829. 

See 9/13/2010 OCC Supervisory Letter HSBC-20i0-22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA/AML') Examination - Program Violation (12 U.S.C. § 181 8(s); 12 C.F.R. § 
21.21),” OCC-PSI-00864335-365, at 18-20. [Sealed Exhibit j 
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determining the critical country risk ratings are inadequate and 
ineffective. 

To determine the country risk rating, the bank employs a point 
system based on fifteen factors. HBUS’ methodology appears 
straightforward ... [hjowever ... there are significant flaws in the 
implementation of the point system. . . . 

The bank’s failure to risk rate countries appropriately has a 
significant impact on HBUS’ BSA [Bank Secrecy Act] 
compliance, because customers’ risk ratings affect a number of 
variable requirements relating to due diligence for foreign 
correspondents. For example, these variable requirements include 
the frequency with which the hank conducts site visits (every 12 
months versus every 24 months) and the level of due diligence 
performed on beneficial owner and the senior management 
team.”''" 

When asked why past risk assessments of Mexico had been so low, 
Mr. Kazray told the Subcommittee that he was unable to explain the low 
ratings prior to 2009.'" He indicated that he first saw the 2006 FinCEN 
advisory on Mexico in 2009."' He also indicated that, if he had known 
what he later learned, he would have increased the risk rating earlier.'" 

C. HBMX’s History of Weak AML Safeguards 

In addition to the substantial money laundering and drug 
trafficking risks plaguing Mexico for a decade, HBMX itself had a 
history of weak AML controls and a poor compliance culture, which the 
HSBC Group worked for years to improve, with limited success. While 
HSBC Group officials in London were well aware of HBMX’s AML 
deficiencies and were immersed in an effort to strengthen them, it did 
not inform its worldwide affiliates, including HBUS, of the problems. 
From 2002 until recently, HBUS remained largely ignorant of the extent 
of HBMX’s AML and compliance deficiencies, despite providing 
HBMX with extensive correspondent services and giving it free access 
to the U.S. financial system. 


* Id. at 18, 20. See also 4/9/2010 memorandum from OCC legal counsel to OCC Washington 
Supervision Review Committee, “Order of Investigation - HSBC Bank USA, N.A., New York, 
NY,” OCC-PSl-00899482-485, at 3-4. The problems with HBUS’ country risk assessments 
extended beyond Mexico to other countries as well. Some of the countries that should have been 
rated as having a high risk of money laundering, but were instead rated standard or medium, 
included Antigua, the Bahamas, Cayman Islands, and Switzerland. See Feb. 2009 “Rating 
2009,” prepared by HBUS, HSBC-PSI-PROD-0096390-397. As a consequence, clients from 
those jurisdictions were treated as low risk, and wire transfers involving those countries were not 
routinely monitored by HBUS. 

Subcommittee interview of AU S. Kazmy (2/29/2012). 

Id. 

Id. 
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Non-Existent Compliance Function in 2002. In 2002, as part of 
its decisionmaking process to purchase Bital, HSBC Group reviewed 
Bital’s compliance function, found it wholly inadequate, and determined 
that a major effort would be needed for the new bank to meet Group 
standards. In an email to his colleagues, David Bagley, head of HSBC 
Group Compliance, put it this way: 

“Sandy [Flockhart, HSBC Mexico head,] acknowledges the 
importance of a robust compliance and money laundering function, 
which at present is virtually non-existent. . . . There is no 
recognizable compliance or money laundering function in Bital at 
present .... Sandy thinks it is important to look both at issues 
affecting Mexico City, but also closer to the border where there 
appears to be substantial cross-border flows of monies, including 
USD [U.S. dollars] in cash.”^^'' 

His comments followed a July 2002 audit performed by HSBC 
Group auditor prior to purchasing the Mexican bank providing a 
negative assessment of the bank’s compliance program. The HSBC 
internal audit report detailed a wide range of specific problems as well 
as broader AML deficiencies: 

• “FRBNY [Federal Reserve Bank of New York] review in 
12/2000 identified that 82 of the 248 accounts reviewed 
lacked full documentation. 

• A review ... of documentation of accounts booked at the 
target’s Cayman Islands branch ... found that 41% of the 
accounts reviewed (92 of 224 reviewed) lacked full client 
information. 37 files had no client information. ... 

• The [monitoring] system does not have any capacity to 
aggregate transaction activity for any period other than a 
given day . . . [and] does not identify high risk clients as such. 

• Private banking operations per se, are not identified. . . . 

• GFB [Grupo Financiero Bital] was involved in Operation 
Casa Blanca, a US government undercover sting operation 
undertaken to combat drug trafficking and money laundering 
activities in the US and Mexico. A former GFB account 
executive was found willing to establish fictitious accounts 
and moved illegal money through them. . . . GFB forfeited 
$3.1 [million] to the US government in 1998. ... 


7/10/2002 email from HSBC David Bagiey to HSBC John Root, with copies to Sandy 
Flockhart and Richard Bennett, “Bital,” HSBC OCC 8877797-798. 
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Conclusions 

The GFB Compliance effort is weak, and it appears that the 
target organization does not have a strong Compliance 
culture. 

• GFB does not, in reality, have a Compliance 
Department and one would have to be established and 
implemented .... 

• Reviews of account opening procedures and client 
documentation are sporadic, and the reviews normally 
do not encompass large populations of client files or 
activities. This effort needs to be strengthened. 

• Client transaction and activity monitoring is very 
limited. The reliance on account managers to identify 
and report unusual and suspicious transactions of their 
clients is a serious internal control shortcoming. ... 

High risk clients receive no special monitoring 
coverage. ... 

• Internal and external audit recommendations, and issues 
raised in regulatory reports do not receive proper 
respect and action. ... 

• Measures to promote and ensure staff discipline are not 
satisfactory. GFB’s Code of Conduct lacks content, 
detail and spirit. ... Appropriate staff related policies 
would have to be implemented immediately as part of 
the overall effort to install a dedicated Compliance and 
internal control culture throughout the organization.”^^^ 

Despite Bital’s weak compliance function, HSBC Group completed the 
purchase on November 22, 2002.^^* 

Five Years of Effort. Over the next five years, from 2002 to 
2007, HSBC Group initiated a number of efforts to strengthen Bital’s 
compliance and AML programs. While improvements were made, 
significant deficiencies persisted. 

In November 2002, immediately before purchasing Bital, John 
Root, a senior HSBC Group Compliance expert whom David Bagley 
asked to help work on AML issues at HBMX, visited the bank for a 
week and prepared a report cataloguing compliance issues and needed 
initiatives.^^^ Among other problems, his report noted the “lack of a 

July 2002 “Group Internal Audit: Due Diligence Review - Project High Noon,” HSBC audit 
of Bital, HSBC OCC 8873846 -852, 

See 1 1/29/2002 minutes of HSBC Holdings pic Board of Directors, section 109.3, HSBC- 
PSl-PROD-0198570. 

“Compliance Due Diligence Trip by John Root: Bital (Mexico City) - 4-8 Nov02,” prepared 
by HSBC John Root, HSBC OCC 8877802-807, See also 1 1/25/2002 email from HSBC John 
Root to HSBC Richard Bennett and HSBC Matthew King transmitting the report, HSBC OCC 
8877800 (“There is very little of what we would call a Compliance function. ... 1 did not 
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‘control culture’ at Bital.”^^* The report also described a meeting with 
one of Bital’s chief Mexican regulators who “was extremely critical” of 
the bank, repeating a number of times that controls “do not exist.”^^’ 

The report noted that “some of his harshest criticism” were directed at 
the Bital Legal Department “which he averred was ‘not guilty of bad 
faith but extreme mediocrity. According to the report, the Mexican 
regulator recommended “sweeping changes in management. 

The report noted that Bital had 83 correspondent relationships with 
other financial institutions, including 20 well known and reputable banks 
and some institutions that required additional KYC information.^^^ Mr. 
Root recommended obtaining that added KYC information or closing 
some of those accounts by March 2003. The report also noted that Bital 
had accounts lodged at its own Cayman branch office, which operated as 
an offshore shell entity and was managed by Bital employees in Mexico 
City. The report recommended undertaking an analysis of all of the 
correspondent banking deposits, “particularly those in the Cayman 
Islands,” by June 2003. It also recommended an analysis of “all existing 
Private Banking, with particular attention to USD [U.S. dollar] accounts 
and fund transfers to New York and the Cayman Islands.”^” In 
addition, it recommended developing a better electronic screening 
system for all account activity to identify suspicious transactions and a 
better process for investigating suspicious activity “without any tipping 
off.”^'^ 


In 2002 and 2003, HSBC Group appointed a new Compliance head 
for HBMX, Ramon Garcia Gibson, formerly AML Director at 
Citibank’s Mexican affiliate, Banamax; established an HBMX 
Compliance Department; hired additional staff; and installed a new 
monitoring system known as Customer Account Monitoring Program 
(CAMP) to detect suspicious activity. HBMX also hired a Money 
Laundering Deterrence (MLD) Director Carlos Rochin. Nevertheless, in 
2003, two inspection reports from Mexican authorities in January and 
August identified ongoing problems with the detection of suspicious 
transactions and the adequacy of the bank’s Money Laundering 


encounter anybody at Bital who I thought immediately capable of building a Compliance 
department."). 

“Compliance Due Diligence Trip by John Root: Bital (Mexico City) - 4-8 Nov02,” prepared 
by HSBC John Root, HSBC OCC 8877802-807, at 1. 

Id. 

Id. 

Id. at 2. 

Id. at 4. 

Id. at 6. Mr. Root told the Subcommittee that he became aware of the HBMX Cayman 
accounts at that time, but thought they were servicing Cayman residents. Subcommittee 
interview of John Root (4/26/2012). 

Id. at 4-5. 
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Deterrence (MLD) handbook, which HSBC was then in the process of 
revamping.^^^ 

In January 2004, HSBC Group’s Board of Directors met in Mexico 
to allow Board members to familiarize themselves with HBMX.^^'’ 
During the meeting, the Board’s Audit Committee reviewed HBMX’s 
ongoing internal control issues. The Audit Committee’s minutes stated 
that, “after being part of the Group for some 15 months,” HBMX had 
made “very significant progress in raising the standards of its controls. 

It will, however, probably take another two years to fully reach Group 
standards. From experience with other acquisitions this is not 
unexpected.”^” 

Five months later, in May 2004, HBMX’s internal auditors filed a 
report containing a number of criticisms of the bank’s compliance and 
AML efforts, indicating that much still needed to be done to cure its 
AML deficiencies.^^* Finding HBMX’s AML function to be operating 
“Below Standard,” the internal audit report stated; 

“HBMX has insufficient controls to detect money laundering 
transactions in all areas of the Group in a timely manner. The 
implementation of the CAMP system is in process yet it only 
includes the Bank’s transactions that have been registered in the 
Hogan system and fails to monitor those registered in other IT 
systems/HBMX subsidiaries. 

Direccion de Prevencion de Lavado de Dinero [Direction of 
Money Laundering Deterrence] has identified high-risk areas of 
money laundering transactions, which are not being monitored. 

The communication between LCOs [Local Compliance Officers] 
and Compliance does not enable the timely detection of the needs 
and weaknesses of the areas and subsidiaries. 

There are inadequate internal controls over the IT systems used to 
send information to the regulator on suspicious or relevant 
transactions to authorities. 


See 1/22 and 26/2004 email exchanges among HBMX Ramon Garcia and HSBC John Root, 
Susan Wright, and David Bagley, “MLD Regulatory Report," HSBC OCC 8873393-394 
1/30/2004 minutes of HSBC Holdings pic Board ofDirectors, section 04/7, HSBC-PSI- 
PROD-0198571-572. 

Id. at 572. 

May 2004 “Tnforme General de Audhoria HBMX GAQ 040026 Compliance-Money 
Laundering," prepared by HSBC Group’s internal audit (Auditoria Interna Del Groupo), HSBC 
OCC 8874376-381. 
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In our opinion, based upon the foregoing, the Direction of Money 
Laundering Deterrence is operating with a BELOW STANDARD 
level of Control Risk.”^^® 

Three months later, in August 2004, John Root, a senior HSBC 
Group Compliance officer, again visited HBMX to examine the status of 
its compliance and AML efforts, prepared a report, and sent it to senior 
officials at both HBMX and HSBC Compliance.^'’'’ The report indicated 
that, while substantial progress had been made over the past 1 8 months, 
AML deficiencies remained: 

“Senior management has made significant progress in introducing 
Group Compliance Policy and Standards in HBMX. The head of 
the Compliance department, Ramon Garcia Gibson, has set the 
foundation for an effective Compliance function. 

HBMX controls are much improved from the situation that existed 
12-18 months ago[.] However, Treasury back-office operations 
are a source of major regulatory concern, as is accurate and timely 
reporting to regulators. ... 

[0]ne of the five commissioners of the CNBV . . . states, Tn the 
business area [of HBMX], the resources have arrived. In the area 
of controls, the resources have not arrived.’ 

The CNBV gave us a ‘fact sheet’ in English with the following 
‘main concerns’ .... 

Anti-money laundering processes - Although 
improvements have been seen, some concerns remain 
regarding deficiencies in process (no system for unusual 
operations detection and a poor identification of public 
figures and high risk customers) and over control of 
Panama’s branch operations. ... 

In a wide-ranging diseussion, CNBV regulators commented that 
any outsourcing must be able to be audited from Mexico. They do 
not want outsourcing to jurisdictions with strong banking secrecy. 


The Trusts department is struggling to improve the poor condition 
of its files. Notwithstanding a senior manager’s optimism [‘Most 


™ Id. at 4 {emphasis in original). 

“HBMX Jul04 GHZ CMP Visit Report,” prepared by HSBC John Root, HSBC OCC 
8875567-575. See also 8/10/2004 email from HSBC John Root to HSBC David Bagley, Richard 
Bennett, Matthew King, David Leighton, and Susan Wright, and HBMX Sandy Flockhart and 
Ramon Garcia, transmitting the report, HSBC OCC 8875565-575. 
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of them, KYC is okay’ and ‘Most deficiencies are not related to 
KYC’], by far the greatest problem is missing KYC 
documentation. 

Of a total of 1 5,434 trusts, only 6,868 (41%) have completed 
documentation. 2,955 (20%) of trusts have no documentation at 
all. ... 

Around USD 16 billion arrive from the United States each year, 
mostly through the branch network. Money laundering risk is 
mitigated by several factors: (1) remittances are generally small 
(US200-300), according to two senior managers; (2) due diligence 
appears to be adequate on the AML procedures of US third-party 
money services businesses; and (3) CAMP Retail, a software 
programme to detect suspicious transactions, is scheduled to be 
installed in the branch network in NOV04. 

Recommendation: HBMX CMP [Compliance] should sample 
periodically remittances from the United States to determine if, in 
fact, remittances are generally small and in the ordinary course of 
business.”^''' 

In September 2004, the CNBV conducted an inspection of HSBC’s 
AML efforts and, contrary to the more positive tone described by 
HBMX internally, found them unsatisfactory. According to an internal 
HBMX compliance report, a CNBV report summarizing the 2004 
inspection criticized HBMX for: 

“not considering the risk exposure of the customer to determine the 
appropriate visitation process, not implementing procedures to 
update annually the files of high-risk customers and politically 
exposed persons, not defining internal criteria to determine 
customers’ risk exposure and a delay in formalizing the 
Communication and Control Committee ... responsible for sending 
SARs to the CNBV . . . and issuing money laundering deterrence 
policies.’’^’'^ 

The Communication and Control Committee (CCC Committee, also 
called the Money Laundering Deterrence or MLD Committee), which 
was mandated by a 2004 Mexican law, was intended to act as the bank’s 
primary internal unit to deter money laundering, so the delay in getting 
the committee underway was seen as a major AML deficiency. CNBV 


'■*' “HBMX Jul04 GHZ CMP Visit Report,” prepared by HSBC John Root, HSBC OCC 
8875567-575 (emphasis in original). 

“1 Q07 Compliance Report to the CIBM Audit Committee,” prepared by the HBMX 
Corporate, Investment Banking and Markets (Private) Audit Committee, HSBC OCC 8873286- 
287 (describing CNBV criticisms). 
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later fined HBMX more than $75,000 for the AML deficiencies 
identified in 2004, a fine which HBMX CIBM Compliance proposed 
contesting.^'*’ 

In early 2005, an internal HBMX whistleblower hotline disclosed 
that HBMX compliance officials had fabricated records of mandatory 
monthly meetings by the CCC Committee, and provided the false 
records to a local CNBV regulator.^'*'' An HBMX investigation 
determined that the false records consisted of attendance sheets and 
minutes for CCC meetings that should have taken place from July to 
December 2004, but did not.^'*’ They were fabricated by a junior 
employee at the direction of the HBMX Money Laundering Deterrence 
Director, Carlos Rochin, who then tendered his resignation and left the 
bank,’'*® Ramon Garcia, head of HBMX Compliance and the CCC 
Committee chair, received a written warning and was barred from 
receiving what would have been a substantial bonus for his work in 
2004, David Bagley, head of HSBC Group Compliance, wrote: 

“Overall RG [Ramon Garcia] has performed credibly, has worked 
very hard, and would otherwise be hard to replace. In the 
circumstances whilst we will need to keep his position under 
review at this stage I endorse the decision to retain his services 
given that his failure is limited to one of failing to supervise a very 
senior and trusted subordinate.”^'*’ 

Mr. Bagley’s internal report found that the HBMX AML staff was 
riven by dissension and resentment and may have “exact[ed] retribution” 
against the MLD director for the dismissal of a colleague. His report 
concluded that Mr. Garcia would have to rebuild a “shattered Money 
Laundering Section.”’'*® It also noted that CNBV “reiterated ... that, by 
comparison with other Mexican financial institutions, HBMX CMP 
[Compliance] appeared to be understaffed” and urged the bank to hire 
additional compliance personnel.'*'*’ 

In May 2005, John Root, a senior HSBC Group Compliance 
officer, made another visit to HBMX for several days to evaluate its 


Id. 

See 1/21/2005 email from HSBC David Bagley to HSBC Stephen Green and Richard 
Bennett, ‘‘Compliance Exception,” HSBC OCC 8873671. 

See 2/16/2005 email from HSBC David Bagley to HSBC Stephen Green and Richard 
Bennett, “Disclosure Line - HBMX CMP,” HSBC OCC 8873673; Feb. 2005 “HSBC 
Whistleblower Item 1 5 - HBMX: Investigation Report - Executive Summary,” prepared by 
Head of Group Audit Mexico {GAQ)(hereinafler “Whistleblower Report”), HSBC OCC 
8877877-885. 

Whistleblower Report at 5-6. 

2/16/2005 email from HSBC David Bagley to HSBC Stephen Green and Richard Bennett, 
“Disclosure Line - HBMX CMP,” HSBC OCC 8873673, 

Whistleblower Report at 7. 

Id. at 8. 
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compliance and AML efforts. As before, he later prepared a report and 
provided it to colleagues at HSBC Group and HBMX. In a separate 
email transmitting the report six weeks later, Mr. Root noted that the 
HBMX MLD director who resigned in January 2005, had not been 
replaced despite the passage of six months, and a new director needed to 
be appointed “as soon as possible in order to reorganize promptly a 
demoralized department and improve AML controls.”^^” The email 
noted the importance of “an independent, effective professional in the 
sensitive role of head of AML in Mexico.” He also observed that 
“[p]rojects are started but seldom completed, perhaps because of the 
many ministerial tasks that have accrued since the departure” of the 
MLD director. Mr. Root wrote: 

“As you of course know, the work has piled up in the Compliance 
department, and Ramon needs help with the backlog. It is true that 
we have increased staff in the department, but they are mostly 
entry-level analysts in need of direction. It is important we hire an 
MLCO [Money Laundering Control Officer] as quickly as 
possible, and perhaps also a sort of ‘operating officer’ for Ramon 
to enable him to bring the department up to Group Standards.”^^' 

Mr. Bagley forwarded the Root email to a colleague and commented that 
“until we have the right amount and mix of resources I cannot see [how] 
Ramon can make progress.”^^^ Later that year, Leopoldo R. Barroso 
was appointed MLD director for HMBX. 

In November 2005, Richard Bennett, then HSBC Group General 
Manager of Legal and Compliance and the person to whom David 
Bagley, head of HSBC Group Compliance, reported, paid a brief visit to 
HMBX.^^^ While there, he met with the bank’s CNBV regulators who 
raised a variety of compliance issues. According to an email sent by Mr. 
Bagley, the concerns included the nature of the HBMX accounts in the 
Cayman Islands; the referral of clients to Mexico by other HSBC 
affiliates, especially in France; and access to HBMX AML information 
from other countries, in particular the United Kingdom. 

In December 2005, HBMX’s internal audit group produced a 55- 
page report identifying a host of compliance and AML problems at the 
bank.^^^ It found that HBMX Compliance had improved, but still rated 


7/6/2005 email from HSBC John Root to HSBC David Bagley, Susan Wright, and David 
Leighton, “Visit to HBMX - 1 8 - 25 May 2005,” HSBC OCC 8876670-671 . 

Id. 

7/6/2005 email from HSBC David Bagley to HSBC Richard Bennett, “Visit to HBMX - 1 8 - 
25 May 2005,” HSBC OCC 8876670. 

See 1 1/15/2005 email from HSBC David Bagley to HSBC John Root, “HBMX - Compliance 
Is.sues,” HSBC OCC 8873264-266. 

See Dec. 2005 “Informe de Auditoria General: HBMX - Direccion de Compliance,” prepared 
by Mexico Group Audit, HSBC OCC 8876223-280. 
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it “Below Accepted Levels.” Major deficiencies included a failure to 
make full use of the new CAMP monitoring system, a failure to ensure 
its monitoring parameters met local requirements, inefficient monitoring 
processes which made detection and analysis of alerts difficult, failure to 
apply CAMP to foreign remittances and HBMX subsidiaries, inadequate 
see risk profiles, failure to complete a MLD work plan, and inadequate 
training.^ ^ 

The audit report was actually issued to HBMX in the spring of 
2006, and its findings were hotly contested by the HBMX MLD 
Director, Leopoldo Barroso.^^* He communicated his views to HSBC 
Group Compliance and complained that the bank would be required to 
forward the audit report to the CNBV, which would not only create a 
“misleading” impression, but also would contradict a recent presentation 
HBMX had made on how its AML controls had improved.^” John 
Root, senior HSBC Group Compliance officer, forwarded HBMX 
AML’s response to the audit findings to Susan Wright, head of AML 
and David Bagley, head of Compliance for HSBC Group,^^* Mr. Root 
commented: 

“[T]he audit points are being strongly rejected by HBMX AML. 
AML is also alleging errors of procedure .... Many, if not most, of 
the recommendations were ‘rejected’ or downgraded in importance 
by AML, which is certainly a heartfelt, but rather unusual formal 
reaction, to an audit. Most of just accept audit recommendations, 
whether perceived to be ‘fair’ or not, and proceed to implement 
them. 

I have let the dust settle a bit, as AML management clearly feel 
aggrieved, but closer monitoring is warranted on the specific audit 
recommendations. . . . 

[T]he one that most sticks out is apparent lack of monitoring of the 
(relatively few) AML staff in the field. This raises a ‘red flag’ in a 
place like Mexico, where the drug cartels are very powerful and 
ubiquitous. ... To aver, as the audit does, that ‘we do not really 
know what our man in the field is doing’ is a warning sign, if true. 
AML of course vigorously deny this.” 

Mr. Barroso’s email responding to the internal audit noted that HBMX 
MLD had also recently been audited by CNBV and expected to receive a 


Id., Executive Summary. 

See 5/17/2006 email from HSBC John Root to HSBC Susan Wright and David Bagley, 
“Internal Audit Reports,” attaching 5/8/2006 email from Leopoldo Barroso and a chart entitled, 
“Internal Audit Main Findings to MLD,” HSBC OCC 8874383-392. 

Id.392 
Id. 383. 
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satisfactory rating, with only two requirements for improvements and 
several recommendations.^^^ 

HSBX’s internal audit group continued to conduct compliance and 
AML examinations of HBMX offices and branches. In September 2006, 
for example, it examined operations at four HBMX district offices, each 
with more than 15 branches, located in the cities of Puebla, Morelos, and 
Juarez.^*” All four district offices were found to be operating “Below 
Standard” with respect to their risk controls, which was the same low 
rating each had received the prior year. For example, all four were 
found to have KYC and “file integrity” issues that “failed to comply 
with Group policies.”^*’' One district office was found to lack 
knowledge of the procedures to identify Special Category Clients 
(SCCs).^*^ All four district offices had five or six repeat 
recommendations from prior audits that had yet to be resolved. All four 
summary reports were circulated to HSBC Group Compliance senior 
officials.^*^ 

In October 2006, HBMX’s Compliance head Ramon Garcia 
informed HSBC Group Compliance that HBMX’s Money Laundering 
Deterrence (MLDJ Committee had adopted a policy that would require 
HBMX to consider closure of an account after four Suspicious Activity 
Reports (SARs) had been filed with respect to an account’s activity.^^"* 

In response, John Root, senior HSBC Group Compliance officer, 
responded: “4 SARs seems awfully indulgent, even by local standards. 
At any rate, it is against Group policy, as Susan [Wright] points out, so 
you will need to seek an official dispensation.”^ A “dispensation” was 
needed, because HSBC Group Policy No. GPP25 required accounts to 
be closed after two SARs were filed. The next day, LIBMX informed 
HSBC Group Compliance that, rather than seek an official exception, it 


See September 2006 “Group Audit Mexico Audit Report Summary Schedule: GHQ 
Reportabie Audits,” for PFS Puebla ZOl C31 District Office (with 17branches), PFS Puebla ZOl 
C23 District Office (17 branches), PFS Morelos ZOl A20 District Office (19 branches and 1 
Module), and PFS Ciudad Juarez Z03 B02 District Office (21 branches and 1 custom module). 


HSBC OCC 8876717-720. 

Id. 

Id. at HSBC OCC 88767 1 8. 

See 10/9/2006 email from HSBC David Bagiev to HSBC John Root, forwarding message 
from HSBC Matthew King, “HBMX B/S and U Audit Report Summary for SEP06,” HSBC 
OCC 8876715 (transmitting audit report summaries). See also August 2005 “General Audit 
Report: HBMX - PFS Torreon District (Z04 COl),” prepared by Group Audit Mexico, HSBC 
OCC 8876677-680 (finding a district office with 22 branches operating “Below Standard,” with 
“[n]o significant progress . . . since the previous audits and 1 1 repeat recommendations”). 

^ See 10/17-18/2006 email exchanges among HBMX Ramon Garcia and Leopoldo Barroso 
and HSBC John Root, David Bagley, Susan Wright, and Emma Lawson, “2Q06 HBMX 
Compliance Report,” and “Compliance with GPP 25,” HSBC OCC 8876711-713. 

10/17/2006 email from HSBC John Root to HBMX Ramon Garcia, with copies to HSBC 
David Bagley and Susan Wright, “2Q06 HBMX Compliance Report,” HSBC OCC 8876713. 
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had decided to adopt the Group policy and would consider account 
closure after two SARS were filed, rather than four.^** 

Unimed and Ye Gon Scandal. In 2007, HBMX learned that one 
of its longstanding clients was accused of involvement with illegal drug 
trafficking. On March 15, 2007, in a joint effort with the U.S. Drug 
Enforcement Administration (DEA), the Mexican Government seized 
over $205 million in U.S. dollars, $17 million in Mexican pesos, 
firearms, and international wire transfer records from the residence of a 
wealthy Chinese-Mexican citizen, Zhenly Ye Gon.^®^ The cash, which 
had been hidden in a secret locked room in the residence,^®* was 
described as the largest cash seizure in a drug-related case in history.^®** 

Mr. Ye Gon, a prominent businessman, was the owner of three 
Mexican corporations involved in the pharmaceutical field, Unimed 
Pharm Chem Mexico S.A. de C.V.; Constructora e Inmobiliaria Federal 
S.A. de C.V.; and Unimed Pharmaceutical, S.A. de C.V.^’® He was 
accused of using his corporations to import, manufacture, and sell 
chemicals to drug cartels for use in manufacturing methamphetamine, an 
illegal drug sold in the United States.^’’ He was also accused of 
displaying “significant unexplained wealth,” despite reporting no gross 
income for his companies for the years 2005, 2006, and 2007.™ In June 


See 10/17-18/2006 email exchanges among tlBMX Ramon Garcia and Leopoldo Barroso 
and HSBC John Root, David Dagley, Susan Wright, and Emma Lawson, “Compliance with GPP 
25,” HSBC OCC 8876711-713. GPP 25 stated: “Where the customer is the subject of more 
than one validated suspicious transaction/activity report, then serious consideration should be 
given to closure of the relevant accounl/s and any other connected accounts.” Despite adopting 
the Group policy generally to close an account after two SARs, HBMX apparently did a poor job 
of implementation, In November 2007, Mr. Garcia revealed at an HSBC conference that HBMX 
had “numerous cases of accounts with multiple SARs (16 in one case!!) in Mexico that remain 
open.” In response, Ms. Wright asked Warren Learning to “follow up with Ramon” to 
strengthen compliance with the Group policy on closing accounts with SARs. 1 1/16/2007 email 
from HSBC Susan Wright to HSBC Warren Learning, copy to David Bagley, “Mexico,” HSBC 
OCC 8875423. 

See In re Zhenly Ye Gon . Case No. l:07-cr-00181“EGS (USDC DC), Complaint for Arrest 
with a View Towards Extradition (9/15/2008) (hereinafter “Ye Gon Extradition Complaint”), at 
13; “Mexican Fugitive and Co-Conspirator Arrested on U.S. Drug, Money Laundering Charges,” 
U.S. Drug Enforcement Administration press release (7/24/2007), 
http://www .justice. gov/dea/pubs/state.s/newsrel/wdo072407,html. 

See Yc Gon Extradition Complaint at 13. 

See, e.g., “Mexico seizes $205.6M from luxury house,” Associated Press, Joan Grille 
(3/22/2007). 

See Ye Gon Extradition Complaint at 6. 

Id. at 6-15; “Mexican Fugitive and Co-Conspirator Arrested on U.S. Drug, Money 
Laundering Charges,” U.S. Drug Enforcement Administration press release (7/24/2007), 
http;//wavw.justice.gov/dea/pubs/states/newsrel/wdo072407.htmi. See also DEA testimony, 
“Violence Along the Southwest Border,” (3^4^009), at 8, before the U.S. House 
Appropriations Subcommittee on Commerce, Justice, Science and Related Agencies (describing 
seizures from a “pharmaceutical company CEO who facilitated the importation of metric-ton 
quantities of ephedrine for the Sinaloa cartel’s methamphetamine-manufacturing operations”). 

^ ^ Ye Gon Extradition Complaint at 12. The extradition complaint stated that in addition to 
transferring millions of dollars in U.S. currency abroad, Mr. Ye Gon engaged in a “lavish 
lifestyle, which included purchasing expensive cars and jewelry, and gambling (and losing a net 
sum of approximately $125 million U.S. doUm^) in Las Vegas, Nevada.” Id. at 12-13. 
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2007, Mr. Ye Gon was indicted in Mexico on drug, firearm, and money 
laundering charges, but could not be located.™ In July 2007, he was 
arrested in the United States, imprisoned, and indicted by U.S. Federal 
prosecutors for aiding and abetting the manufacture of 
methamphetamine.^’'^ Two years later, in 2009, U.S. prosecutors 
dismissed the charges, after a witness recanted key testimony Mr. Ye 
Gon has remained imprisoned, however, subject to proceedings to 
extradite him to Mexico to stand trial.^’® Since his arrest, he has 
continually proclaimed his innocence.™ 

Mr. Ye Gon and his corporations were longtime clients ofHBMX 
as well as other banks and casas de cambio in Mexico. One news article 
reported that the Mexican Ministry of Finance and Public Credit (SHCP) 
had determined that, from 2003 to 2006, Mr. Ye Gon and his companies 
moved $90 million through 450 transactions involving four major 
Mexican banks, HBMX, Banamex, BBV Bancomer, and Banco 
Mercantil Del Norte, and multiple currency exchanges, including Casa 
De Cambio Puebla and Consultoria Intemacional Casa De Cambio.^’® 

The March 2007 seizure of cash and weapons from Mr. Ye Gon’s 
residence triggered an intense review of his accounts by HBMX and 
HSBC Group. ™ According to internal HBMX documents, the Unimed 
accounts were opened by Bital, retained by HBMX, and housed in 
HMBX’s Personal Financial Services (PFS) division, even though the 
official clients were corporations and should not have been serviced by 
the PFS division.^®“ The accounts were not designated as high risk, 
despite unusual transactions that had attracted bank attention several 
times from 2003 to 2007.^*' John Root told the Subcommittee that 


Ye Gon Extradition Complaint at 3-6 (describing Mexican Criminal Case No. 25/2007); 
“Mexican Fugitive and Co-Conspirator Arrested on U.S. Drug. Money Laundering Charges,” 
U.S. Drug Enforcement Administration press release (7/24/2007), 
http://www.justice.gov/dea/pubs/states/newsrel/wdo072407.html. 

f'* In re Zhenlv Ye Gon . Case No. 1 :07-cr-00181-EGS (USDC DC), Indictment (7/26/2007). 

See id., Order (8/28/2009); “Mexico, the DEA, and the Case of Zhenii Ye Gon,” Washington 
Post . Jorge Carrasco (10/29/2008), http://www.washingtonpost.com/wp-dyn/content/article/ 
2008/1 0/28/AR2008 1 0280 1 364_pf.html. 

See Ye Gon Extradition Complaint. 

See, e.g., “Mexico, the DEA, and the Case of Zhenii Yc Gon,” Washington Post . Jorge 
Carrasco (10/29/2008), http://www.washing1onpost.com/wp- 

(“Ye Gon reported path to 

iaunder’ money”), El Universal . Francisco Gomez, 

http;//www.elumversal.com.mx/nacion/I55016.htmi, cited in 7/18/2008 Report of Findings 
(Update) for Consultoria Inemacional Banco, prepared by 1 IBUS Financial Intelligence Unit, 
HSBC OCC 1822420-434, at 422. 

See 4/19-20/2007 email exchanges among HBMX Paul Thurston, Sandy Flockhart, Graham 
Tomson, Ramon Garcia, and others and HSBC David Bagley, Matthew King, and others, 
“Management Letter: HBMX-[subject redacted by HSBC]," HSBC OCC 8875010-014. 

See 3/20/2007 email from HBMX Leopoldo Bairoso to HSBC Paul Thurston, and others, 
“[subject redacted by HSBC],” HSBC OCC 8874315-16. 

’ See, e.g., 3/1 6/2007 email from HBMX Leopoldo Bairoso to HSBC David Leighton and 
HBMX Ramon Garcia, “[subject redacted by HSBC],” HSBC OCC 8874317-318; 4/20/2007 


dyn/content/article/2008/1 0/28/AR2008102801 364_pf.html. 

^ ^ 10/13/2007 “Reportan ruta de Ye Gon para ‘blanquear’ dinero” 
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during the 2003-2004 timeframe, the Unimed account had attracted the 
attention of HBMX regulators, and Susan Wright had instructed HBMX 
to terminate the relationship altogether.^®^ He said that the HSBC Group 
did not realize the account was still open, until he and Ms. Wright saw 
the press articles regarding Unimed in 2007. 

When the scandal broke, Paul Thurston, who had been appointed 
in February as HSBC Mexico CEO after the former head, Alexander 
Flockhart, was promoted, wrote: “This is a very serious, and high 
profile, case which has potential reputational damage to the HSBC 
Group, and must be given the highest priority 

Mr. Thurston personally oversaw an extensive review of the 
accounts and FIMBX’s AML controls.^*'' When the head of HSBC Latin 
American internal audits, Graham Thomson, was asked to summarize 
the AML deficiencies that contributed to the bank’s maintaining such a 
high risk account, Mr. Thomson wrote in part: 

“The main systemic weaknesses in HBMX, which I believe remain 

outstanding, are as follows: 

KYC as identified in branch and continuous audit reports. 

The lack of adequate documentation and filing systems which 

remain from the former Bital days .... 

Lack of a compliance culture 

His criticisms about the lack of a compliance culture and poor KYC 
documentation echoed the criticisms made five years earlier, when 
HSBC first purchased Bital. 

HBMX’s internal review determined that, in 2005 and several 
times thereafter, concerns about suspicious activity involving the 
Unimed account had been brought to the attention of the HBMX Money 
Laundering Deterrence Communication and Control Committee (CCC 
Committee). The CCC Committee apparently initially advocated 


email from HSBC Matthew King to HSBC Michael Geoghegan, and copy to David Bagley, 
“Managerial Letter: HBMX-[redacted by HSBC],” HSBC OCC 8874762. 

Subcommittee interview of John Root (4/26/2012). 

3/20/2007 email from HMBX Paul Thurston to Leopoldo Barroso, Sandy Flockhart, and 
others, [subject redacted by HSBC], HSBC OCC 8874316-317. 

See, e.g,, March and April 2007 email exchanges involving HBMX Paul Thurston and 
multiple HBMX and HSBC colleagues, “[subject redacted by HSBC],” HSBC OCC 8874315- 
326 and HSBC OCC 8875010-014. 

4/2/2007 email from HBMX Graham Thomson to HSBC Matthew King and others, “Group 
Audit Committee - APR07,” HSBC OCC 8874328-329. 

See, e.g,, 4/20/2007 email from HBMX Graham Thomson to HSBC Matthew King and 
others, “Management Letter: HBMX-[subject redacted by HSBC],” HSBC OCC 8875010-011; 
3/20/2007 email from HBMX Leopoldo Barroso to HBMX Paul Thurston and others, “[subject 
redacted by HSBC],” HSBC OCC 8874315-16; 3/16/2007 email from HBMX Leopoldo Banoso 
to HSBC David Leighton and HBMX Ramon Garcia, “[subject redacted by HSBC],” HSBC 
OCC 8874317-318. 
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closing the account, but then relented, in part because the Personal 
Financial Services (PFS) division where the account was located had, as 
one HBMX email put it, “argued that the client was fine, properly 
documented, and known by the business.”^*’ The key PFS official who 
vouched for the client apparently later claimed he’d been “lied to” by 
other bank personnel.^** The review also uncovered falsified “KYC visit 
reports,” documenting site visits to the client which had not actually 
taken place.^*^ In addition, the review criticized poor analysis of the 
alerts which had spotted the “unusual” account activity. One email 
noted that other Mexican banks with Unimed accounts “had not reported 
the customer to the authorities, despite hosting apparently unusual 
transactions similar in nature to those recorded by FIB MX. 

As a result of the Unimed scandal, Mr. Thurston developed seven 
action items to strengthen HBMX’s AML and KYC efforts.^*' They 
included reviewing the personnel assigned to the HBMX CCC 
committee and reminding CCC members of the need to take “an 
independent view” and to be “prepared to challenge their colleagues”; 
ensuring CCC minutes clearly identified the decisions taken; revamping 
KYC “analysis, assessment and reporting procedures” to ensure “higher 
risk cases are brought to senior management attention”; providing 
additional training on KYC assessment reports; transferring all 
corporations out of the Personal Financial Services division; and 
dismissing all branch staff involved with completing the falsified KYC 
reports.^” Mr. Thurston also described the need to bring individual 
initiatives to improve KYC procedures, account opening and file 
maintenance into “one coherent programme” with “appropriate 
emphasis.”^^'' In addition, he described holding a special CCC 
Committee meeting within a week to review cases with similar patterns 


^’*’ 3 / 1 6/2007 email from HBMX Leopoldo Barroso to HSBC David Leighton and HBMX 
Ramon Garcia, “[subject redacted by HSBC],” HSBC OCC 88743 1 7-3 1 8. 

4/20/2007 email from HBMX Graham Thomson to HSBC Matthew King and others, 
“Management Letter: HBMX-[subject redacted by HSBC],” HSBC OCC 8875010-011, See also 
4/18/2007 email from HSBC Matthew King to HBMX Graham Tomson, “Managerial Letter; 
HBMX-[redacted by HSBC],” HSBC OCC 8875013-014. 

See 4/20/2007 email from HBMX Graham Thomson to HSBC Matthew King and others, 
“Management Letter: HBMX-[subject redacted by HSBC],” HSBC OCC 8875010-01 1 ; 
4/18/2007 email from HSBC Matthew King to HBMX Graham Tomson, “Managerial Letter: 
HBMX-[redacted by HSBC],” HSBC OCC 8875013-014; Subcommittee interview of Paul 
Thurston {5/1/2012). 

See 4/20/2007 email from HBMX Graham Thomson to HSBC Matthew King and others, 
“Management Letter: HBMX-[subject redacted by HSBC],” HSBC OCC 8875010-01 1 ; 
4/18/2007 email from HSBC Matthew King to HBMX Graham Tomson, “Managerial Letter: 
HBMX-[redacted by HSBC],” HSBC OCC 8875013-014. 

^^*4/20/2007 email from HBMX Graham Thomson to HSBC Matthew King and others, 
“Management Letter: HBMX-fsubject redacted by HSBC],” HSBC OCC 8875010-013. 

See 4/1 9/2007 email from Paul Thurston to multiple HBMX colleagues, “[subject redacted by 
HSBC],” HSBC OCC 887501 1-014. 

Id. at HSBC OCC 8875012. 
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and other high risk cases.^^^ He also directed the internal audit group to 
conduct a review of HBMX’s AML and CCC processes.^’* 

The most senior levels of HSBC Group were kept Informed about 
the case. On April 20, 2007, for example, Matthew King, head of HSBC 
Group Audits, sent an email to HSBC Group CEO Michael Geoghegan 
with this update: 

“I am told the Mexican authorities are taking a relatively benign 
attitude to our involvement with this customer, which is fortunate 
because the review has revealed a number of weaknesses. A series 
of inaccurate, and possibly fabricated, visit reports seem to have 
been filed by the business which resisted any reporting of 
suspicions a number of times. For its part, the Money laundering 
Department failed to act as a proper check and balance. I have 
suggested a thorough review of processes within the 
Money laundering Department and of the Money laundering 
Committee to ensure they are robust. . . . There are also a number 
of personnel decisions to be taken.”^^^ 

Neither HBMX nor HSBC Group informed HBUS about the case.^^* 

The Unimed scandal broke nearly five years after HSBC first 
began working to strengthen HBMX’s AML controls and create a 
compliance culture. It showed that, while progress had been made, 
HBMX still had multiple AML deficiencies and a poor compliance 
culture. 

2007 AML Efforts. For the rest of 2007, HSBC Group 
Compliance devoted attention and resources to strengthening AML 
controls at HBMX, with limited success. 

One step taken was to task the new HBMX Chief Operating 
Officer, John Rendall, with overseeing HBMX’s KYC remediation 
effort for existing client files, an effort mandated by CNBV authorities 
but far behind schedule.^^’ Mexican regulators had given Mexican 
banks until 2007, to update the KYC information in all customer files; 


Id. at HSBC OCC 8875012-13. HBMX did not identify any other corporate clients with a 
similar profile. Subcommittee interview of Paul Thurston (5/1/2012). 

This review produced an audit report in December 2007, discussed below. See Dec. 2007 
“General & Transactional Banking Audit: HBMX -Money Laundering Deterrence,” prepared 
bv Group Audit Mexico, HSBC OCC 8874802-810. 

^ ’ 4/20/2007 email from HSBC Matthew King to HSBC Michael Geoghegan, and copv to David 
Bagley, “Managerial Letter: HBMX-[redacted by HSBC],” HSBC OCC 8874762. 

Subcommittee interview of Paul Thurston (5/1/2012). 

See, e.g., 2/27/2008 email from HBMX Paul Thurston to HSBC Michael Geoghegan and 
others, “CNBV/FIU Update,” HSBC-PSI-PROD-0198510-51 1. 
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HBMX had obtained an extension until May 2008, but expected to be 
hard pressed to meet the new deadline.^™ 

In June 2007, David Bagley, HSBC Group Compliance head, 
visited HBMX for several days, met with CNBV officials, and circulated 
a report on the outstanding compliance and AML issues. In an email 
transmitting his report, Mr. Bagley wrote: 

“[T]here do appear to be a number of issues to be resolved, 
particularly those relating to accurate ongoing account opening, 
prompt effective and complete remediation in accordance with 
CNBV requirements for existing accounts, and completion of the 
recommended enhancements to the working of the MLD 
committee. . . . [W]e will need on an ongoing basis to consider 
the nature and extent of the resources currently available in CMP 
[Compliance]. ... I suspect we are already stretched given the 
apparent growth that has already, or is intended to take place in 
this area which appears to be growth of both volume and 
complexity.”^'” 

His five-page report detailed a number of compliance and AML 
problems.^'’^ First was HBMX’s anticipated failure to meet a Mexican 
regulatory deadline for reviewing the KYC information for all existing 
accounts to ensure compliance with regulatory requirements. The report 
noted: “There appeared to be differing opinions as to how many 
accounts were affected, how many accounts were outstanding and 
therefore no real tracking of the progress being made.” The report 
recommended reaching a consensus on the method for tracking accounts 
and completing the task. The report also expressed concern about KYC 
weaknesses in opening new accounts. It noted: “If we are opening new 
accounts badly it will only add to the remediation exercise required by 
CNBV .... Accurate and complete account opening is a key AML 
control, particularly in emerging markets.” A third key issue was 
“confusion as to the stated aims and purpose of the MLD Committee.” 

A fourth was that “the CAMP monitoring system produces significant 
numbers of ‘false’ alerts. This is a feature of all AML monitoring 


See 7/27/2007 minutes of LAM Regional Audit Committee, HSBC OCC 8875086-0S8, at 3 
(“CNBV has granted a I -year extension to MAYOR for HBMX to regularize customer 
identification files for account[s] opened or contracts signed before MAY04.”); 12/2007 audit of 
“HBMX -Money Laundering Deterrence (MLD),” No. HBMX GAQ 070086, prepared by HSBC 
Group Audit, Executive Summary, HSBC OCC 8876347 (“HBMI has been given an extension 
by the Regulator from May 07 to May 08 to ensure that a portion of the client files (known as the 
UBA project - about 1 .8m customers) are completed.”), 

6/27/2007 email from HSBC David Bagley to HBMX Paul Thurston and others, “Visit 
Report,” HSBC OCC 8874967-968. Mr. Bagley visited Mexico and Panama from June 1 1 to 
June 14, 2007. See 7/27/2007 Minutes of LAM Regional Audit Committee, HSBC OCC 
8875086-090, at 3. 

June 2007 “Summary of Compliance Issues - Mexico,” report prepared by David Bagley, 
HSBC OCC 8874970-974. 
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systems. Having said this, steps are being taken across the Group to 
seek to minimize this,” and recommended that similar steps be taken in 
Mexico. A fifth concern was that the compliance team was “lightly 
resourced.” 

The report also discussed a “cordial” meeting held with CNBV 
regulators. It said that the regulators were “overall extremely positive 
about the bank” but also “had a fairly lengthy list of issues,” most of 
which focused on compliance matters other than AML issues.^®^ Paul 
Thurston, head of HSBC Mexico, thanked Mr. Bagley for the 
“constructive report.” He wrote: 

“I agree with your comment that we need to review the role and 
resources in the Compliance function. ... For all Ramon’s 
strengths, I have equally seen weaknesses in addressing key issues 
... and in my view the jury is out on his ability to do all that we 
need in HBMX, let alone try to oversee other countries in the 
region. . . . [W]e should review between the three of us in a few 
month’s time, when we see what progress is being made.”^'*'’ 

The very next month, July 2007, John Root, a senior HSBC Group 
Compliance officer, sent a blistering email to Ramon Garcia 
condemning HBMX’s CCC Committee for “rubber-stamping 
unacceptable risks”; 

“A number of items Jump out from your most recently weekly 
report (02JLfL-06JUL) but everything pales in comparison with the 
ML items on page 4. It looks like the business is still retaining 
unacceptable risks and the AML committee is going along after 
some initial hemming and hawing. I am quite concerned that the 
committee is not functioning properly. Alarmed, even. I am close 
to picking up the phone to your CEO. 

[Redacted by HSBC] looks like another [Unimed^°^] type of 
situation - what on earth is an ‘assumption responsibility letter’ 
and how would it protect the bank if the client is a money 
launderer? Please note that you can dress up the USD 10 million to 
be paid ... to the US authorities as an ‘economic penalty’ if you 
wish but a fine is a fine is a fine, and a hefty one at that. What is 
this, the School of Low Expectations Banking? (“We didn’t go to 
jail! We merely signed a settlement with the Feds for $ 10 
million!”) ... 


Id. at 3. 

6/29/2007 email from HBMX Paul Thurston to HSBC David Bagley and John Rendall, “Visit 
Report,” HSBC OCC 8874965. 

Although the client name was redacted from the document by HSBC, John Root confirmed 
that Mr. Thurston was referring to Unimed. Subcommittee interview of John Root (4/26/2012). 
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So, [Unimed^®*] is strike one. [Redacted by HSBC] is strike two. 
Let’s now look at strike three. (I hope you like baseball.) 

The same person who is giving the sancrosanct ‘assumption 
responsibility letter’ for [Redacted by HSBC] ... is being asked by 
the CEO to explain why he retained the [Casa De Cambio 
Puebla®®’] relationship after USCl 1 million was seized by the 
authority in [Puebla®®*] account with Wachovia in Miami. What?! 
The business was okay with this? 

The AML Committee just can’t keep rubber-stamping 
unacceptable risks merely because someone on the business side 
writes a nice letter. It needs to take a firmer stand. It needs some 
cojones. We have seen this movie before, and it ends badly.”®®® 

Mr. Garcia responded that he was escalating the two cases 
involving high risk clients as part of a revised AML procedure in the 
CCC Committee.®'® He explained that Mexican law essentially required 
the CCC committee to give great weight to the opinion of the business 
side of the bank, because “they are the ones that really know the 
customer.” He said that he had escalated the cases to the HBMX CEO, 
because MLD had “a different opinion” from the business “about 
reporting the case to authorities.” Essentially, he said that the final 
decision belonged to the HBMX CEO, rather than the CCC Committee. 

The next week, Paul Thurston, HSBC Mexico CEO, supported the 
CCC Committee’s recommendation to close one of the accounts, but not 
the other. He supported closing the account of Casa de Cambio Puebla, 
which had been a client for more than 20 years, but whose funds at 
Wachovia Bank had been seized by the U.S. Justice Department and 
Drug Enforcement Administration (DEA).®' ' Mr. Thurston cautioned 
John Rendall, the HBMX Chief Operating Officer, to alert CNBV and to 
ensure CNBV had “no objection.” Mr. Rendall also suggested 
alerting their U.S. counterparts since HBUS had the same relationship 
with the client.®'® The second account involved a U.S. money services 

306 jjj 

Although the client name was redacted from the document by H.SBC, the reference to a 
seizure of $1 1 million from Wachovia Bank in Miami indicates that the client is Casa de Cambio 
Puebla. See discussion below. 

Id. 

3i)q - 7 / 1 - 7/2007 email from HSBC John Root to HBMX Ramon Garcia, with copies to Susan 
Wright, David Bagiev, and Warren Learning, “Weekly Compliance Report 02JUL-06JUL07,” 
HSBC OCC 8875925-927. 

7/1 8/2007 email from Ramon Garcia to HBC David Bagley, “Weekly Compliance Report 
02JUL-06JUL07,” HSBC OCC 8875925. 

^ ’ See July 2007 email exchanges among HBMX Paul Thurston, John Rendall, Ramon Garcia, 
and others, “[subject redacted by HSBC], HSBC OCC 8875132-135. 

^‘Md.at 132. 

3'^ 14 
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business, Sigue Corporation, which specialized in remitting funds from 
the United States to Mexico and Latin America. Mr. Thurston, on the 
advice of Mr. Rendall and the commercial banking division, kept that 
account open.^’^* 

Later in July, the HSBC Latin American (LAM) Regional Audit 
Committee held a meeting in Mexico.^'^ Participants included HSBC 
Group Compliance officials Brian Robertson, David Bagley, and 
Matthew King; LAM/HBMX officials Paul Thurston, Emilson Alonso, 
and Graham Thomson; HBMX Compliance head Ramon Garcia; and 
others from HSBC affiliates throughout Latin America. Mr. Thomson, 
head of LAM Internal Audit, discussed risk and compliance issues in 
several countries, and noted that Regional CEOs were now required to 
“take disciplinary action should a manager record 2 consecutive Below 
Standard control risk assessments or record significant repeat 
recommendations.”^'* With respect to Mexico, Mr. Thomson noted that 
although 96% of HBMX electronic records reportedly met regulatory 
requirements, there was a “high level of exceptions and variance 
between the paper and electronic records” which would require “a large 
rectification effort” to meet the regulatory deadline of May 2008.'"’ He 
also noted that branch offices were not sufficiently familiar with SCC 
requirements, and criticized the CCC Committee for failing to followup 
on instructions to close client accounts. Mr. Thurston noted that the 
CCC Committee was introducing an escalation process to senior 
management to resolve disputes over closing accounts.'"* Ramon 
Garcia also reported that automation problems were causing delays in 
the issuance of Suspicious Activity Reports (SARs), but that interim 
manual reviews had not detected activity requiring any SARs to be 
filed."^ He also described a new pilot project at 94 HBMX branches to 
centralize management and control of account documentation using 
electronically imaged documents. 


CNBV Escalates Concerns. Two months later, in October 2007, 
the CNBV asked to meet with Paul Thurston, the HSBC Mexico CEO, 
to express ongoing concerns about HBMX’s compliance and AML 


See 2/4/2008 email from HBMX John Rendall to HBMX Paul Thurston, “[redacted by 
HSBC],” HSBC OCC 8875139-141 and HSBC OCC 8875020-021. Six months later, in January 
2008, Sigue Corporation entered into a deferred prosecution agreement with the U.S. Justice 
Department, admitting that some of its agents had been laundering drug proceeds. See United 
States V. Sigue Corn, and Sigue LLC , Case No. 4:08CR54 (USDC EDMO), Deferred 
Prosecution Agreement Factual Statement (1/28/2008). HBMX’s relationship with Sigue 
Corporation is discussed further below. 

See 7/27/2007 Minutes of LAM Regional Audit Committee, HSBC OCC 8875086-090. 

Id. at 2. 

/’’'*■ 

Id. Mr. Thurston explained that if compliance and business personnel disagreed over closing 
an account, the dispute would be escalated to the HBMX COO, and then to the CEO. In addition 
if a business wanted to close an account, a higher ranking Executive Director would have to 
make the decision. Subcommittee interview ofPaul Thurston (5/1/201 2). 

Id. at 3. 
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efforts. Mr. Thurston summarized the meeting in an email to the HSBC 
Group CEO Michael Geoghegan.^^® He wrote: 

“At their request, I met today with the Head of Banking 
Supervision, and the Supervisor for HSBC, from our regulator, the 
CNBV, following their on site examination of various aspects of 
our business, including cards, money laundering, and treasury 
operations. ... 

They walked me through a presentation pack which firstly set out 
specific points . . . but then moved on to more general concerns of 
the CNBV with HSBC in Mexico. These centered on; 

- weaknesses in internal controls ... slow progress in tackling 
KYC data problems and anti money laundering procedures. 

- corporate culture, where they comment that ... HSBC has driven 
growth in credit products and launched new products without 
adequate controls. . . . 

They also expressed concerns at senior management having dual 
responsibilities for Mexico and the region, stating that ‘there are 
many concerns on how management will be able to implement 
strong controls within the bank in Mexico, while keeping an eye on 
other countries.’ ... 

I indicated to them we were aware of these issues and were 
progressively tackling them.’’^^' 

His email then outlined the steps he told CNBV that HBMX was 
taking, including new hires, “customer file centralizing and imaging 
which would give us more robust KYC data for anti-money laundering,” 
and working to change the culture of the bank which “would not happen 
over night.”^^^ Mr. Thurston wrote that the CNBV officials told him 
that was “what they wanted to hear and that they would report back 
positively” to the head of the CNBV. Mr. Geoghegan responded: “This 
is disturbing and clearly we will need to look at the management 
structure and practices. ... lam copying this to the Group Chaimian and 
Matthew King for their information.”’^^ 


‘ 10/23/2007 email exchange between HBMX Paul Thurston and HSBC Michael Geoghegan, 
“CNBV Inspection,” HSBC OCC 8873338-342. 

Id. 

Id. at HSBC-OC-8873341. 

™ Id. at HSBC-OC-8873338. 
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In December 2007, the internal audit group for Mexico issued a 
report that had been ordered earlier on HBMXs AML efforts.^^'* It found 
HBMX’s AML controls to be “Below Standard” and to pose an overall 
“high” risk/^^ It detailed multiple problems, including “[r]egulatory 
breaches in KYC issues such as the large number of incomplete client 
files and the inadequate process of SCC identification and monitoring 
across the network.”^^® It noted that HBMX had a May 2008 deadline 
for bringing files into compliance with KYC regulations set by the 
CNBV, and that regulators had been told 86% of client files already met 
regulatory requirements, while audit work over the past year suggested a 
much lower percentage, “as low as 46%.” The audit report also noted 
that the KYC effort was remediating only 1 .8 million files involving 
high risk, excluding another almost 6 million clients “that the Group has 
in Mexico which are subject to HSBC’s own MLD policies,”^^^ 

The 2007 audit report also disclosed SAR filing and alert review 
backlogs. It noted “4,890 accounts that reported unusual transactions 
that took place between APR [April] and AUG07,” but which had yet to 
be reported to Mexican authorities, “thereby breaching the 
regulations.”^^* It attributed the delay to changed internal criteria for 
reporting transactions, resulting in an increase in the number of cases to 
be reported, and “slow decision-making.”*^’ The report also noted 7,217 
alert warnings of which 858 (12%) had not been reviewed at all, “posing 
a potential risk that criminal transactions may not be identified which 
may have an adverse reputational effect on the Institution.”**" The audit 
report stated that the failure to review these alerts had been going on for 
one year due to “insufficient Operations staffing.” The report also 
criticized “Senior Management” for attending few AML committee 
meetings, delaying decisions on cancelling accounts, and delaying the 
imposition of sanctions when cases were not reported to the CNBV on 
time.**' The report also noted a lack of “sufficient understanding” of the 
AML IT systems and inadequate AML training as evidenced by the 
“failures regularly identified in branch audits.”**^ In light of the 
“number and in many cases seriousness of the weaknesses identified,” 
the report recommended creating an HBMX Money Laundering 
Committee to undertake the effort needed to address the widespread 
AML shortcomings. 


See 12/2007 “General & Transactional Banking Audit: HBMX Money Laundering 
Deterrence,” No. HBMX GAQ 070086, prepared by Group Audit Mexico, HSBC OCC 
8874802-810. 

Id. at HSBC OCC 8874810. 

“Id. 

“Id. 

Id. at HSBC OCC 8874807. 

“ Id. at HSBC OCC 8874807, 810, 

Id. at HSBC OCC 8874808. 

“'id. at HSBC OCC 8874807. 

“ Id. at HSBC OCC 8874810. 
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Confronted by this long list of AML deficiencies, HSBC Group 
sent Warren Learning, HSBC Group Compliance Deputy Head, to 
Mexico to help determine what should be done.^^^ 

CNBV and FIU Dissatisfaction Deepens. As 2007 drew to a 
close, HSBC Group and HBMX worked to strengthen HBMX’s AML 
efforts, but CNBV dissatisfaction with the bank seemed to deepen and 
the list of AML concerns broaden in 2008, encompassing for the first 
time concerns about HBMX’s participation in bulk cash services. 

In February 2008, Mr. Thurston, HSBC Mexico CEO, met again 
with CNBV officials, at their request, along with the Mexican Financial 
Intelligence Unit (FIU).^^"* According to an email he sent summarizing 
the meeting, CNBV handed him a draft report detailing multiple 
compliance concerns.^^^ Mr. Thurston wrote: 

“It is clear in this that our Head of Compliance is not as highly 
regarded by the CNBV as had been thought by local and Group 
management, and indeed appears to have misled us about the 
extent to which the CNBV have been informed of, and/or are 
satisfied with, our actions.’’”* 

HSBC Group CEO Geoghegan responded: “This is most disturbing and 
we will need to have the most thorough of investigations.”^^’ 

The report provided by the CNBV stated that “[a]s a result of the 
increase in bank’s operations, there has been an increase in deficiencies 
in internal control.” It described a variety of problems. With respect 
to AML issues, the report concluded that “little improvement” in AML 
controls had occurred since the prior year’s on-site inspection.’^^ It 
noted that, of 1 10 client files reviewed, “55 files (50%) were 
incomplete,” and 5 files were not provided at all. It noted a “[l]ack of 
closer supervision to high profile risk clients”; a lack of risk criteria to 

See, e.g., 12/6/2007 email from HSBC John Root to HSBC Warren Learning and others, 
“Warren Learning HBMX DEC Visit Issues,” HSBC OCC 8875837 (“I am keeping a list of 
issues that you might want to raise during your December visit to HBMX,” including 
deteriorating audits of treasury operations, resourcing concerns, “Sinaloa massive money- 
laundering scheme (+USD 1 00 million),” “HBMX Trusts backlog,” “Banislmo business in 
regulatory and tax havens,” and “AML systems integration”). 

^^“^See 2/18/2008 email from HBMX Paul Thurston to HSBC Michael Geoghegan, with copies 
to Richard Bennett and Matthew King, “Confidential - CMBV/FIU Meeting,” HSBC OCC 
8873331-333. 

Id. at HSBC OCC 8873333. 

2/1 8/2008 draft report entitled, “Internal Control, HBC Mexico, S.A.,” prepared by CNBV, 
HSBC OCC 8966021-026, at 6. [Sealed Exhibit.] 

2/18/2008 email from HSBC Michael Geoghegan to HBMX Paul Thurston and others, 
including HSBC Group Chairman Stephen Green, “Confidential - CMBV/FIU Meeting,” HSBC 
OCC 8873331. 

2/18/2008 draft report entitled, “Internal Control, HBC Mexico, S.A.,” prepared by CNBV, 
HSBC OCC 8966021-026, at 1 . [Sealed Exhibit.] 

Id. at 2. 
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classify clients during the account opening process; and missing client 
updates for high risk customers and politically exposed persons.^'*'’ 
Another deficiency was that the CAMP and HOGAN monitoring 
systems did not collect transaction profiles for new accounts, as required 
by law, and the CCC Committee delayed closing suspicious accounts, 
citing the example of a $2.8 million account kept open for an entire year 
after it was supposed to be closed.^'" 

The report also described a number of AML deficiencies identified 
by the FIU, stating: “Evidence obtained by the Financial Intelligence 
Unit of Mexico (UIF) on a frequent basis has seriously raised its concern 
on the very high level of ML risk that HSBC may be incurring.”^'’^ It 
provided a chart showing that HSBC had much more bulk cash 
transactions using U.S. dollars than other Mexican banks, and expressed 
U.S. and Mexican law enforcement concern that the cash represented 
illegal drug sale proceeds from the United States.’'*^ The FIU also noted 
that HBMX frequently failed to provide requested information, claiming 
the files or basic account documents could not be located, providing a 
chart showing HBMX’s response record was worse than other Mexican 
banks.^'*"' The FIU also noted that “in the majority of the most relevant 
ML cases” it had investigated in 2007, “many transactions were carried 
out through HSBC,” and in some cases, the FIU detected ML 
transactions that HSBC had not reported.^"'^ The FIU also noted that it 
had been able to obtain copies of account documents that HBMX had 
claimed it could not locate. “These last cases may imply criminal 
responsibility of HSBC and its personnel - such as that relating to false 
statements to administrative authorities and complicity - that the law 
enforcement and judicial authorities must investigate.”^'*® 

Internal HBMX and HSBC Group documents indicate that senior 
management immediately began to investigate the allegations. HSBC 
Group CEO Michael Geoghegan spoke to HSBC Group Chairman 
Stephen Green, as well as senior HSBC Group and HBMX personnel, 
and asked David Bagley to lead the review of HBMX Compliance.^'*^ 
Mr. Bagley left for Mexico immediately for a two-week stay. Mr. 
Thurston directed the head of Latin American Security to investigate 
certain allegations, and the head of Latin American internal audit to 


Id. at 3. 

Id. 

* Id. at 5. 

Id. 

Id. at 5-6. 

Id. at 6. Recent exaniple.s of such cases included Zheniy Ye Gon, Casa de Cambio Puebla, 
and Sigue Corporation. 

Id. 

2/19/2008 email from HSBC Michael Geoghegan to Paul Thurston, Richard Bennett, 
Matthew King, with copies to Stephen Green and David Bagley, “HBMX - ML Review,” 
HSBC-PSI-PROD-0198506-507. 
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examine the other CNBV and FIU complaints.^'** Mr. Thurston 
promised an updated report to Mr. Geoghegan prior to an upcoming 
HSBC Group Board meeting. 

Three days later, on February 22, 2008, Matthew King composed a 
draft email as a way to organize the information that should be conveyed 
to Mr. Geoghegan in a telephone call, and circulated his self-described 
“brain dump” to Messrs. Thurston, Bagley, Bennett, and Graham 
Thomson for their thoughts.^'**’ The email indicated that the AML 
concerns raised by the CNBV were “pretty similar” to issues raised 
earlier, but the CNBV had “suddenly become more aggressive.” The 
email speculated on whether that was due to political pressure, FIU 
concerns, or possibly a separate disagreement with the FIU regarding 
reimbursing a public utility for a fraud. Mr. King also wrote; “It is also 
the case that Mexico is suffering a major problem with drugs dealers and 
the Government is being very robust about dealing with them.” 

The King email then went through the issues. It noted that the 
December 2007 internal AML audit of HBMX was “Below Standard,” 
and that the AML Director Leopolodo Barroso would be replaced, 

“albeit the FIU apparently regard him as trustworthy” so his replacement 
would have to be “carefully explained.”^’** The email said that the 
“biggest immediate concern” was account KYC, which had been “a 
systematic problem for some time.” Among other matters, the email 
noted that a pilot project to centralize account documentation through 
electronic imaging was underway, but “Audit is continuing to identify a 
high level of exceptions for that process also (around 30%).”^’ ' Mr. 
King wrote: 

“Given the concerns now raised by the CNBV and FIU (which 
apparently includes tapes of a drug lord recommending HBMX as 
the place to bank) we now have to decide: whether the imaging 
process can be made to work to everyone’ [s] satisfaction);] how 
quickly it can be rolled ou[t] across the whole network); and] in the 
meantime, whether we can continue to open accounts using the 
old, flawed process.”^^^ 

The email also described account documentation as “a problem since we 
bought Bital,” and noted that CNBV had again questioned having 

3^18 2/19/2008 email from HBMX Paul Thurston to HSBC Michael Geoghegan and others, 
“HBMX - ML Review,” HSBC-PSI-PROD-0198505-506. 

2/22/2008 email from HSBC Matthew King to HBMX Paul Thurston, HBMX Graham 
Thomson, with copies to HSBC Richard Bennett and HSBC David Bagley, “CNBV,” HSBC- 
PSI-PROD-0198508-509. 

"" Id. at 1. 

Id. 

Id. at 1-2. Both David Bagley and Paul Thureton told the Subcommittee that they asked the 
CNBV for a copy of the purported tapes, but none was provided. Subcommittee interviews of 
David Bagley (5/10/2012) and Paul Thurston (5/1/2012). 
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HBMX personnel handle compliance issues for the Latin American 
region in addition to Mexico.^ ^ On “cross-border cash,” the email 
indicated that trends still needed to be clarified, but he thought the 
United States had “a general concern rather than a specific one about 
us.” 


The next day, February 23, 2008, Paul Thurston sent an email to 
Michael Geoghegan with additional information. He wrote: 

“Firstly, to answer your question of why is this being raised now? 
The intelligence that we have been able to gather is that with 
President Felipe Calderon declaring war on the drugs gangs, crime 
and corruption the judicial authorities have heightened the focus on 
financial investigations and have been putting increasing pressure 
on the bank regulators because the banks have been seen as not 
providing good enough support. ... HSBC has historically, and 
continues to have, a worse record than the other banks, so we have 
become a focus of attention. The new Head of the FIU has told us 
that his staff have told him that HSBC has been the most difficult 
bank to obtain accurate and timely data from for the past 4 

»i354 

years. 

Mr. Thurston wrote that HBMX had taken more corrective action 
than the regulators were aware of He acknowledged an account 
documentation problem which would be addressed, in part, by a new 
centralized electronic imaging procedure which was taking effect 
Mexico-wide that month. In addition, he wrote that “stronger 
disciplinary procedures” were being put in place for branch managers 
who signed off on account (menings without personally ensuring all 
documents were obtained.^’^ He also noted that HBMX received more 
than 1,000 letters per week from the CNBV asking for account 
information, and that more resources had to be dedicated to responding 
to them. 

Finally, on the bulk cash issue, Mr. Thurston wrote that the United 
States had a general concern, “not aimed specifically at HSBC,” about 
the flow of U.S. banknotes from Mexico and the potential linkage to 
drug related activity.”^*’ He wrote that HBMX had undertaken its own 
analysis of the cash flows, and initial indications were that its handling 


Id. at 2. 

2/23/2008 email from HBMX Paul Thurston to HSBC Michael Geoghegan, with copies to 
Stephen Green, Matthew King, Richard Bennet, and David Bagiev, “CNBV/FIU Update,” 


HSBC-PSI-PROD-0197872-873. 
Id. atl. 

Id. at 1-2. 

Id. at 2. 
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of U.S. dollars “had been slowly declining in recent years, rather than 
rising.”^^* 

On February 27, 2008, Mr. Bagley conducted an exit interview 
with the HBMX AML Director Leopoldo R. Barroso, who was being 
replaced. Mr. Barroso provided a negative view of HBMX AML 
performance. According to a meeting summary written by Mr. Bagley, 
Mr. Barroso said that, while in his position, he had felt civil and criminal 
“litigation exposure” due to “the continued poor controls in the bank, the 
fact that there were allegations of 60% to 70% of laundered proceeds in 
Mexico went through HBMX and because he did not think that senior 
management had any commitment to robust AML controls.”^*^ Mr. 
Barroso indicated that “it was only a matter of time before the bank 
faced criminal sanctions and cited a number of cases.” Mr. Bagley 
wrote: 


“It was clear that LRB [Leopoldo R. Barroso] felt very strongly 
that relevant business heads within HBMX had absolutely no 
respect for AML controls and the risks to which the Group was 
exposed and had no intention of applying sensible or appropriate 
approaches. Again he cited a number of examples where despite 
strong recommendations with the CMP [Compliance] business 
heads had failed or refused to close accounts or indeed on 
occasions file SARs. He thought that there was a culture that 
pursuing profit and targets at all costs and in fact had seen no 
recent improvement in the standard of controls or the types of 
decisions being taken. 

He was critical of the level of resources in his team and felt that his 
team had done much to keep the bank out of trouble by working 
extra hours against impossible deadlines and handling significant 
volumes of alerts including those from CAMP. . . . 

[H]e thought he needed at least 35 new headcount. ... 

He was extremely critical of RG [Ramon Garcia] who he described 
as being indecisive, weak and desperate to retain his job and 
lacking any understanding of AML matters.”^*” 

Mr. Bagley later forwarded his summary of the meeting to Mr. 
Thurston who responded that “the jury is still out on Ramon” and a 


See also 2/27/2008 email exchange between HBMX Paul Thurston and HSBC Michael 
Geoghegan, “CNBV/FIU Update,”HSBC-PSl-PROD-0198510-5l2. 

2/27/2008 “Meeting Attendance Note,” prepared by David Bagley, HSBC OCC 8874824- 
825. 

“Id. 
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discussion was needed on structuring the Latin American regional and 
Mexican compliance responsibilities.^*' 

On March 3, 2008, HBMX issued a 12-page response to the 
internal control issues raised by the CNBV in its draft report of February 
27 362 response detailed multiple “corrective actions” being taken 
by the bank to address each concern. Among the actions discussed were 
the new centralized process for ensuring account opening documentation 
was obtained and electronically recorded; a new effort to centralize PEP 
files, obtain missing documentation, and strengthen annual PEP reviews; 
new disciplinary procedures for opening accounts with incomplete 
documentation; the re-engineering and strengthening of the alert 
reporting process; replacement of the AML director; and strengthening 
of the AML staff. The response also indicated that management changes 
had been made to split responsibilities for Mexico from the rest of the 
Latin American region. On the issue of U.S. banknotes, the response 
indicated that HBMX U.S. dollar volumes had not increased, but were 
marginally lower than in 2003. It also announced a new policy, 
effective immediately, to deem all customers who deposit more than 
5100,000 in a month as SCC clients subject to enhanced due diligence. 
The response said that 3 1 2 customers met that criteria and were being 
subjected to a KYC review. 

Mr. Thurston and Mr. Bagley met with CNBV and FIU officials on 
March 4, 2008, to deliver the response and discuss the bank’s actions. 
They reported to Mr. Geoghegan that the meeting was “extremely 
cordial” and the bank’s corrective efforts were “well received.”^ ^ After 
Mr. Bagley returned to London, he also discussed the matter with the 
Financial Services Authority (FSA), HSBC’s UK regulator, which had 
communicated with CNBV. Mr. Bagley reported that “CNBV 
confirmed that they were satisfied with the reaction and steps we have 
taken although will watch implementation closely.”^*'' In April 2008, at 
a meeting of the HSBC Group Board of Directors, Mr. Bagley briefed 
the HSBC Group Audit Committee about HBMX, indicating that 
regulators had “expressed their satisfaction with the Group’s 
reaction.”'** 

Restoration Project. HBMX spent the next six months working 
to carry out the corrective actions outlined in its March response to 

36i 3/7/2008 email exchange among HSBC David Bagley and HBMX Paul Thurston and John 
Rendall, “HBMX,” HSBC OCC 8874821-822. 

3/3/2008 “Internal Control, HSBC Mexico SA,” prepared by HBMX, HSBC OCC 8966027- 
038. 

3/5/2008 email from HSBC David Bagley to HSBC Michael Geoghegan and others, 
“CNBV/FIU Meeting,” HSBC-PSI-PROD-01985i3. 

3/15/2008 email from HSBC David Bagley to HBMX Paul Thurston and others, “CNBV,” 
HSBC OCC 8875171. 

4/25/2008 Board of Directors minutes for HSBC Holdings pic, HSBC-PSI-PROD-01 98539- 
540. 
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CNBV. HBMX also underwent personnel changes. In May 2008, Paul 
Thurston was promoted and returned to London, having spent a little 
more than one year in Mexico. Luis Pena Kegel took over as HSBC 
Mexico CEO and head of HBMX. Emilson Alonso was appointed head 
of HSBC Latin America, carrying out the commitment made to CNBV 
to split the two sets of responsibilities. In the summer of 2008, a new 
HBMX AML director was also hired, Jaime Saenz.^'*'* 

One key AML activity undertaken by the bank was to work on 
bringing the KYC documentation for existing accounts into compliance 
with CNBV requirements, an effort HBMX deemed “Projecto 
Restauracion” or the Restoration Project. HBMX was supposed to have 
completed the KYC effort by May 2008, after having obtained a one- 
year extension, but was far behind schedule. HBMX appointed John 
Rendall, HBMX COO, to oversee the new project. One step he took 
was to limit the project to high risk accounts.^'*’ He also assembled a 
team and began pressing branch personnel to complete their KYC 
updates. John Root, a senior HSBC Group Compliance officer, attended 
a meeting of the Restoration Project team during a visit to Mexico in 
July, and was “very impressed” by the progress to date.^®* 

Also in July 2008, Mr. Rendall provided a progress report to the 
Latin American regional audit committee on a number of AML and 
compliance efforts, outlining “9 workstreams.” He described several 
milestones, including implementing the centralized account opening 
process for all HBMX branches, initiating the KYC Restoration Project 
“focused on high risk accounts,” achieving a “90% reduction (from 
34,700 to 3,300)” in the 2008 CAMP alert backlog, requiring enhanced 
KYC for customers with over $100,000 in U.S. dollar deposits, and 
improving FIU response procedures.^*’ 

On a more negative note in July, HBMX’s internal monitoring 
system generated a number of alerts identifying “significant USD [U.S. 
dollar] remittances being made by a number of customers to a US 
company alleged to have been involved in the supply of aircraft to drugs 
cartels.”^^” The alerts highlighted account activity in the HBMX 
Cayman branch.^’’ As a “precaution” pending review of the account 
activity, HBMX stopped opening new Cayman accounts. The account 

See 7/30/2008 email from HSBC John Root to HSBC David Bagley and others, “HBMX 
Visit Update,” HSBC OCC 8873487-489. 

See 6/7/2010 email from HBUS Paul Lawrence to HSBC Michael Geoghegan, “Mexico 
Banknotes/High-level Timeline,” HSBC-PSI-PROD-0198514-516. 

J6S 

See 6/7/2010 email from HBUS Paul LawTence to HSBC Michael Geoghegan, “Mexico 
Banknotes/High-level Timeline,” HSBC-PSI-PROD-0198514-516. 

7/3 1 /2008 email from HSBC David Bagley to HSBC Richard Bennett with copies to HSBC 
Michael Geoghegan and others, “HBMX - Cayman Accounts,” HSBC OCC 8874832-833. 

Id. 

Id. 
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activity also prompted HSBC Group to take a closer look at the Cayman 
accounts.^’^ HSBC Group Compliance head David Bagley wrote that 
the Cayman accounts should be included in the Restoration Project “as a 
priority area,” and should “be seen as high-risk from an AML and 
reputational perspective,”’’'* 

In September 2008, HBMX’s internal audit group reviewed the 
Restoration Project and quickly identified multiple, growing problems. 

In an email describing the audit findings, Graham Thomson, head of the 
Latin American internal audit group, wrote: 

“The key issues . . . include slow progress with remediating 
PEPs/SCCs and other high risk customers, with some 40% of the 
KYC records of PEPs/SCC customer segment ... not yet 
remediated. These accounts are now in the process of closure by 
HBMX Legal. . . . [Cjhecks done by CMP [Compliance] on visit 
reports ... continue to reveal an unacceptable level of 
‘manufactured’ visit reports.”’” 

Mr. Alonso, head of HSBC Latin America responded that the audit 
results were “disappointing” and “not what I was assured by HMBX 
management.”’” 

The audit report found that the Restoration Project had “major 
weaknesses ... that could potentially hinder regulatory compliance and 
the achievement of the project’s overall goals.”’” It said that resources 
dedicated to the project “appeared insufficient to deliver the quality and 
timeliness required,” and clients engaged in high risk businesses “had 
not been identified for inclusion” in the project.”* It noted that visit 
reports were incomplete and, in some cases, “created without visits 
being made.”’” The audit report also stated: 

“The impact of account cancellation on the business, customers 
and costs should be analysed against the risks that have been 
mitigated and accepted, as this will allow having adequate balance 
between control and business, particularly where cancellations may 
be attributable to internal errors rather than to the customers.”’*” 


Id, 

Id. 

10/28/2008 email from HBMX Graham Thomson to HBMX Emilson Alonso, Luis Pena, 
John Rendali, and others, “HBMX - Projecto Restauracion,” HSBC OCC 8873463-465. 

376 

Nov. 2008 “Branch Audit Report: HBMX Special Review of Restoration Project,” prepared 
by HBMX Group internal Audit, HSBC OCC 8876417-424, at the Audit Report Summary 
Schedule, HSBC OCC 8876424. 

”^ld. 

Id. at HSBC OCC 8876419. 
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This recommendation appears to suggest that some high risk 
accounts not be closed, even where the bank was unable to review the 
account by the regulatory deadline and KYC deficiencies might exist, 
Mr. Thomson’s email indicated, however, that unremediated files for 
PEP and SCC clients subject to the Restoration Project were already in 
the process of being closed.^*’ In addition, Mr. Rendall reported to the 
Latin American regional audit committee that “7,941 KYC files for high 
risk customers had been reviewed & updated, or scheduled for 
closure.”^*^ Mr. Rendall also reported that in the second phase of the 
project, “47,000 accounts with various risk flags” were being reviewed, 
with plans for a third phase to examine “83,000 accounts with historic 
CAMP alert profiles.” These figures were well below, however, the 1.8 
million in high risk accounts that were supposed to be reviewed to 
ensure KYC documentation met CNBV requirements. 

November Meeting with CNBV. On November 26, 2008, a high 
level meeting took place between HSBC and CNBV. Michael 
Geoghegan, HSBC Group CEO, traveled to Mexico to attend. Along 
with Emilson Alonso, head of HSBC Latin America, and Luis Pena, 
head of HSBC Mexico, Mr, Geoghegan met with the President of 
CNBV, Guillermo Babtz; the head of CNBV bank supervision, Patricio 
Bustamante; and the head of CNBV AML oversight, Pablo Gomez.^®^ 
The focus of the meeting was expected to be the actions taken by 
HBMX to address the CNBV concerns identified in February 2008. 

According to an email prepared by the Deputy Head of HSBC 
Group Compliance, Warren Learning, who had accompanied Mr, 
Geoghegan to Mexico and remained there for several days,®®"* the CNBV 
officials acknowledged the “significant progress” made by the bank, but 
remained “very concern[ed]” about the U.S. dollar accounts at HBMX’s 
Cayman branch, the slow KYC review of those accounts, and the “sheer 
volume of US Dollars that HBMX repatriates” to the United States.®®® 
The email noted that, between January and September 2008, HBMX had 
repatriated $3 billion to the United States, which represented 36% of the 
market and double what the biggest bank in Mexico, Banamax, had 
repatriated, even though HBMX was only the fifth largest bank in the 
country.®*® According to the email, CNBV officials were also 


10/28/2008 email from HBMX Graham Thomson to HBMX Emilson Alonso, Luis Pena, 
John Rendall, and others, “HBMX - Projecto Restauracion,” HSBC OCC 8873464-465. 

6/7/2010 email from HSBC Paul Lawrence to HSBC Michael Geoghegan, “Mexico 
Banknotes/High-leve! Timeline,” HSBC-PSI-PROD-0198514-516. 

See 1 1/27/2008 email from HSBC Warren Learning to HSBC David Bagley and Richard 
Bennett, “Mexico,” HSBC OCC 8875605-607. 

See 12/8/2008 email from HSBC Warren Learning to HBMX Ramon Garcia and John 
Rendall, “Mexico Visit,” HSBC-PSI-PROD-0197874 (indicating Mr. Learning visited HBMX 
from Nov. 25 to Nov. 28). 

385 j j/27/2008 email from HSBC Warren Learning to HSBC David Bagley and Richard Bennett, 
“Mexico,” HSBC OCC 8875606. 

386 
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“concerned that when-ever there is a serious MLD [Money Laundering 
Deterrence] scheme HSBC seems to be involved” and that “USA 
authorities are concerned at the very high levels.”^*^ Mr. Geoghegan 
told the Subcommittee that his meeting with the Mexican regulators did 
not go as he had expected, he told the CNBV that HBMX would address 
the issues raised, and he immediately took action to ensure that 
happened,^** 

Stopping U.S. Dollar Services. After the meeting, Mr. Alonso 
sent an email to Mr. Pena asking him to examine the “export of ca.sh 
USD to the USA,” including the volumes of U.S. dollars being exported, 
the types of clientele using the HBMX branch network to make U.S. 
dollar deposits for remittance to the United States, and the branches 
involved in more frequent deposits or higher volumes.’*’ He also called 
for the “[i]mmediate elimination of this kind of service in our branches. 
Corporate clients that require such service should be approved by you on 
a very exceptional basis.”’” 

Later that same night, Mr. Geoghegan sent an email to Mr. Alonso 
stating: “It occurs to me: We should stop any Dollar remittances or 
accept any Dollar payments unless they are done via a customer’s 
account. We should stop shipping Dollars.””' He also wrote: “We 
should bench mark HBMX CAMP and other search engine systems with 
HBUS (they have some very sensitive behavior monitors) and see 
whether we are finding as many suspicious transactions as we should 
be.” Mr. Alonso forwarded the email to Mr. Pena, who responded the 
next day: 

“The two immediate actions we are taking are: 

Starting December 1 . We will no longer buy or sell dollars in cash 
at ANY branch (customers or non customers). We will, as an 
alternative, offer travelers cheques to customers only. Also 
customers can withdraw dollars at HSBC ATMs located at airports 
or from any ATM in the world with their debit card. 

Starting January 1. We will no longer accept deposits of cash 
dollars to any dollar account at any branch. 


Subcommittee interview of Michael Geoghegan (5/24/2012). 

1 1/26/2008 email from HBMX Emilson Alonso to HBMX Luis Pena, with copies to HSBC 
Michael Geoghegan and others, “Visit to CNBV - Findings and Required Actions,” HSBC OCC 
8874846-847. 

™id. 

1 1/26/2008 email from HSBC Michael Geoghegan to HBMX Emilson Alonso, “Money 
Launderying,” HSBC OCC 8874849-850. Mr, Geoghegan told the Subcommittee that he made a 
unilateral decision to stop these U.S. doll^ services. Subcommittee interview of Michael 
Geoghegan (5/24/2012). 
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We are quantifying the impact of lost revenues. On the flipside, 

we will save the operating cost of transporting and exporting dollar 

bills. 

This should take care of the problem.”^^^ 

Mr. Pena also proposed continuing indefinitely the freeze on 
opening new U.S. dollar accounts through HBMX’s Cayman branch, 
and prohibiting the acceptance of new cash deposits for the existing 
Cayman accounts. HSBC Group Compliance Deputy Head Warren 
Learning noted in an email to his supervisor, David Bagley, that when 
Mr. Pena commented that the actions being taken “could result in lost 
profits of many billions Mike[’]s clear response [was] that nothing is 
worth risk to our reputation.”^^'* Mr. Learning also wrote that the 
proposed actions were “considered extremely sensitive here in Mexico 
and local management want to get their ducks in a row ... so it will be 
much appreciated if the above could not be . . . disseminated without 
discussing further.” 

Account Closing Backlog. Mr. Learning also noted that “there 
appears to be a huge back-log in closing accounts,” with customers 
continuing to use accounts in November that had been ordered closed 
eight months earlier in March. He wrote that those accounts, which 
were still being used by customers, may be “part of the reasons for 
multiple SARs” being filed for some accounts, potentially putting 
HBMX in breach of HSBC policy on account closure after multiple 
SARs.^^^ 

Mr. Bagley responded: “What I find most frustrating is the way in 
which new issues constantly emerge however much time is spent with 
HBMX.”^^*’ He continued: “The practice of changing USD in the 
branches pres[u]mably with little or no ID for non customers is in breach 
of Group policy. When looking at our USD exposure how can this have 
been missed.” He also asked Mr. Learning to consider challenging the 
involvement of the Legal Department in the account closing process so 
that it could proceed more quickly. 

The next day, November 28, 2008, Mr. Geoghegan sent an email 
to top HBMX and HSBC Group Compliance officials stating that it 
should be made clear to all HBMX personnel “that if there are persistent 


1 1/27/2008 email from HBMX Luis Pena to HBMX Emilson Alonso, copy to HSBC Michael 
Geoghegan, “Money Launderying,” HSBC OCC 8874849. 

1 1/27/2008 email from HSBC Warren Learning to HSBC David Bagley and Richard Bennett, 
“Mexico,” HSBC OCC 8875605-607. 

®Ud. 

Id. 

396 1 j/ 27 /ernaii HSBC David Bagley to HSBC Warren Learning and Richard Bennett, 
“Mexico,” HSBC OCC 8875605. 
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breaches of KYC in a particular branch, the branch will he closed and all 
staff dismissed regardless of how much business we will lose on account 
of it.”^^’ He also required HBMX’s compensation scorecard to include 
implementing the CAMP monitoring system to the maximum extent 
possible and closing accounts with two or more SARs. He wrote; “[I]f 
you demonstrate zero tolerance of lapses in implementing KYC then the 
operations standards of the whole business improves at the same time. 
What we are doing in Mexico needs to be copied everywhere else in the 
region.”^^* 

AML Shock Plan. Mr. Pena responded that in January 2009, he 
was planning to close two branches and fire all staff “as exemplary 
measures” and was working to identify the branches.^^^ This measure 
was later referred to as the “AML Shock Plan.”''®’ Mr. Pena also wrote: 

“Last but not least, I will address the issue of funding. After all, 
Cayman and Mexican dollar accounts provide us with US$2.6 
billion of cheap funding. We are likely to lose a big portion of this 
if we tell customers we no longer receive dollar notes. We have to 
provide an alternative to our customers for this: Miami accounts 
may be an alternative but we will have to talk to HBUS of how we 
get this ch[eap] funding back to Mexico to lend.”'"” 

In December 2008, at the conclusion of his latest visit to Mexico, 
Mr. Learning drafted a letter to Mr. Pena summarizing a number of 
AML issues and sought input from other HBMX officials before 
finalizing it.*^ His draft letter discussed the late filing of SARs, the 
backlog in closing accounts, the failure to close accounts after two SAR 
filings, slow and weak decisions by the CCC Committee, the need to 
clarify transaction limits, and the need for further refinement of the 
CAMP alert system. He noted that the account closing backlog 
consisted of over 3,600 accounts, of which 675 involved suspicion of 
money laundering and had been ordered closed by the CNBV, yet were 
still open. He also noted that 1 6 of the accounts remaining open had 
been ordered closed in 2005, 130 in 2006, 172 in 2007, and 309 in 2008. 
Fie wrote that he’d been advised that the law did not permit the accounts 
to be blocked pending closure, which meant account activity was 


1 i/28/2008 email from HSBC Michael Geoghegan to HBMX Emilson Alonso with copies to 
HSBC David Bagley. HBMX Luis Pena, and others, “Final draft for Mike’s Letter,” HSBC OCC 
8874857. 

398 

1 1/28/2008 email from HBMX Luis Pena to HBMX Emilson Alonso, who forwarded it to 
HSBC Michael Geoghegan, David Bagley, and Matthew King, “Final draft for Mike’s Letter,” 
HSBC OCC 8874856. 

12/8/2008 email from HSBC Warren Learning to HBMX Ramon Garcia and John Rendall 
with copies to HSBC David Bagley, John Root, Susan Wright, and others, “Mexico Visit,” 
HSBC-PSI-PROD-0 1 97874-876. 

401 

402 
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continuing. To speed up closures, he advised that his research had 
indicated the Legal Department did not have to participate and clients 
could be notified of the account closing by certified mail. Mr. Learning 
also noted that 3,000 Cayman accounts had been proposed for closure 
which would further stress the process. In addition, he warned that the 
switch from U.S. dollar deposits to travelers cheques could also raise 
AML concerns, advised lowering the $25,000 ceiling on the amount of 
travelers cheques that could be purchased by a customer, and creating a 
new limit on the amount of travelers cheques that could be deposited at 
one time to a client account. He recommended setting dollar limits on 
cashiers cheques as well. 

Later in December, HBMX prepared to implement the new AML 
policies and procedures and close suspicious accounts.'’"^ December 22 
and 24 were set as the dates to close four HBMX branches “as 
disciplinary actions,” with another 10 to 20 branches that, in January, 
would have all staff dismissed.''*’^ January 1 , 2009 was set as the date to 
stop buying or selling U.S. dollars at HMBX branches. It was also the 
date set for closing all accounts opened by casas de cambio. January 3 1 
was set as the date to complete the Restoration Project and begin closing 
accounts that had incomplete documentation or were subject to at least 
two SAR filings.'’'’* 

On December 22, 2008, an HBMX employee alerted the HBUS 
regional head of Banknotes, Gyanen Kumar to the HBMX’s plan to stop 
buying and selling U.S. dollars in the new year.'"” Mr. Kumar 
forwarded it to the Banknotes head Christopher Lok with the comment: 
“I have not been told anything firm as to why this decision is being 
taken as much as it is a drastic change. My instincts tell me that perhaps 
this has something to do with compliance.”'*'’® HBMX apparently did 
not explain, leaving HBUS uninformed about the compliance and 
regulatory pressures and AML risks behind HBMX’s decision to end its 
U.S. dollar business. 


See 12/15/2008 email exchange among HBMX Ramon Garcia and HSBC Warren Learning, 
Susan Wright, John Root, David Bagley, and others, “Anti Money Laundering: Shock plan - 
Update 081215," HSBC OCC 8875786-790; 12/23/2008 email from HSBC Warren Learning to 
HBMX Catcrine Bussery, with copies to HSBC David Bagley, John Root, and Richard Bennel, 
“Anti Money Laundering: Shock plan-Update0812I5,” HSBC OCC 8873474-476; 1/27/2009 
email from HSBC David Bagley to HSBC Susant Wright, with a copy to Warren Learning, 
“Press Release," HSBC OCC 8873485. 

12/15/2008 email exchanges among Ramon Garcia to HSBC Warren Learning, Susan Wright, 
John Root, David Bagley, and others, “Anti Money Laundering: Shock plan - Update 081215," 
at HSBC OCC 8875786-787. 

Id. 

Id. Mr. Learning expressed skepticism that the proposed closures could be completed by the 
January 3 i deadline. Id. 

See 1 2/22/2008 email from HBMX Mario Langarica to HBUS Gyanen Kumar and others, 
“USD cash in Mexico,” HSBC-PSI-PROD-0095869-870, 

408 12/23/2008 email from HBUS Gyanen Kumar to HBUS Denis O’Brien and Christopher Lok, 
“USD cash in Mexico,” HSBC-PSI-PROD-0095869. 
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Law Enforcement and Regulators Converge. In January 2009, 
HBMX began implementing the planned AML changes. It stopped 
buying and selling U.S. dollars and began closing accounts held by casas 
de cambio.'*''^ 

That same month, U.S. regulators began contacting HBUS to get 
clarification about HBMX’s decision to stop buying and selling U.S. 
dollars.'"*’ When asked, HBMX told HBUS the decision had been based 
primarily on cost considerations, without mentioning the compliance and 
AML concerns that led to the decision.'"' The regional head of HBUS’ 
Banknotes department, Gyanen Kumar, who was traveling to Mexico the 
next week, was asked by his colleagues to get more information.'"^ On 
January 13, HBMX sent HBUS a copy of its internal press release 
describing its decision.'"^ Based upon HBMX’s actions, HBUS decided 
to close banknotes accounts used by two Mexican clients, but to retain 
accounts with the same clients in the Payments and Cash Management 
(PCM) division.'"'' Closing the banknotes accounts meant that the 
Mexican clients could no longer make bulk cash sales of their U.S. 
dollars to HBUS, but the continued operation of their PCM accounts 
meant that both Mexican clients could still deposit U.S. dollars, execute 
U.S. dollar transactions, exchange U.S. dollars for Mexican pesos, and 
access the U.S. wire transfer system. 

Around the same time, the Immigration and Customs Enforcement 
(ICE) arm of the U.S. Department of Homeland Security (DHS) held a 
meeting with HBUS in New York, and informed it that ICE was 
conducting an investigation of a particular Mexican casa de cambio that 
had accounts at both HBUS and HBMX.""^ HBUS apparently did not 
relay that information to HBMX. 

Five months later, in May 2009, HSBC Group increased its risk 
assessment for its Latin American operations to its highest risk rating.'"® 

An email suggests, however, that HBMX had decided to continue to ofier U.S. banknotes 
products to several large reputable Mexican banks, Banamex, Banorte and Ixe, in effect making 
its first exceptions to the new policy. See 12/22/2008 email from HBMX Mario Langarica to 
HBUS Gyanen Kumar and others, “USD cash in Mexico,” HSBC-PSI-PROD-0095869-870. 

See January 2008 email exchanges among HBUS Christopher Davies, Christopher Lok, 
Michael Gallagher, Paul Lawrence, Gyanen Kumar, and others, “HBMX Banknotes business,” 
HSBC OCC 3633806-812. 

Id. at 810. 

“"Hd. atSll. 

Id at 809. 

Id. at 811, 807. 

Id at HSBC OCC 3633806. HSBC Group Compliance head David Bagley remarked near the 
end of January: “An obvious learning point for HBMX is that if they were contacted by US 
authorities then they should have thought to advise HBUS. They can go round the web, not just 
through the middle of the web. 1/30/2009 email from HSBC David Bagley to HSBC Susan 
Wright, “US issues ~ Various,” HSBC OCC 8873759. 

See 6/9/2009 email from HSBC David Bagley to HBMX Emiison Alonso, copies to HSBC 
Michael Geoghegan and others, “GMO Business reviews - LATAM,” HSBC OCC 8874895. 
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When Emilson Alonso, HSBC Latin America head, protested, HSBC 
Group Compliance head David Bagley explained: 

“I fully acknowledge the level of priority and focus that you and 
the team have given to these issues and the progress that has been 
made particularly in Mexico and have taken all of this into 
account. ... 

The basis for the rating is however: 

The inherent AML risk in Mexico is still very high and [tjhere are 
not many other parts of the Group that have what is effectively a 
drugs war being conducted on the streets and also have the risk 
posed by potential sting and other operations by the US authorities. 
We have of course remediated our high risk accounts, but the 
historic weak account opening processes mean that we have 
overall lower levels of KYC across the customer base as a 
whole.”'"^ 

On May 1, 2009, HBUS suddenly reclassified Mexico from its lowest to 
its highest risk rating. HBMX personnel in Mexico protested, but HBUS 
did not change its rating. One consequence was that its Mexican clients 
were automatically deemed to be located in a high risk country, 
triggering enhanced scrutiny. 

Later in June 2009, ICE contacted HBMX about its investigation 
into a particular Mexican casa de cambio that had an account at the 
bank.”' * A few days later, ICE contacted HBUS’ primary U.S. 
regulator, the OCC, and alerted the OCC to its investigation.'"^ As a 
result, the OCC began intensifying its regulatory scrutiny of HBUS, in 
particular with respect to its U.S. banknotes business, which U.S. 
regulators later said had increased as HBMX’s decreased.''^” 

At the same time, AML deficiencies continued to surface at 
HBMX. For example, in June 2010, HBMX noted that “certain 
transaction types were not being captured” by its AML account 
monitoring system, CAMP, and “therefore were not being 
monitored.”"*^' HBMX also noted that the CAMP software had not been 


■"’id. 

See 6/28-29/2009 summary of telephone conversations, prepared by OCC Joseph Boss, OCC- 
PSI-00928759-76I. 

-'Hd. 

™ Paul Thurston told the Subcommittee that, in retrospect, while HBMX’s banknotes business 
appeared to be declining, HBUS’ banknotes business with Mexico had been increasing at the 
same time, due to its banknotes business with HBMX and former clients of HBMX. 
Subcommittee intervdew of Paul Thurston (5/1/2012). 

See 6/18/2010 email from HBUS Michael Anderson to HBMX Ken Harvey, with a copy to 
Andrew Zissell, “RMM action point,” HSBC OCC 8875492-493 (attaching Compliance Report 
on Mexico, numbered 53.2.1). 
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updated “since its installation in 2005.” In September 2010, the OCC 
issued a Supervisory Letter detailing massive AML deficiencies at 
HBUS, derived in part from its dealings with Mexico. The OCC 
followed with a Cease and Desist Order in October. 

Eight Years of HBMX AML Deficiencies. HBMX and HSBC 
Group internal documents demonstrate that HBMX’s AML deficiencies 
were longstanding and widespread. Audit after audit detailed long lists 
of problems, including inadequate compliance resources, missing KYC 
information, manufactured site visits, inadequate account monitoring, 
unread alerts, poor training on the monitoring system and assigning SCC 
designations, internal disputes over closing accounts with suspicious 
activity, accounts left open despite multiple SARs and orders to close 
them, a SAR filing backlog, and an account closure backlog that 
spanned three years. AML leadership at HBMX was also weak. One 
AML director was dismissed for manufacturing notes of AML 
committee meetings that never took place; another was dismissed for 
inadequate performance; several long periods went by without any AML 
director in place at all. Even AML projects with resources and high 
level backing were unsuccessful, such as the Restoration Project which 
reported in 2008, that 75% of high risk client files still had inadequate 
KYC documentation. 

The evidence obtained by the Subcommittee shows that HSBC 
Group was fully aware of the years-long, substantial AML and 
compliance problems at HBMX, originating with the bank’s purchase in 
2002. The evidence also indicates that HSBC Group executives and 
compliance personnel worked to build a compliance culture, but 
repeatedly faced a workforce in Mexico that disregarded the Group’s 
AML policies and procedures, delayed obtaining required KYC data, 
delayed closing suspect accounts, and delayed reporting suspicious 
activity to regulators. In 2009, under pressure from regulators, HSBC 
Group took drastic measures, including prohibiting HBMX branches 
from buying or selling U.S. dollars, shuttering entire branches with 
checkered histories, and scheduling for closure thousands of accounts 
with incomplete KYC documentation. Even with those actions, HSBC 
Group acknowledged internally that HBMX continued to pose a high 
risk of money laundering to the Group.’’^^ 

The evidence also indicates that while HSBC Group was fully 
informed about HBMX’s AML and compliance deficiencies, little of 
that information was conveyed to HBUS, despite HBMX’s extensive 
correspondent relationship with HBUS. When asked about the lack of 
communication, HBMX CEO Paul Thurston indicated that he reported 


^ See, e.g., 6/9/2009 email from HSBC David Bagiey to HBMX Emilson Alonso, with copies 
to HSBC Michael Geoghegan and others, “GMO Business reviews - LATAM,” HSBC OCC 
8874895. 
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HBMX’s AML problems to HSBC Group and believed Group would 
communicate necessary information to HBUS.''^^ HSBC Group CEO 
Michael Geoghegan told the Subcommittee that HBMX problems were 
discussed at HSBC Group Management Business (GMB) meetings, 
which HNAH CEO Brendan McDonagh attended, so he thought HBUS 
was aware of the problems,''^'' HSBC Group Compliance head David 
Bagley told the Subcommittee that Group Compliance could have 
informed HBUS Compliance about the problems at HBMX, but “we did 
not think of it.”''^® Instead, he reported the information to HSBC 
Group’s senior management. Several senior HBUS executives told the 
Subcommittee that the bank was not informed of the extent of AML 
problems at HBMX, The result was, at the same time HBUS was 
handling hundreds of billions of dollars in cash transactions for HBMX, 
processing U.S. dollar wire transfers, clearing U.S. dollar travelers 
cheques, and opening U.S. dollar accounts for HBMX clients, HBUS 
was left in the dark by its own colleagues about the extensive AML and 
compliance problems at HBMX. In addition, in conformance with 
HSBC Group policy and practice, HBUS conducted no due diligence 
assessment of HBMX, did not evaluate its riskiness, did not review its 
audit findings, and did not monitor its wire transfers, cash letter activity, 
or banknotes transactions for suspicious activity. HBUS had rendered 
itself blind to the fact that it was servicing a high risk financial 
institution. 

D. HBMX High Risk Clients 

HBMX made extensive use of its correspondent relationship with 
HBUS. From its acquisition in 2002, HMBX worked with HBUS’s 
Payments and Cash Management (PCM) division and, until 2010, with 
HBUS’ Global Banknotes division, both headquartered in New York. 
HBMX used its correspondent and banknotes accounts to process U.S. 
dollar wire transfers, clear U.S. dollar monetary instruments like 
travelers cheques, and deposit bulk cash shipments of U.S. dollars on 
behalf of itself and its clients. Three examples of HBMX high risk 
clients help illustrate how HBMX’s AML deficiencies also created risk 
for HBUS. They include high risk Mexican and U.S. money service 
businesses, clients using offshore U.S. dollar accounts in the Cayman 
Islands, and purchasers of millions of dollars in U.S. dollar travelers 
cheques. 


(1) High Risk Money Service Businesses 

Mexican casas de cambio (CDCs) are money service businesses 
licensed by the Mexican Treasury Department (SHCP), through the 

Subcommittee interview of Paul Thurston (5/1/2012). 

Subcommittee interview of Michael Geoghegan (5/24/2012). 

Subcommittee interview of David Bagley (5/10/2012). 
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CNBV, to exchange foreign currencies for a fee. In Mexico, CDCs are 
not licensed as banks and do not hold deposits, maintain checking or 
savings accounts, or provide other banking services."'^^ Instead, CDCs 
are typically limited to accepting currency from a customer, exchanging 
it for another currency, and then either handing it over to the customer or 
wiring it to a financial institution in another country, such as the United 
States.''^’ 

In the United States, some money service businesses perform 
similar cross-border services, enabling individuals in the United States 
to wire U.S. dollars to Mexico, where the dollars may be converted into 
Mexican pesos and paid out to a designated recipient. Those U.S. 
money service businesses are sometimes referred to as money remitters. 
Both Mexican CDCs and U.S. money service businesses often perform 
their services for walk-in customers, although they may also have 
established customers who use their services on a regular basis. In both 
Mexico'*^* and the United States, CDCs and money service businesses 
are legally required to establish AML programs to safeguard against 
laundering criminal proceeds. 

(a) Casa de Cambio Puebla 

Until 2007, Casa de Cambio Puebla (Puebla) was a licensed casa 
de cambio, founded in 1985, with branch offices throughout Mexico."’^” 
On May 16, 2007, the United States obtained a warrant from a Federal 
court in Florida and froze or seized all Puebla funds on deposit with 
Wachovia Bank in Miami, as well as with Wachovia Bank in London, 
affecting funds totaling over $1 1 million.''^' In July 2007, Puebla filed a 
civil complaint seeking the release of those funds."'^^ In 2008, the 
United States indicted Puebla, two of its officers,"'^^ and two other 
individuals on drug smuggling and money laundering charges.'*^'’ In 
2009, one of the defendants was arrested and, in 2010, pled guilty to 
conspiracy to launder money and was sentenced to 14 months in 
prison, while the other defendants, including Puebla, were placed on 


See United States v. Wachovia Bank N.A. . Case No. 10-20165-CR-Lenard (USDC SDFL), 
Factual Statement, Exhibit A to Deferred Prosecution Agreement (3/16/2010), at f 12. 

Id,att 11. 

See Article 95 his of the General Law of Auxiliary Credit Organizations. 

See 31 use § 5318(h)(1) and § 5312(J) and (R). 

Casa de Cambio Puebla. S.A. v. United States . Case No. 10-20165 (USDC SDFL), Petition 
for Return of Seized Funds (7/l2/2007Xhereinafter “Puebla Petition”), at 4. 

Puebla Petition, at 2-3. 

™ See id., at 19. 

See United States v. Casa de Cambio Puebla. S.A.. Jose A. Gutierrez de Velasco Hovos. 
Amador Cordero Vasquez. Pedro Alfonso Alatorre Damv, a/k/a “Pedro Barraza Uruguasteeui.” 
and Leonardo Va s quez Estrada . Case No. 08-20097-CR-Graham (USDC SDFL), Indictment 
(2/1/2008, unsealed 11/4/2009). 

Id., Plea Agreement (7/9/2010), at H 1. 
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fugitive status,'*^'’ In addition, in 2010, Wachovia Bank entered into a 
deferred prosecution agreement with the U.S. Department of Justice for 
having failed to maintain an effective anti-money laundering program''^^ 
in connection with its casa de cambio business, including with respect to 
Puebla.'*’* Those legal proceedings, which involved a major Mexican 
CDC and major U.S. bank, received widespread attention.'*’*’ 

Puebla was a longtime customer of HBMX, having first begun a 
relationship with HBMX’s predecessor, Bital, in the IPSOs.'*'**’ In 2004, 
Puebla also opened a U.S. banknotes account with HBUS.'*'*' By 2007, 
Puebla had several accounts at HBMX, as well as an outstanding loan.'*'” 
After the United States seized the company’s funds at Wachovia Bank in 
May 2007, HBUS suspended the Puebla account two weeks later and 
closed the account in June 2007.'*'*’ HBMX did not actually close the 
account until November 2007, and then only after the Mexican Attorney 
General served an order on the bank seizing Puebla funds. 

Puebla at HBMX. At the time of the May 2007 seizure of more 
than $1 1 million in Puebla funds at Wachovia Bank, HBMX was already 
reeling from another money laundering scandal involving a March 2007 
seizure of cash, weapons, and wire transfer records from the Mexican 
residence of longtime customer, Zhenly Ye Gon and his pharmaceutical 
companies, Unimed Pharm Chem, Constructora e Inmobiliaria Federal, 
and Unimed Pharmaceutical.'*'*'* That seizure had triggered an intensive 
review by senior HBMX officials of the Ye Gon-related accounts as well 
as HBMX’s overall AML program. The Puebla case added another high 


See id., docket entries 12, 34, 38-42. 

United States v. Wachovia Bank N.A. . Case No. 10-20165-CR-Lenard (USDC SDFL), 
Deferred Prosecution Agreement (3/16/2010), at J 3. 

Id., Factual Statement, Exhibit A to Deferred Prosecution Agreement (3/16/2010), at f 1 1. 

See, e.g., “U.S. freezes Mexico exchange bureau accounts for money laundering,” EFE News 
Services Inc. (6/9/2007); see also “Wachovia is Under Scrutiny in Latin Drug-Money Probe,” 
Wall Street Journal . Evan Perez and Glenn R. Simpson, April 26, 2008. In addition, the U.S. 
State Department discussed the Puebla case in its 2009 International Narcotics Control Strategy 
Report. See 2009 International Narcotics Control Strategy Report, U.S. Department of State, at 
356-357. 

See, e.g., July 2007 email exchanges among HBMX Paul Thurston, John Rendall, Ramon 
Garcia, and others, “[subject redacted by HSBC], HSBC OCC 8875132-135. 

See 6/5/2007 email from HBUS Daniel Jack to HBMX LeopoJdo Barroso, “HSBC in Mexico 
-AML Compliance & Casa dc Cambio,” HSBC-PSI-PROD-0095913. 

See 5/1/2008 memorandum [carrying incorrect date of 5/1/2007] from HBUS Judy Stoldt and 
Gloria Stazza to HBUS Denise Reilly, “Wall Street Journal Article Regarding Wachovia,” OCC- 
PSI-01358515. 

See 12/20/2007 HBUS Compliance Certificate, OCC-PSI-00227523, at 5. 

See In re Zhenly Ye Gon . Case No. l:07-cr-00181-EGS (USDC DC), Complaint for Anest 
with a View Towards Extradition (9/15/2008) (hereinafter “Ye Gon Extradition Complaint”), at 
13; “Mexican Fugitive and Co-Conspirator Arrested on U.S. Drug, Money Laundering Charges,” 
U.S. Drug Enforcement Administration press release (7/24/2007), 
http://www.iustice.gov/dea/pubs/states/newsrel/wdo072407.html . 
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profile problem for HBMX, not least because Puebla also handled Ye 
Gon funds/"'"’ 

In late May 2007, HBUS learned of the seizure of Puebla funds at 
Wachovia Bank, and quickly suspended activity in the Puebla 
correspondent account at HBUS. It is not clear when HBMX first 
learned of the seizure, but by early June, both banks were considering 
whether to close their Puebla accounts. On June 5, 2007, Leopoldo 
Barroso, HBMX’s AML head, received an email from a senior AML 
Compliance officer at HBUS, Daniel Jack, asking if Mr. Barroso was the 
new AML director at HBMX and “wonder[ing] what relationships” 
HBMX had with Puebla."'"'^ Mr. Barroso responded that HBMX had “a 
few DDAs [Demand Deposit Accounts] and a loan” with Puebla."*"'* He 
also indicated that HBMX planned to “decide within the next 5 days” 
whether to terminate its relationship with Puebla, and asked Mr. Jack to 
let him know if HBUS decided to take that action."'"'^ 

Mr. Jack noted in a later email that he did not tell Mr. Barroso 
during the June 5 email exchange about “the DBA seizure or Wachovia 
closing [Puebla] acc[oun]ts,” although it is possible that LIBMX already 
knew.^^" Mr. Jack also did not disclose that HBUS had already 
suspended Puebla’s account activity a week earlier, on May 31, 2007."'*' 
Mr. Jack told the Subcommittee that, soon after the June 5 email 
exchange, he told Mr. Barroso that HBUS had shut down its account 
with Puebla."**^ When Mr. Barroso asked if HBUS could provide him 
with a list of their banknote customers in Mexico and the amount of U.S. 
dollars they exported from Mexico to the United States, Mr. Jack 
demurred, responding that there were “privacy issues” but that he would 
“see what info” he could share."*” This exchange between senior AML 


See 10/13/2007 “Reportan ruta de Ye Gon para ‘blanquear’ dinero” (“Ye Gon reported path 
to ‘launder’ money”), El Universal . Francisco Gomez, www.eluniversal.com.mx (reporting that 
the Mexican agency SHCP had determined that, from 2003 to 2006, Mr. Ye Gon and his 
companies had moved $90 million through four major Mexican banks and multiple casas de 
carabio, including HBMX and Puebla), cited in 7/18/2008 Report of Findings (Update) for 
Consultoria Intemacional Banco, prepared by HBUS Financial Intelligence Unit, OCC-PSI- 
00247712. 

See 5/31/2001 email from HBUS Alan Ketley to HBUS Gyanen Kumar and others, “With 
immediate effect we are suspending all activity with the subject client,” HSBC PSI PROD 
0095908-910; 6/6/2007 email from HBUS Daniel Jack to HBUS Alan Ketley, Re: HSBC in 
Mexico -- AML Compliance and Casa de Cambio, HSBC-PSI-PROD-0095912. 

6/5/2007 email from HBUS Daniel Jack to HBMX Leopoldo Barroso, “HSBC in Mexico -- 
AML Compliance and Casa de Cambio,” HSBC-PSI-PROD-00959I4. 

““ 6/6/2007 email from HBUS Daniel Jack to HBUS Alan Ketley, Re: HSBC in Mexico - AML 
Compliance and Casa de Cambio, HSBC-PSI-PROD-0095912. 

449 id_ 

Id. 

See 5/31/2007 email from HBUS Daniel Jack to HBUS Alan Ketley, “N-NY & Casa de 
Cambio Puebla in Mexico,” HSBC-PSl-PROD-0095908; 5/30/2007 email from HBUS Gyanen 
Kumar to “US Banknote Dept Sales Team,” “Casa de Cambio Puebla,” HSBC OCC 7688742. 
Subcommittee interview of Daniel Jack (3/13/2012). 

6/6/2007 email from HBUS Daniel Jack to HBUS Alan Ketley, “HSBC in Mexico - AML 
Compliance and Casa de Cambio,” HSBC-PSf-PROD-0095912. 
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Compliance personnel at HBUS and HBMX suggests that information 
sharing between the two banks was guarded, rather than automatic. 

In early July 2007, HBMX Compliance head, Ramon Garcia, 
disclosed in an internal weekly report that went to HSBC Group 
Compliance that the HBMX CCC Committee had considered closing the 
Puebla account, but decided instead to retain the client. In response, 

John Root, a senior HSBC Group Compliance officer, sent him a 
blistering email criticizing the CCC Committee for “rubber-stamping 
unacceptable risks.” This email, cited earlier in a discussion of HBMX’s 
CCC Committee, is relevant again, because it applies to the Puebla 
account. Mr. Root wrote: 

“It looks like the business is still retaining unacceptable risks and 
the AML committee is going along after some initial hemming and 
hawing. I am quite concerned that the committee is not 
functioning properly. Alarmed, even. I am close to picking up the 
phone to your CEO.”^^'' 

Mr. Root’s email went on to harshly criticize the CCC 
Committee’s decisions to keep open accounts for Mr. Ye Gon and 
another accountholder under suspicion for money laundering, before 
describing as “strike three,” the decision to retain the Puebla 
“relationship after USDl 1 million was seized by the authority in 
[Redacted by HSBC] account with Wachovia in Miami.” Mr. Root 
continued: 

“What?! The business was okay with this? The AML Committee 
just can’t keep rubber-stamping unacceptable risks merely because 
someone on the business side writes a nice letter. It needs to take a 
firmer stand. It needs some cojones. We have seen this movie 
before, and it ends badly. 

Mr. Garcia responded that he was escalating the decision on 
Puebla to the HSBC Mexico CEO, since the relevant HBMX business 
division had disagreed with a Compliance recommendation to close the 
account.**^® The next week, HSBC Mexico CEO Paul Thurston agreed 
with closing the account.''^’ Mr. Rendal! suggested alerting their U.S. 


7/17/2007 email from HSBC John Root to HBMX Ramon Garcia, with copies to Susan 
Wright, David Bagley, and Warren Learning, “Weekly Compliance Report 02JUL-06JUL07,'’ 
HSBC OCC 8875925-927. 

Id. 

See 7/18/2007 email from Ramon Garcia to HBC David Bagley, “Weekly Compliance Report 
02JUL-06JUL07,” HSBC OCC 8875925. 

See July 2007 email exchanges among HBMX Paul Thurston, John Rendall, Ramon Garcia, 
and others, “[subject redacted by HSBC], HSBC OCC 8875132-135. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00287 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



274 


VerDate Nov 24 2008 


100 

counterparts at HBUS, since HBUS also had a correspondent 
relationship with Puebla.'*^* 

Despite Mr. Thurston’s July 2007 decision to close the Puebla 
account, HBMX did not actually close or freeze its Puebla account for 
another four months, allowing Puebla continued use of HBMX’s 
correspondent account at HBUS.''^’ HBMX finally closed the account in 
November 2007, after receiving a seizure warrant from the Mexican 
Attorney General seeking all funds in accounts opened in the name of 
Puebla or related parties. 

The seizure warrant named 91 parties related to Puebla, of which 
81 were HBMX customers who presumably were also using the HBMX 
correspondent account at HBUS.''*' HBMX later determined that, from 
January 1 though October 31, 2007, a period of ten months, 
approximately 650 wire transactions had cleared through the “HBSC 
Mexico correspondent account” at HBUS, where Puebla was either the 
originator or the beneficiary Of those transactions, 1 70 wire transfers 
totaling $7.3 million were conducted by six individuals or entities linked 
to Puebla.'**" All of those wires were later traced back to the Puebla 
accounts frozen at Wachovia.'**'* The OCC later observed: “[T]hese 
discoveries about the level of CDC activity should have raised concerns 
for HBUS and alerted the bank to the need to obtain basic due diligence 
for HSBC Mexico and other Group Entities.”''** 

Puebla at HBUS. While HBMX exposed HBUS to considerable 
money laundering risk through the transactions it conducted for Puebla, 


458 

See, e.g., 10/27/2007 Compliance Certificate, prepared by HBUS Compliance and provided 
to HSBC Group Compliance, HSBC PSI PROD 0095916-922, at 91 9 (listing major HBUS 
compliance issues, including “HBUS Ban[k]notes/Casa De Cambio Puebla (RED 3870): No 
transactions have been conducted with Casa de Cambio Puebla SA de CV in Mexico since 
1 JUN07. Although HBMX continues to deal with this Money Services Business, HBUS plans to 
formally terminate the Banknotes relationship soon.”). 

See 12/1 1/2007 email from HBMX Leopoldo Barroso to HBUS Daniel Jack, “HSBC & Casa 
de Cambio Puebla in Mexico - Negative Press,” HSBC OCC 7688750. The Attorney General 
identified 91 related parties. 

Sec 5/1/2008 memorandum [carrying incorrect date of 5/1/2007] from HBUS Judy Stoldt and 
Gloria Stazza to HBUS Denise Reilly, “Wall Street Journal Article Regarding Wachovia,” OCC- 
PSI-01358515. 

Id.; 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA-AML’) Examination - Program Violation (12 U.S.C. §1818(s); 12 C.F.R. 

|2 i .2 1 ),” at 24. [Sealed Exhibit.] 

Id. See also 5/1/2008 memorandum [carrying incorrect date of 5/1/2007] from HBUS Judy 
Stoldt and Gloria Stazza to HBUS Denise Reilly, “Wall Street Journal Article Regarding 
Wachovia," OCC-PS1-013585I5. 

5/1/2008 memorandum [carrying incorrect date of 5/1/2007] from HBUS Judy Stoldt and 
Gloria Stazza to HBUS Denise Reilly, “Wall Street Journal Article Regarding Wachovia,” OCC- 
PSI-01358515. 

9/13/2010, Supervisory Letter HSBC-2010-22, OCC Sally Belshaw to HBUS Irene Domer 
and David Bagley, Re; Bank Secrecy Act/ Anti-Money Laundering (‘BSA-AML') Examination 
-Program Violation (12 U.S.C. §l818(s); 12 C.F.R. §21.21),” at 25. [Sealed Exhibit.] 
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HBUS also incurred risk from its own direct dealings with Puebla, 
including a U.S. banknotes account it opened for Puebla in 2004. In just 
three years, Puebla substantially boosted its use of that U.S. banknotes 
account, swelling its sales of U.S. dollars to HBUS from $18 million in 
February 2005, to $1 13 million in March 2007, a tenfold increase. 

When AML monitoring alerts raised red flags about the growing 
flood of U.S. dollars from Puebla, HBUS bankers provided a number of 
explanations for the increases, none of which considered whether Puebla 
might be accepting illegal drug proceeds that drug cartels were then 
smuggling into Mexico from the United States. For example, when 
Puebla’s U.S. dollar volumes increased by $3 million between 
November 2005 and February 2006, an HBUS banker wrote that the 
“[cjlient is slowing [sic] growing its business volume as a result of better 
cash flow thanks to dealing with HSBC i.e., faster turnaround of 
banknotes.”''^’ When the volume jumped by another $13 million the 
very next month, the HBUS banker offered the same explanation, typo 
and all: “[cjlient is slowing [sic] growing its business volume as a result 
of better cash flow thanks to dealing with HSBC i.e., faster turnaround 
of banknotes.” This cut-and-paste explanation offers no evidence that 
the banker used due diligence to analyze the sudden multi-million-dollar 
increase. When the volume climbed again, by more than $20 million 
from April 2006 to September 2006, to over $76 million, the HBUS 
banker asked for an explanation wrote: “Mexico as a whole and more 
specifically [Puebla] is the premier country/msb [money service 
business] USD [U.S. dollar] remitter. There is [a] large population of 
Mexican[s] working in the U.S. during the summer months 
(landscaping) that send money back home (religiously) to their 
families.”''^* While that might have been true, it was equally true when 
Puebla transmitted just $27 million back to Mexico around the same 
time the previous year, a nearly $50 million difference.''®^ By the end of 
March 2007, the month before Puebla funds were seized at Wachovia 
Bank, its monthly U.S. dollar transactions at HBUS had exceeded $1 13 
million.''™ 

On May 30, 2007, two weeks after the seizure of Puebla funds on 
May 16, HBUS ordered all activity in the Puebla account to be 
suspended with “immediate effect.”'*’' A week later, on June 5, 2007, 
HBUS AML Compliance officer Daniel Jack contacted HBMX to 

Spreadsheet: Banknotes - NY Selected Customers’ Activity Alerts & Traders’ Expianations 
for USD Purchases & Sales from 2005-2009, OCC-PSI-0005890-894. 

Id. at 892. 

Id. at 893. 

Id. at 892. 

'‘™ Id. at 893. 

5/31/2007 email from HBUS Gyanen Kumar to HBUS Alan Ketley and others, “Casa de 
Cambio Puebla,” HSBC-PSI-PROD-0095910. See also 5/31/2007, email from HBUS Daniel 
Jack to HBUS Alan Ketley, “N-NY & Casa de Cambio I*uebla in Mexico,” HSBC-PSl-PROD- 
0095908. 
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ascertain whether Puebla also had accounts there, which would continue 
to expose HBUS to the money laundering risks associated with Puebla 
through the HBMX correspondent account.'*’* 

HBUS terminated its Banknotes relationship with Puebla after 
conducting a site visit on June 1 1, 2007.'*’^ In June and July 2007, 
HBUS was contacted by multiple U.S. law enforcement agencies 
regarding its correspondent accounts with financial institutions in 
Mexico, including Puebla. On June 25, 2007, for example, the Drug 
Enforcement Administration and other law enforcement told HBUS of 
their interest in its “banknote trading with” Puebla.'*’'* On July 17, 2007, 
HBUS met with “an analyst from the National Drug Intelligence Center 
of the US Dep[artmen]t of Justice to explain our business and AML 
program along with discussing cross-border issues.”'*’^ On July 20, 
2007, HBUS met with FinCEN specialists “to discuss our wholesale 
banknotes business with clients in Mexico as well as our AML program, 
CTR filing and related issues.”'*’* The extent to which HBUS informed 
HBMX about the level of U.S. law enforcement interest in Puebla is 
unclear. 


(b) Sigue Corporation 

Another HBMX client that used HBMX’s correspondent account 
at HBUS was Sigue Corporation (Sigue), a U.S. licensed money service 
business incorporated in Delaware but headquartered in California.'*” 
Sigue’s primary business activity was transmitting funds on behalf of 
third parties from the United States to Mexico and Latin America.'*’* 
Acting through its operating company, Sigue LLC, it arranged for the 
remittance of U.S. dollars through a network of more than 7,500 
“authorized delegates” or agents across the United States, most of which 
were small businesses under contract to offer Sigue’s money 

. . . 479 

transmission services. 

On January 28, 2008, Sigue entered into a deferred prosecution 
agreement with the U.S. Department of Justice, Drug Enforcement 
Administration, and Internal Revenue Service, admitting that it had 


See 6/5/2007 email from HBUS Daniel Jack to HBMX Leopoldo Barroso, “HSBC in Mexico 
- AML Compliance and Casa de Cambio,” HSBC-PSI-PROD-0095914, See also 10/26/2007 
memorandum from HBUS Carolyn Wind to HNAH Janet Burak and others, HSBC-PSI-PROD- 
0095919. 

See 1 2/20/2007 HBUS Compliance Certificate, OCC-PSI-00227523, at 5. 

474 

Id. at 2. 

Id. 

See United States v. Sigue Com, and Sigue LLC . Case No. 4:08CR54 (USDC EDMO), 
Deferred Prosecution Agreement Factual Statement (1/28/2008), at 1. 

Id. 
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failed to maintain an effective anti-money laundering program.'"*® As 
part of the agreement, Sigue admitted to “serious and systemic” 
violations of U.S. AML requirements from 2003 to 2005, which 
“allowed tens of millions of dollars of suspicious financial transactions 
to be conducted through Sigue, including transactions involving funds 
represented by undercover U.S. law enforcement agents to be drug 
proceeds.”'"*' The drug proceeds which U.S. undercover agents 
transmitted through Sigue totaled more than $500,000, and were sent 
through 59 separate Sigue agents in 22 states.'"*^ The undercover federal 
agents had explicitly informed Sigue agents that they were transmitting 
illegal drug proceeds, structured the transactions to evade U.S. reporting 
obligations, and wired the funds to seven law enforcement agents in 
Mexico City, creating a money laundering pattern that Sigue should 
have detected and reported as suspicious activity, but did not.'"*® Sigue 
admitted its failure to adequately supervise and control its agents, 
“effectively monitor and investigate high risk transactions,” “establish 
an effective risk-based AML program,” and “exercise sufficient 
enhanced due diligence for high-risk transactions and customers.”'"*'" As 
part of the agreement to defer prosecution of the company, Sigue agreed 
to forfeit $15 million in suspect funds and spend $9.7 million to 
strengthen its AML program.'"*^ 

The day after the deferred prosecution agreement was made public 
in court, an article discussing Sigue’s misconduct and “record penalty” 
for a money service business concluded that a “case such as that against 
Sigue gives banks yet another reason to treat MSBs [money service 
businesses] as pariahs. David Bagley, HSBC Group Compliance 
head, sent a copy of the article to Susan Wright, head of AML 
Compliance for HSBC Group, with a handwritten note; “Obvious 
question - 1 assume they are not our customer.”'*®’ His assumption, 
however, was incorrect. 

After learning that Sigue was, in fact, a client of HBMX, on 
February 1, 2008, Ms. Wright sent an email to HBMX Compliance head 
Ramon Garcia about the account.'"** She noted that, despite the deferred 
prosecution agreement and Sigue’s admission of wrongdoing, HBMX’s 


"“Id. 

Id. 

“Id. 


Id. at 12*15; Deferred Prosecution Agreement at m 5, 9. 

“Money Laundering ‘Sting’ led to MSB’s Record Penalty, Says Legal Pact,’’ Complinet . Brett 
Wolf, (1/29/2008), reprinted at HSBC OCC 8875020. 

See handwritten note on copy of article, “Money Laundering ‘Sting’ led to MSB’s Record 
Penalty, Says Legal Pact,’’ Complinet . Brett Wolf, (1/29/2008), HSBC OCC 8875020. 

48S 211 /2008 email from HSBC Susan Wright to HBMX Ramon Garcia, with copies to HSBC 
Warren Learning and John Root, no subject line, HSBC OCC 8875141. 
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commercial banking division wanted to retain the account. She warned 
that, if the account were retained, it: 

“will need to be closely monitored and subject to frequent reviews 
(recommendation for quarterly reviews in current circumstances). 
The actions by the US regulators should be used as a trigger event 
and our due diligence on this client updated. In this connection the 
high risk profile that is in place for Financial Institutions should be 
used. ... If we only see batched transactions then we are relying on 
the screening undertaken by [Sigue]. It would be helpful to 
understand the nature of these transactions and currencies involved 
- could you provide me with an overview? We should also 
monitor the volume - you mentioned that we are not [Sigue’s] only 
bankers in Mexico. If, however, any of the other banks withdraw 
then we may well see the volume of transactions through us rise 
and our exposure/risk will increase with a corresponding increase 
in the cost of monitoring, etc.”‘'*^ 

Her email was forwarded to HSBC Compliance head David 
Bagley who, on February 4, 2008, forwarded it to HBMX CEO Paul 
Thurston and recommended closing the Sigue account.'*’'* Mr. Bagley 
noted Sigue’s “serious and systemic violations and a record fine” due in 
part to the fact that Sigue “had little control over its numerous agents.” 
He wrote: “Whilst the company will now need to take steps to address 
these deficiencies this will inevitably take some time, and instilling the 
appropriate culture within the business even longer.” 

Mr. Thurston forwarded Mr. Bagley’s recommendation to John 
Rendall, HBMX COO, and asked for more information about the 
account.'*” Mr. Rendall reminded him that “a couple of months back,” 
HBMX Compliance had recommended closing the Sigue account, but 
was opposed by the HBMX commercial banking division (CMB) that 
wanted to keep the account open.'*’^ The issue was then elevated to Mr. 
Thurston who decided against closing the account.'*’^ Mr. Rendall 
explained: 

“Our recommendation, which you supported, was to maintain this 
relationship. It was based on the following factors: A) our CMB 
team in Tijuana were relatively on the top of the case; B) the 


«9 

2/4/2008 email from HSBC David Bagley to HBMX Paul Thurston, [subject redacted by 
HSBC], HSBC OCC 8875020-021. 

See 2/4/2008 email from HBMX John Rendall to HBMX Paul Thurston, “[redacted by 
HSBC],” HSBC OCC 8875139. 

See 2/4/2008 emails from HBMX John Rendall and HBUS David Bagley, “[redacted by 
HSBC],” HSBC OCC 8875139-40. 

See 2/4/2008 email from HBMX John Rendall to HBMX Paul Thurston, “[redacted by 
HSBC]," HSBC OCC 8875139. 


I 
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events for which [Sigue] have been fined were relatively historic - 
from memory, 2-3 years ago, and significant improvements had 
been made since then.”"'’'* 

Despite Sigue’s admission of wrongdoing, its admission of lax controls 
over the actions taken by its agents, and the recommendation of the head 
of HSBC Group Compliance to close the account, Mr. Thurston decided 
once again to retain it and to continue to provide Sigue with U.S. dollar 
transactions through the HBMX accounts at HBUS. 

Mr. Thurston told the Subcommittee that Sigue was one of the few 
accounts he decided to retain over the objection of HBMX Compliance. 
He explained that he did so, because he believed the issues were in the 
past, and Compliance head Ramon Garcia had met with Sigue and 
believed it was meeting its commitment to strengthen its AML 

495 

program. 

Also on February 4, 2008, after reviewing an earlier media report 
identifying HBMX as a “pay partner” for Sigue,*’’® the OCC AML 
Examiner then reviewing HBUS’ AML program “requested HSBC 
management to determine what, if any, involvement HSBC had with 
Sigue.”*”^ The OCC inquiry triggered an inquiry into the Sigue account 
by HBUS, which had not been privy to the exchanges between HSBC 
Group and HBMX about the account.*”* 

On February 5, 2008, HBUS informed the OCC AML Examiner 
that while Sigue was not an HBUS client, it was a client of HBMX and 
had executed U.S. dollar wire transfers through HBMX’s correspondent 
accounts at HBUS.*”’ In an internal memorandum summarizing the 
information, the OCC AML Examiner wrote that HBUS “acts as a pass- 
through for wire transfers for Sigue.”*'” He noted that, for “the period of 
January through December 2007 1 59 wire transfers passed through 
HSBC originated by Sigue for the benefit of’ HBMX, involving more 


See 1/2/2008 email from HBUS Susan Wright to HBMX Ramon Garcia, “[redacted by 
HSBC],” HSBC OCC 8875141. 

Subcommittee interview of Paul Thurston (5/1/2012). 

See “California MSB Faces Record Fine From Justice Department in AML Case,” Portent 
Inform . Brian Monroe (1/1 1/2008); see also 2/5/2008 OCC memorandum to files, “HSBC 
Monitoring/Reputation Risk,” OCC-PSI-01416736 [sealed exhibit], 

2/5/2008 OCC memorandum to files, “HSBC Monitoring/Reputation Risk,” OCC-PSl- 
01416736, at 2. [Sealed Exhibit.] 

The OCC Examiner noted internally at the time: “Although HSBC management was 
previously aware of media reports concerning Sigue, up to the time of our request, HSBC 
management had not conducted any enhanced due diligence and/or in-depth analysis to 
determine HSBC’s potential exposure resulting from the prosecution of Sigue.” Id. at 2 
(emphasis in original omitted). 

See 2/5/2008 OCC memorandum to files, “HSBC Monitoring/Reputation Risk,” OCC-PSl- 
01416736, at 3. [Sealed Exhibit.] 

500 
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than S485 million.^'” He wrote that HBUS management had agreed that 
those wires should have triggered a review of the account activity 

The OCC AML examiner saw the events surrounding the Sigue 
account as emblematic of a broader problem involving inadequate 
monitoring and weak AML investigations by HBUS of clients using 
correspondent accounts to conduct suspect transactions. In the internal 
memorandum, the OCC AML examiner wrote; 

“Over the past few years, there have been a number of instances 
where the OCC has brought to the attention of HSBC management 
negative media events, publicized indictments, etc., resulting in the 
need for HSBC management to conduct ad-hoc reviews to 
determine potential reputational risk. In the majority of these 
instances, HSBC management was either not aware of these events 
or had not been pro-active in determining the level of potential 
exposure due to these events.”^® 

He concluded that if he had “not intervened it is highly unlikely that 
HSBC management would have performed the proper level of due 
diligence, [or] determined the potential exposure to risk” in the Sigue 
matter.^”'* 

Two months later, on April 26, 2008, a major U.S. newspaper 
published an article describing an ongoing Federal probe of allegations 
that Wachovia Bank was laundering drug proceeds supplied by Mexican 
casas de cambio.^°^ The article also mentioned Sigue, triggering a 
second round of inquiries at HBUS into the status of the Sigue account 
which remained open at HBMX and continued to execute U.S. dollar 
transactions through the HBMX correspondent account at HBUS. 

HBUS AML Compliance officer Judy Stoldt and HBUS 
investigator Gloria Stazza sent a memorandum to their supervisor 
Denise Reilly, a senior HBUS AML Compliance officer, summarizing 
the article and discussing HBUS’ exposure to the casas de cambio 
named in the article.^”* The memorandum began: 

“HBUS does not hold any account for any casa de cambio 
mentioned in the WSJ article. The only HBUS connection to 

Id. HBUS apparently provided this wire transfer information to the OCC, in response to the 
OCC request for more information about HBUS’ involvement with Sigue. 

“Hd. 

Id. 

“Hd.at 1. 

See “Wachovia Is Under Scrutiny in Latin Drug-Money Probe,” Wall Street Journal. Evan 
Perez and Glenn Simpson (4/26/2008). 

See 5/1/2008 memorandum [carrying incorrect date of 5/1/2007] from HBUS Judy Stoldt and 
Gloria Stazza to HBUS Denise Reilly, “Wall Street Journal Article Regarding Wachovia,” OCC- 
PSI-01358516-5!7. 
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activity involving those named casas de cambio is activity that was 
conducted through our correspondent accounts, and most notably 
through our account with HSBC Bank Mexico (HBMX).”^*” 

The May 2008 memorandum deseribed Sigue as a money service 
business that had allegedly processed $24.7 million in “suspicious 
money remittances related to drug-trafficking proceeds.”^”* It explained 
that HBUS had first taken note of Sigue when it entered into a record 
$25 million settlement with the Justice Department in January 2008, 
and, as a result, conducted a review of the Sigue accounts, wire transfer 
activity, and whether either Sigue or its founder, Guillermo de la Vina, 
had been “the subject of any other negative news or law enforcement 
activity.”^°^ The memorandum reported that, despite having no direct 
account with Sigue, a “wire review” found that, during 2007, Sigue had 
sent 159 wire transfers for $485 million through HBMX’s correspondent 
account, all of which were originated by Sigue and sent to its own 
account at HBMX, which HBUS viewed as suspicious.^'” The 
memorandum noted that HBUS had contacted HBMX to discuss Sigue, 
and HBMX disclosed that it had imposed “parameters” on its 
relationship with Sigue, including limiting Sigue to “conducting 
transactions for individual customers to $2,000 USD per transaction.”^' ' 
The memorandum did not explain, however, how that $2,000 limit 
affected the actual wire activity in 2007, in which each wire transfer 
apparently batched numerous underlying wires without identifying 
individual client transactions. The memorandum also stated that HBUS 
had found that a Sigue employee had been indicted for assisting drug 
traffickers with money laundering,^ and on another occasion Sigue was 


“’Id, all. 

Id. at 3. See also 1/28/2008 “Sigue Corpt>ration and Sigue LLC Enter into Deferred 
Prosecution Agreement and Forfeit $15 Million to Resolve Bank Secrecy Act Violations.” press 
release issued by U.S. Department of Justice, 

http ://\vww.justicc,gov/opa/pr/2008/.lanuary/08 crm_068. him! (stating that “more than $24.7 
million in suspicious transactions were conducted through registered agents of Sigue, including 
transactions conducted by undercover U.S. law enforcement agents using funds represented to be 
proceeds of drug trafficking”). 

5/1/2008 memorandum [carrying incorrect date of 5/1/2007] from HBUS Judy Stoldt and 
Gloria Stazza to HBUS Denise Reilly, “Wall Street Journal Article Regarding Wachovia,” OCC- 
PSI-01358516-517, at 3. 

Id. at 4. The memorandum did not mention that this wire analysis was compiled for the OCC, 
at its request, in February 2008. According to Sigue, altogether during 2007, it sent a total of 
more than $1.8 billion in wire transfers through its HBMX account to a Sigue affiliate in Mexico. 
Subcommittee briefing by Sigue (7/25/2012). 

' 5/1/2008 memorandum [carrying incorrect date of 5/1/2007] from HBUS Judy Stoldt and 
Gloria Stazza to HBUS Denise Reilly, “Wall Street Journal Article Regarding Wachovia,” OCC- 
PSI-01358516-5!7, at 4, 

Id. at 3. The Subcommittee has not obtained evidence of an instance in which a Sigue 
employee has been indicted for assisting drug traffickers with money laundering; however, in 
2006, a Sigue agent pled guilty to money laundering and conspiracy to distribute illegal drugs, 
and a factual statement supporting his guilty plea described his use of Sigue wire transfers to 
launder illegal drug proceeds from 2003 to 2005. See United States v. Gerardo Alvarado 
Alvarado . Case No. 1 ;05CR354'1 (USDC MDNC), Plea Agreement (2/24/2006) and Factual 
Basis in Support of Guilty Plea (2/24/2006). 
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described as having allowed $295,000 to be transferred from an account 
at another bank to an illegal alien deported to Mexico,^'^ while also 
noting that Sigue itself had not been implicated in either matter. Despite 
this cascade of troubling information, for the next two years, little or no 
action appears to have been taken by HBUS or HBMX with respect to 
the Sigue account at HBMX. 

On January 30, 2009, having determined that Sigue satisfied the 
requirements of the Deferred Prosecution Agreement the Justice 
Department requested and the court granted dismissal of the criminal 
case against the company. 

In 2010, as part of an OCC AML examination, an OCC AML 
examiner reviewed the May 2008 memorandum regarding Sigue and 
asked what followup actions had been taken in response to it, in 
particular whether Sigue had ever been added to the HBUS “wire filter” 
for purposes of enhanced due diligence and whether any further analysis 
had been done of Sigue account activity HBUS personnel responded 
that Sigue had not been added to the wire filter, the 2008 memorandum 
had not been “passed to anyone,” and the HBUS Financial Intelligence 
Group had not conducted any additional due diligence with respect to 
Sigue.^'® HBUS explained that “Sigue was not added to the wire filter 
as Sigue entered into a written agreement with the Department of Justice 
to enhance its AML program and was not (per the investigative search) 
the subject of any other money laundering investigations.”*'^ 

Essentially, despite Sigue’s deferred prosecution in 2008, admission of 
wrongdoing caused in part by an inadequate AML program, past HBMX 
alerts flagging unusual transactions, past HBUS wire transfer analysis 
identifying suspicious activity, past recommendations by Compliance to 
close the account, and past regulatory inquiries, HBUS did not conduct 
any enhanced monitoring or analysis of the Sigue account. 


5/1/2008 memorandum [carrying incorrect date of 5/1/2007] from HBUS Judy Stoldt and 
Gloria Stazza to HBUS Denise Reilly, “Wall Street Journal Article Regarding Wachovia,” OCC- 
PSI-01358516-517, at 3-4. The memorandum referred to an article as the source of this 
information. Id. at 3; see also “Suspicious wire transfers, documents lead to raids in NW Ark,” 
Associated Press, Jon Gambrell (5/25/2007). The referenced matter involves criminal 
proceedings in which the employee of a Sigue agent (who had been deported to Mexico) was 
charged with conducting an unlicensed money transmitting business and supporting illegal aliens 
in the United States; no drug proceeds were involved. See United States v. Honorato Pedroza. 
Case No. 5:07-cr-50050-JLH (USDC WDAK), Indictment (6/27/2007). 

See United States v. Sigue Corp. and Sigue LLC . Case No. 4:08CR54 (USDC EDMO), Order 
for Dismissal with Prejudice (1/30/2009). 

See 2/16-18/2010 exchange of emails among Federal Reserve Patricia Brunner, HBUS Denis 
O’Brien, Judy Stoldt, and others and OCC Joseph Boss, “June 2008 Audit ~ Payment Services,” 


OCC-PSI-00378989. 

^"'Ud. 

5/1/2008, memorandum [dated 5/1^007, sic] from HBUS Judy Stoldt and HBUS Gloria 
Stazza to HBUS Denise Reilly, Re: Wall Street Journal Article Regarding Wachovia, OCC-PSI- 
01358517. 
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HBMX’s relationships with Puebla and Sigue, a Mexican casa de 
cambio and a U.S. money service business that remitted funds to Mexico 
and Latin America, demonstrate its tolerance for high risk clients, and 
how those clients subjected, not only HBMX, but also HBUS to 
substantial money laundering risks. The accounts also disclose how 
both banks failed to conduct effective monitoring of some financial 
institution accounts and transactions, even when faced with evidence of 
lax AML controls and criminal proceedings involving money 
laundering. They also expose an absence of regular information sharing 
and coordinated AML efforts between HBUS and HBMX to address 
common AML problems, including limited communications about 
particular clients and actions taken to restrict or close accounts. 

(2) Cayman Island U.S. Dollar Accounts 

A second example of high risk HBMX clients posing money 
laundering risks to HBUS are the tens of thousands of U.S. dollar 
accounts maintained by HBMX through its branch office in the Cayman 
Islands. This branch office is a shell operation with no physical 
presence in the Caymans, and is managed by HBMX personnel in 
Mexico City who allow Cayman accounts to be opened by any HBMX 
branch across Mexico. Total assets in the Cayman accounts peaked at 
$2.1 billion in 2008. Internal documents show that the Cayman accounts 
had operated for years with deficient AML and KYC controls and 
information. An estimated 1 5% of the accounts had no KYC 
information at all, which meant that HBMX had no idea who was behind 
them, while other accounts were, in the words of one HBMX 
compliance officer, misused by “organized crime.” Because a primary 
feature ofthe Cayman accounts is their use of U.S. dollars, HBMX has 
maintained the account assets and conducted account transactions 
through its U.S. dollar correspondent accounts at HBUS. There is no 
documentation showing that HBUS knew or was informed that, by 
providing HBMX with correspondent accounts, it was also providing 
access to the U.S. financial system to high risk accountholders in the 
Caymans. By moving the Cayman transactions through its HBUS 
accounts, HBMX exposed not only itself, but also HBUS to the money 
laundering risks inherent in its Cayman clients. 

Cayman Accounts. HSBC acquired the Cayman branch through 
its purchase of Bital in November 2002. According to a letter from 
HSBC legal counsel: 

“Bital received authorization from Mexican and Cayman 
authorities to offer Cayman USD [U.S. dollar] accounts to its 
customers in 1980. BitaTs license and authorization to offer 
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Cayman USD accounts was inherited by HBMX when HSBC 

acquired Bital in 2002.”^'* 

After the acquisition, the Cayman branch of Bital was renamed HSBC 
Mexico S.A. and continued to operate under a Cayman Class B banking 
license, restricting the branch to operating only “offshore” and open 
accounts exclusively for non-Cayman residents.^'’ From its inception, 
the branch had no physical office or employees in the Cayman Islands, 
and operated in that jurisdiction solely as a shell entity. The Cayman 
accounts were actually opened and maintained by HBMX personnel in 
Mexico. Any HBMX branch across Mexico had the authority to open a 
Cayman account for a client.^^' 

To enable the Cayman branch to provide U.S. dollar accounts to 
clients, HBMX used its correspondent accounts at HBUS to supply the 
needed dollars, process U.S. dollar wire transfers, cash U.S. dollar 
travelers cheques, and perform similar U.S. dollar services. HBMX did 
not open a separate correspondent account for the Cayman branch, but 
included Cayman account transactions within its general correspondent 
account at HBUS. The documents and other evidence reviewed by the 
Subcommittee contain no indication that, until recently, HBMX ever 
informed HBUS about its Cayman branch or the Cayman U.S. dollar 
denominated accounts being serviced through the HBMX correspondent 
accounts at HBUS.^^^ 

The number of accounts and the volume of assets held in the 
Cayman accounts have fluctuated over time. Documentation associated 
with the 2002 Bital purchase do not indicate how many Cayman 
accounts then existed or the total amount of assets they held. A 2006 
audit of the Cayman accounts reported just 1,500 accounts in 2005, with 
no mention of the account balances.^^^ In September 2008, HBMX 
reported a remarkable increase, over 60,000 Cayman accounts for nearly 


6/5/2012 letter from HSBC legal counsel to the Subcommittee, at 4. 

See, e.g., 7/31/2008 email from HSBC David Bagley to HSBC Richard Bennett, “HBMX- 
CAYMAN ACCOUNTS,” HSBC OCC 8874827-33. See also list of Cayman offshore banks at 
http;//www.offshore*library.com/banking/cayman_islands/page_3. According to HSBC, HBMX 
policy is not to offer the accounts to either Cayman or U.S. residents. See 6/5/2012 letter from 
HSBC legal counsel to the Subcommittee, at 5. 

See, e.g., 7/31/2008 email from HSBC David Bagley to HSBC Richard Bennett, “HBMX- 
CAYMAN ACCOUNTS,” HSBC OCC 8874827-33. 

See, e.g., 1/2006 “General Audit Report, HBMX — KYC of USD Current Accounts in Grand 
Cayman,” prepared by Group Audit Mexico, HSBC OCC 8874307-3 1 0, at I . This audit 
reviewed files for Cayman accounts that had been opened by 26 HBMX branches in Mexico 
City. Id. 

Michael Gallagher, for example, who headed the HBUS PCM division that helped handle 
correspondent accounts, told the Subcommittee he had been unaware of the U.S. dollar Cayman 
accounts at HBMX. Subcommittee interview of Michael Gallagher (6/ 1 3/ 1 2). 

See 1/2006 “Genera! Audit Report, HBMX - KYC of USD Current Accounts in Grand 
Cayman,” prepared by Group Audit Mexico, HSBC OCC 8874307-3 1 0, at 1 . 
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50.000 customers, with total assets approaching $2.1 billion.^^'* Three 
years later, however, those totals dropped significantly. According to 
HSBC legal counsel, as of January 2012, the Cayman branch held about 

24.000 Demand Deposit and Term Deposit Accounts for nearly 21,000 
customers, with a total dollar value of approximately $657 million. 
About 9,000 Cayman accounts had been closed in 2009, due in part to 
insufficient Know Your Customer (KYC) information for the accounts 
as well as regulatory concerns about their high risk nature. 

Inherent Riskiness of Accounts. HBMX and HSBC Group were 
well aware that the Cayman accounts had an inherently higher AML risk 
than other Mexican accounts, since they were offered in an offshore 
jurisdiction with strong secrecy laws and a limited tax regime, and 
permitted accountholders to hold assets in U.S. dollars in contravention 
of normal Mexican legal restrictions. 

In 2008, HSBC Group Compliance head David Bagley noted in an 
email to senior HSBC Group offieials that Mexican regulators knew of 
the Cayman accounts, which apparently eircumvented certain Mexican 
hanking regulations, hut nevertheless allowed them to operate: 

“The [Cayman] license, inherited from Bital, allows HBMX to 
provide USD-denominated services to persons domiciled in 
Mexico. Mexican regulation apparently prohibits individual 
Mexicans (i.e. non-corporate) to hold USD-denominated deposit 
accounts in Mexico. . . . Although HBMX were recently fined 
USD50,000, for the inappropriate promotion of these services in 
Mexico, 1 am advised that CNBV are aware of the existence of the 
accounts and services and have raised no concerns. 

Mr. Bagley also warned: 

“There continues to be a real focus on the level of USD- 
denominated activity in Mexico by CNBV and other bodies, and 
the extent of HBMX’s activity in this area. This account base has 
to therefore be seen as high-risk from an AML and reputational 
perspeetive.”*^^ 

In November 2005, an email from HBMX Compliance head 
Ramon Garcia to senior HSBC Group Compliance officer John Root 


See chart at HSBC OCC 8876787, attached to 9/12/2008 email from HSBC John Root to 
HSBC Adrian Cristiani, "Cayman Accounts,” HSBC OCC 8876784. 

See 6/5/2012 letter from HSBC legal counsel to the Subcommittee, at 5. 
li3 1/2008 email from HSBC David Bagley to HSBC Richard Bennett, with copies to HSBC 
Michael Geoghegan, Matthew King, and HBMX Emilson Alonso, Luis Pena, and John Rendall. 
"HBMX-CAYMAN ACCOUNTS,” at HSBC OCC 8874832. 
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flagging compliance issues at HBMX provided this explanation for the 
Cayman accounts: 

“There is a Cayman Island branch for HBMX. Since there is a 
restriction by Mexican Law to open accounts to nationals in USD 
except for those residing in the Mexico’s border, as an alternative, 
[Bital] decided to open this branch where cheques accounts to 
Nationals could be opened in USD. It is also known that these 
USD accounts were issued also to non Mexican Nationals.”^^* 

A January 2006 HBMX internal audit report explained the demand 
for the accounts this way: “HBMX offers their clients the option to open 
USD current and investment accounts in Grand Cayman so that clients 
profit [from] the advantages of that country, such as tax free 
investments, under confidentiality terms.”^^’ In a 2007 email discussing 
the sale of cross-border financial products in Mexico, HSBC Group 
Compliance Deputy Head Warren Learning also noted: “Because 
Mexico’s tax scheme is relatively penal (worldwide income) there is a 
high demand for off-shore products.”^^® 

Below Standard AML and KYC Controls. The riskiness of the 
Cayman accounts was magnified by weak AML controls and inadequate 
KYC information. Those AML deficiencies meant that HBMX had little 
real knowledge about the customers using the Cayman accounts. 

HSBC Group knew about the weak state of the Cayman AML and 
KYC controls from the time Bital was purchased in 2002, and it 
inherited the Cayman branch. An audit prior to the acquisition found 
that Bital had no functioning Compliance Department, limited client 
transaction and activity monitoring, and no KYC focus on high risk 
clients.*^’ The audit specifically noted the poor state of KYC 
information in the Cayman accounts: “41% of the accounts reviewed 
(92 of 224 reviewed) lacked full client information. 37 files had no 
client information.’’^^^ 

In 2004, Mexico strengthened KYC requirements for Mexican 
financial accounts and required Mexican banks to update the KYC 
information in all customer accounts by 2007. In January 2006, 
HBMX’s audit group conducted an audit of the KYC controls in place 

1 1 /22/2005 email from HBMX Ramon Garcia to HSBC John Root. “HBMX - 
COMPLIANCE ISSUES,” HSBC OCC 8873261. 

1/2006 “General Audit Report, HBMX — KYC of USD Current Accounts in Grand Cayman,” 
prepared by Group Audit Mexico, HSBC OCC 8874307-310, at I. 

5/24/2007 email from HSBC Warren Learning to HSBC David Bagley, “He advises that his 
own compliance team are advising him that such cross border activities should cease. -HBMX,” 
HSBC OCC 8875007. 

July 2002 “Group Internal Audit: Due Diligence Review - Project High Noon,” prepared by 
HSBC internal audit group, HSBC OCC 8873846-852. 

Id. at HSBC OCC 8873847. 
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for the Cayman accounts and rated them “Below Standard.”^^^ Of the 
Cayman accounts reviewed, the audit found that 13% of the files lacked 
material KYC information; more than 50% lacked a visit report with the 
client; some foreign clients were incorrectly described as Mexican 
nationals; and 1 5% of the account files were missing altogether: 

“More than 50% of account files that were reviewed lacked the 
relevant visit report, which weakens the position of HBMX in 
terms of KYC process for these types of accounts (Grand 
Cayman), particularly those accounts opened by foreigners. In 
addition, in 13% of files reviewed the visit reports failed to include 
material information enabling to have adequate KYC. 

Weaknesses were noted in the supervision over the account 
opening process, which also impeded to detect promptly any 
information missing in account files or inconsistencies between the 
information produced by the client and the data captured in Cis- 
Hogan [[HBMX data system]. ... In addition, the auditors 
indentified foreign clients who were input to the system as 
nationals. 

In addition to the foregoing, c[irca] 1 5% (1 0) of account files were 
not found at the Branches. No actions had appeared to be taken to 
instruct RMs [Relationship Managers] to complete client’s file 
again. 

In particular the auditors indentified that for accounts opened by 
foreign clients these had produced expired immigration forms and 
that Branch staff did not maintain a copy of all the pages 
composing such a document. This situation was due, in part, to the 
fact that circular letter Depvist045 (procedure to open current and 
term accounts) is not clear in the procedure to open these types of 
accounts (Grand Cayman).’’^^'' 

The audit concluded with the recommendation: “Branch should ensure 
that KYC and account opening documentation is complete and in 
compliance with regulations.”^^^ 

The 2006 audit uncovered severe AML and KYC deficiencies in 
the Cayman branch requiring remedial action to comply with the 
Mexican deadline for improving customer file KYC information, but 
those audit results appear to have been ignored. The audit 
recommendations were recorded in HBMX’s electronic system, but later 


’ 1/2006 “General Audit Report, HBMX — KYC of USD Current Accounts in Grand Cayman," 
prepared by Group Audit Mexico, HSBC OCC 8874307, at 1 (emphasis in original). 

Id. at 3. 

!d. at 4. 
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closed out without any apparent actions having been taken in response, 
which does not comport with Group policy.^^^ Two years later, in 2008, 
John Root, senior HSBC Group Compliance officer, rediscovered the 
2006 audit when examining KYC problems in the Cayman accounts. He 
wrote: “The real surprise was the existence of an HBMX audit in 
January 2006 on KYC for the USD Cayman accounts. It is not clear 
who in AML responded, and how. Blank looks all around. His 
supervisor, Mr. Bagley, later jokingly remarked to the Head of Group 
Audit for Latin America and the Caribbean, Graham Thomson: “I do 
find it surprising that there can have been no response and yet the audit 
was closed out. Is this a breach or are you in audit becoming softer.”^^* 

Project Restoration. As the 2007 deadline approached for 
completing the KYC updates mandated by Mexican law and internal 
reports showed that HBMX’s KYC documentation remained in poor 
condition, HBMX obtained a year-long extension from Mexican 
regulators, to May 2008, to clean up its files, including client files for 
the Cayman accounts.^^^ 

In February 2008, Mexican regulators met with the HBMX CEO 
and, among other issues, criticized the bank’s poor KYC documentation, 
leading HBMX to initiate “Project Restoration” to intensify its KYC 
remediation efforts.*'’" John Rendall, HBMX Chief Operating Officer, 
was put in charge of the project with the understanding that files 
containing inadequate KYC would be closed.*'" Project Restoration was 
closely monitored by senior HBMX and HSBC Group officials. 

At first, the Cayman accounts were excluded from the project. 
Then, in July 2008, HBMX’s monitoring system suddenly began 
generating alerts for a number of Cayman accounts. These alerts, which 
highlighted suspicious account activity, were brought to the attention of 
senior Compliance personnel. The head of HSBC Group Compliance 
David Bagley told the Subcommittee this incident was the “first point 
that the Cayman Islands were brought into sharp focus” for him.*'’^ He 
sent an email informing senior HSBC Group and HBMX officials about 
the alerts which had identified “significant USD [U.S. dollar] 


See 7/30/2008 email from HSBC John Root to HSBC David Bagley, “HBMX Visit Update,'’ 
HSBC OCC 8873487-489; 8/5/2008 email exchange among HSBC David Bagley, HSBC John 
Root and HBMX Graham Thomson, “HBMX - Cayman accounts,” HSBC OCC 8874829-830. 

7/30/2008 email from HSBC John Root to HSBC David Bagley, “HBMX Visit Update.” 
HSBC OCC 8873487-489. 

8/5/2008 email from HSBC David Bagley to HBMX Graham Thomson, “HBMX Cayman 
accounts,” at HSBC OCC 8874829. 

See 7/27/2007 minutes of HSBC LAM Regional Audit Committee, HSBC OCC 8875086-090 
(noting extension of time for the KYC effort until May 2008). 

See 6/5/2012 letter from HSBC legal counsel to the Subcommittee, at 2, 

See, e.g., 10/28/2008 email from Graham Thomson to Emilson Alonso, Subject: “HBMX- 
Projecto Restauracion,” HSBC OCC 8873464, 

Subcommittee interview of David Bagley (5/10/2012). 


S 
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remittances being made by a number of [HBMX Cayman] customers to 
a US company alleged to be involved in the supply of aircraft to drug 
cartels.”^'’ The company was Cabello Air Freight Inc. of Miami.^'''* Mr. 
Bagley wrote that “[a]s a precaution HBMX have issued instructions 
that no new [Cayman] accounts be opened pending a review of these 
activities.”^”*^ This step was taken with respect to the Cayman accounts, 
in the words of one HBMX compliance officer, “due to the massive 
misuse of them by organized crime.”*''® 


The decision to suspend new Cayman accounts was made by then 
HBMX CEO Luis Pena who did not specify when the suspension would 
be lifted.*''^ He also instructed HBMX staff to engage in “a process of 
enhanced due diligence KYC” for all Cayman accountholders to “end by 
December 1 .” He wrote: 


“After this date we will cancel all the accounts that we were not 
able to complete files on and will send cashiers checks to all the 
respective customers. For the future, Mexicans who wish to open 
a dollar denominated account will undergo a referencing process, 
in which the accounts will be ... opened by the bank’s staff in a 
proper offshore book as we do in our Premier offering. . . . 
Unfortunately we will likely lose some deposits as we do not 
expect the KYC process to succeed 100%, but we will offset a 
significant control and regulatory risk.”*'** 

Also in July 2008, after reviewing the 2006 audit of the Cayman 
accounts, Mr. Root informed Mr. Bagley that “a sampling showed 
that 1 5% of the customers did not even have a file.” * ® Mr. Root wrote: 
“Fixing the Cayman accounts will be a struggle. How do you locate 
clients when there is no file?” Missing client files, combined with 
accounts misused by drug cartel operatives, provided stark evidence of 
the high risk character of the Cayman accounts and the need for HBMX 


7/31/2008 email from HSBC David Bagley to HSBC Richard Bermett, with copies to HSBC 
Michael Geoghegan, Matthew King, and HBMX Emilson Alonso, Luis Pena, and John Rendall, 
“HBMX-CAYMAN ACCOUNTS,” HSBC OCC 8874832-33. 

See also Sealed Exhibits. 

7/31/2008 email from HSBC David Bagley to HSBC Richard Bennett, with copies to HSBC 
Michael Geoghegan, Matthew King, and HBMX Emilson Alonso, Luis Pena, and John Rendall, 
“HBMX-CAYMAN ACCOUNTS,” HSBC OCC 8874832-33. 

1 1/27/2008 email from HBMX employee to HBMX Jaime Saenz and Ramon Garcia, 
“Seriously consider restricting the product Dollars accounts in the zona ffontera Product 63,” 
HSBC OCC 8875736-738. 

See 7/31/2008 email from HBMX Luis Pena to HBMX Emilson Alonso, HSBC David 
Bagley, and others, “HBMX - CAYMAN ACCOUNTS,” HSBC OCC 8873503-504. See also 
undated HSBC presentation, “Conducting an Enhanced KYC for Grand Cayman 
Accountholders: Proposal to Update the Strategy to Control Risk arising from Grand Cayman 
Accounts,” HSBC OCC 8874561. 

7/31/2008 email from HBMX Luis Pena to HBMX Emilson Alonso, HSBC David Bagley, 
and others, “HBMX - CAYMAN ACCOUNTS,” HSBC OCC 8873503-504. 

7/30/2008 email from HSBC John Root to HSBC David Bagley, “HBMX Visit Update,” 
HSBC OCC 8873487-489. 
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to get a better sense of the clients using them. In the meantime, the 
documents contain no indication that either HSBC Group or HBMX 
informed HBUS about the suspect account activity or the Cayman KYC 
deficiencies, even though the Cayman accounts were operating solely 
through the HBMX correspondent accounts at HBUS.^ ° 

As a result of the AML alerts regarding money laundering 
involving some of the Cayman accounts and re-discovery of the 2006 
audit exposing the poor state of the Cayman account files, the Cayman 
accounts were added to the Restoration Project. Mr. Root told the 
Subcommittee that, in July 2008, the Cayman accounts “went to the top 
of the list” at the project.^^^ 

One of the first steps taken with regard to the Cayman accounts 
was that HBMX Compliance personnel analyzed their risk levels, and 
sorted customers into three categories; red, yellow, and white. Red 
status indicated that a customer was a “Special Category Clienf ’ (SCC), 
on a “black list,” or the subject of a SAR; yellow status indicated that a 
customer had been flagged by HBMX’s internal AML monitoring 
system with one or more alerts, but no SAR had been filed; white status 
indicated that the customer had no such derogatory information on 
file.”^ Out of a total of 49,935 customers with 61,586 accounts worth 
about $2.1 billion, HBMX categorized 1,314 customers as “red” status, 
representing 2,240 accounts worth about $205 million. HBMX also 
flagged 2,027 customers as “yellow” status, representing 2,084 accounts 
worth about $180 million.^^'’ HBMX then largely limited its KYC 
remediation efforts to the 3,341 “red” and “yellow” customers. The 
other 46,000 accountholders were not included in the project.^” 

Two months later, in September 2008, senior HSBC Group 
Compliance officer John Root offered a negative assessment of the KYC 
remediation efforts directed at the Cayman accounts: 


Another example of a Cayman U.S. dollar account that HSBC Group and HBMX were aware 
of and expressed concerns about, but apparently did not inform HBUS, were accounts opened for 
two embassies, one of which was for a country in the Middle East. See 1 2/2/2005 email 
exchange between HSBC David Bagley and John Root, “OF AC,” HSBC OCC 8876612-613. 

Mr. Bagley told the Subcommittee that although there was no indication of any “sinister” 
activity, these accounts were later closed, because the bank “did not want the risk.” 

Subcommittee interview of David Bagley (5/10/12). 

Subcommittee interview of David Bagley (5/10/12). 

Subcommittee interview of John Root (4/26/12). 

See 9/12/2008 email from HBMX Ramon Garcia to HSBC John Root, “Cayman Accounts,” 
HSBC OCC 8876784. 

See Attachment to 9/12/2008 email from HBMX Ramon Garcia to HSBC John Root, 
“Cayman Accounts,” HSBC OCC 8875462-465, at 465. 

See undated HSBC presentation, “Conducting an Enhanced KYC for Grand Cayman 
Accountholders: Proposal to Update the Strategy to Control Risk arising from Grand Cayman 
Accounts,” HSBC OCC 8874560-566, at 561 (“It is considered that it will not be possible to 
complete 50,000 enhanced KYC by 01DEC08.”). 
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“The HBMX ‘Restoration’ project chaired by John Rendall, 
HBMX COO, is endeavoring to regularize these accounts on a 
risk-basis. Account opening documentation is generally poor or 
non-existent and there is a lot of work to do. Money-laundering 
risk is consequently high.”^^* 

An HSBC presentation, which is undated but appears to have been 
prepared in October 2008, summarized the ongoing Cayman KYC 
problems and presented a new strategy to address them.^^^ The 
presentation was entitled, “Conducting an Enhanced KYC for Grand 
Cayman Accountholders: Proposal to Update the Strategy to Control 
Risk arising from Grand Cayman Accounts.’’^^* One key slide noted 
that “almost no progress [had] been made in enhanced KYC 
completion” and that only 25% of the files would have complete KYC 
information by December 1, 2008: 

“• The Bank has been recently been fined for offering this product 
in Mexico, and money laundering red flags have been identified. 

• On 28JUL, CMP [Compliance] gave instructions to suspend this 
product. 

• On 31JUL08, Segment Directors were requested by CEO that an 
enhanced KYC will be completed for all Grand Cayman accounts 
before 01 DEC08. 

• As of JUL08, in Grand Cayman CDA/DDA 49,937 customers, 
and its portfolio was approximately USD 1,500 million. 

• Currently, this product is expected to be re-opened, as long as 
necessary adjustments to systems, processes and documentation 
are made, with stricter controls, and if Group Compliance’s sign- 
off is obtained. 

• On 26SEP, Segment directors reported that almost no progress 
has been made in enhanced KYC completion. In addition, a 
central validation of enhanced KYC quality is not in place. 


556 9/12/2008 email from HSBC John Root to Adrian Cristiani and others, “Cayman Accounts,"' 
HSBC OCC 8875462-465, at 462. 

Undated HSBC presentation, “Conducting an Enhanced K-YC for Grand Cayman 
Accountholders: Proposal to Update the Strategy to Control Risk arising from Grand Cayman 
Accounts,” HSBC OCC 8874560-566, Because of dates mentioned in the presentation, it seems 
to have been completed between September 27 and October 30, 2008. 

Undated HSBC presentation, “Conducting an Enhanced KYC for Grand Cayman 
Accountholders: Proposal to Update the Strategy to Control Risk arising from Grand Cayman 
Accounts,” HSBC OCC 8874560. 

The figure of $ 1 ,500 million seems to refer to the Cayman certificates of deposit and does not 
include additional funds in Cayman Demand Deposit Accounts. 
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• According to Remediation Project results, success rate in fde 
completion is approximately 25%. This means that if this strategy 
is followed, it will not he possible to complete more that 25% of 
required enhanced KYC forms by 01DEC08.”^®“ 

This October 2008 assessment indicates that at least 75% of the Cayman 
files still had incomplete KYC information six years after HBMX 
assumed control of the accounts. 

Despite this grim assessment, the Strategy also noted efforts 
underway to allow new Cayman accounts to be opened.^*' As Graham 
Thomson, head of Group Audit for Latin America and the Caribbean, 
explained in an email to colleagues, the accounts needed to continue due 
to the income they produced: 

“Currently the business owner and compliance are still discussing 
with GMO CMP [Compliance] the product parameters that are to 
be applied to lift the current embargo and relaunch the Cl [Cayman 
Island] product. It is important that these discussions result in 
practical product parameters as the Cl portfolio is an important 
source of funds for HBMX and it is hoped the replacement product 
will be shortly submitted to the new products committee and then 
relaunched.”^*^ 

Internal documents show that HSBC Group and HBMX officials 
considered a variety of criteria to determine when a new Cayman 
account could be opened, including requirements that the client be an 
existing HBMX customer for six months, complete an “enhanced KYC 
Questionnaire,” undergo screening against the OFAC list and other 
“blacklists,” and agree to limits on cash deposits.^*^ 

U.S. Dollar Restriction. In November 2008, HSBC Group CEO 
Michael Geoghegan traveled to Mexico and met with senior Mexican 
regulators who were highly critical of HBMX’s AML and KYC efforts, 
the huge volume of U.S. dollars that HBMX was exporting to the United 
States, and the possibility that a portion of those funds were associated 
with drug trafficking and money laundering.^*’'* The regulators explicitly 


Undated HSBC presentation, “Conducting an Enhanced KYC for Grand Cayman 
Accountholders: Proposal to Update the Strategy to Control Risk arising from Grand Cayman 
Accounts,” HSBC OCC 8874560-566, at 561. 

Id. at 561. 

^'^^10/20/2008 email from Graham Thomson to HSBC Emilson Alonso and others, “HBMX- 
Projecto Restauraeion,” HSBC OCC 8874595-600, at 596-597. 

See Sept.-Oct. 2008 email exchanges among HBMX Ramon Garcia, John Rendall, Maria 
Salazar and HSBC David Bagley, Warren Learning, Susan Wright, John Root, and Adrian 
Cristiani, HSBC OCC 8875818-829, at 829. 

See 2/18/2008 email from HBMX Paul Thurston to HSBC Michael Geoghegan, with copies 
to Richard Bennett and Matthew King, “Confidential - CMBV/FIU Meeting,” HSBC OCC 
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mentioned the U.S. dollars sent from the Cayman accounts.^®^ In 
response, Mr. Geoghegan proposed prohibiting all HMBX branches, 
including the Cayman branch, from offering U.S. dollars to customers, 
except at automated teller machines in Mexican airports.^®® Since the 
Cayman accounts relied on U.S. dollars, the proposed new policy 
directly impacted Cayman accountholders. HBMX CEO Luis Pena 
nevertheless agreed with the proposal, and also ordered the freeze on 
opening new Cayman accounts to continue indefinitely and prohibiting 
new cash deposits for existing Cayman accounts.^*^ Mr. Pena noted 
that the new measures would cost HBMX a lot of money: “Cayman and 
Mexico dollar accounts provide us with US$2.6 billion of cheap 
funding. We are likely to lose a big portion of this if we tell customers 
we no longer receive dollar notes.” The new policies took effect in 
January 2009. 

9,000 Accounts Closed. According to HSBC’s legal counsel, 
HBMX took nearly another year to complete KYC remediation of the 
Cayman accounts, finally completing the work in July 2009.^*^ As part 
of that KYC effort, HBMX closed approximately 9,000 Cayman 
accounts, due in many cases to incomplete KYC information.*™ At the 
same time, HBMX allowed the Cayman branch to remain in operation 
and lifted the ban on new accounts. Today, over 20,000 HBMX clients 
have over $657 million in Cayman U.S. dollar denominated accounts. 

Because the HBMX Cayman branch continues to offer U.S. dollar 
accounts, despite a history of poor KYC controls and deficient KYC 
documentation, and despite the inherent riskiness associated with 
operating offshore accounts in a secrecy tax haven, the Cayman accounts 
continue to pose ongoing money laundering risks to HBUS. Because 
HBUS is now aware of the Cayman accounts, it will have to evaluate the 
risk and determine whether to continue to process Cayman account 
transactions through the HBMX correspondent account. 

(3) Cashing U.S. Dollar Travelers Cheques 

A third example of how HBMX has introduced risk into HBUS 
involves its issuing and cashing millions of dollars in U.S. dollar 


8873331-333; 2/18/2008 draft report entitled, “Internal Control, HBC Mexico, S.A.,” prepared 
by CNBV, HSBC OCC 8966021-026. 

See, e.g., 1 1/26/2008 email from HSBC David Bagley to HSBC Richard Bennett and Warren 
Learning, “Mexico,” HSBC OCC 8875605-607, at 607. 

See 1 1/26/2008 email from HSBC Michael Geoghegan to HBMX Emilson Alonso, “Money 
Launderying,” HSBC OCC 8874849-850. 

See 1 1/27/2008 email from HSBC Warren Learning to HSBC David Bagley and Richard 
Bennett, “Mexico,” HSBC OCC 8875605-607, at 606. 

1 1/28/2008 from HBMX Luis Pena to HSBC Emilson Alonso, HSBC OCC 8874856. 
6/5/2012 letter from HSBC legal counsel to the Subcommittee, at 5. 

^’^Id. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00307 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



294 


VerDate Nov 24 2008 


120 

travelers cheques through its correspondent accounts at HBUS, at times 
under suspicious circumstances. 

Travelers cheques are paper monetary instruments which, for a fee, 
are issued and administered by a financial institution. They can be 
issued in a variety of currencies and denominations, and carry serial 
numbers so that, if the cheques are lost or stolen, the issuing financial 
institution can trace back the purchase and either replace the cheques or 
refund the money used to purchase them. Individuals often use travelers 
cheques to minimize carrying hard currency while traveling and as a 
way to safeguard their funds. Some financial institutions issue such 
cheques only to pre-existing customers; others issue the cheques to 
anyone who pays the fee. U.S. financial regulators have long warned 
financial institutions about the money laundering risks associated with 
travelers cheques, especially when purchased with cash by a non- 
customer and used to move substantial funds across international borders 
in ways that are difficult to trace.^” Travelers cheques have been used 
by terrorists,^’^ drug traffickers,’^^ and other criminals.”'' 

HBMX has issued a large number of U.S. dollar travelers cheques, 
at times selling them to anyone willing to pay the fee and cashing them 
for customers and non-customers alike. In 2004, John Root, senior 
HSBC Group Compliance officer, sent an email to HBMX’s 
Compliance head, Ramon Garcia, and AML head, Carlos Rochin, noting 
the huge volume of travelers cheques pouring in from Mexico and 
seeking assurances that HBMX was on guard against money laundering: 


See, e.g., Federal Financial Institutions Examination Council (FFIEC) Bank Secrecy 
Act/Anti-Money Laundering (BSA/AML) Examination Manual, “Core Overview; Purchase and 
Sale of Monetary instruments,” (6/23/2005) at 59; FFIEC BSA/AML Examination Manual, 
“Purchase and Sale of Monetary Instruments-Overview,” (8/24/2007) at 212 (“The purchase or 
exchange of monetary instruments at the placement and layering stages of money laundering can 
conceal the source of illicit proceeds. As a result, banks have been major targets in laundering 
operations because they provide and process monetary instruments through deposits.”). 

See, e.g., United States v. al-Haramain Islamic Foundation Inc.. Case No. 6:05-cr-60008-HO 
(USDC Oregon) Indictment (2/17/2005); “Former U.S. Head of AI-Haramain Islamic 
Foundation Sentenced to 33 Months in Federal Prison,” U.S. Attorney’s Office for the District of 
Oregon press release (9/27/1 1) at 1 (describing how the convicted defendant cashed $130,000 in 
U.S. dollar travelers cheques at a bank in Saudi Arabia and then provided the funds to support 
violent extremists in Chechnya). 

See, e.g., United States v. Wachovia Bank N.A.. Case No. 1 0-20 1 65-CR-Lenard (USDC 
SDFL), Factual Statement, Exhibit A to Deferred Prosecution Agreement (3/16/2010), at ^ 35 
(describing how Wachovia Bank processed $20 million in suspicious travelers cheques, some 
portion of which was suspected to include illegal drug proceeds); “How a Big U.S. Bank 
Laundered Billions from Mexico’s Murderous Drug Gangs,” The Guardian . (4/2/2011), 
http.7/www, guardian. CO. uk/world/201 l/apr/03/us-bank-mexico-drug-gangs. See also Albaion v. 
Gugliotta . 72 F. Supp. 2d 1362, 1365 (S.D. Fla. 1999) (admitting travelers cheques as evidence 
of drug trafficking proceeds); United States v. $41.305.00 in Currency & Travelers Checks. 802 
F.2d 1339, 1343 (lithCir. 1986) (finding travelers cheques could be seized as drug trafficking 

Folk V. State. 192 So. 2d 44, 46 (Fla. Dist. Ct. App. 1966) (upholding conviction for 
signing a false name on travelers cheques and cashing them); United States v. Sebaggala , 256 
F.3d 59, 63 (1st Cir. 2001) (upholding conviction for using undeclared travelers cheques to 
attempt to move money fraudulently through U.S. customs). 


proceeds). 
See, e.g., 
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“I note that in the year through 3Q04 [third quarter of 2004], 
HBMX has sold over USD 110 million of travelers cheques, an 
amount that eclipses that ofHBEU [HSBC Europe] here in the 
UK, and that is several orders of magnitude higher than any other 
non-UK entity, including Hong Kong and the US. In fact, it 
represents one-third of the Group’s total global traveller’s cheque 
business (with the UK representing another third). 

Could you kindly prepare a report for GHQ [Group Headquarters] 
summarizing the money laundering procedures currently in place 
for such a booming business. Please include in this report KYC 
controls, number of SARs in the YTD [year to date], breakdown 
by region and branch, etc., etc.”^’^ 

Mr. Garcia responded with preliminary information and a recent case 
involving travelers cheques, but in response to Mexican legal 
requirements regarding client-specific information, HSBC has so heavily 
redacted copies of those documents, as well as a longer report requested 
by Mr, Root, that they do not provide additional information.^^® 

In 2008, when HBMX decided to stop offering U.S. dollars at its 
branches in most cases, the HBMX CEO Luis Pena recommended 
greater use of U.S. dollar travelers cheques instead, sold only to pre- 
existing customers.®” In response, the Deputy Head of HSBC Group 
Compliance, Warren Learning, warned that travelers cheques also raise 
AML concerns, and advised lowering the existing $25,000 ceiling on the 
amount of travelers cheques that could be purchased by one customer at 
a time, and creating a new limit on the amount of travelers cheques that 
could be deposited at one time to a client account.’”* 

In 2009, after CNBV expressed concerns about HBMX’s weak 
AML controls, among other steps, HBMX tightened its policies on 
travelers cheques. As of January 1, 2009, HBMX determined that it 
would sell its travelers cheques only to pre-existing customers and 
would place a limit on the amount that could be sold to any one 


1 1/8/2004 email from HSBC John Root to HBMX Ramon Garcia and Carlos Rochin, with 
copies to HSBC David Bagley and Susan Wright, “Travellers Cheques,” HSBC OCC 8876645- 
646. 

See 1 1/30/2004 email from HBMX Ramon Garcia to HSBC John Root, David Bagley, Susan 
Wright, and HBMX Carlos Rochin, “Travellers Cheques,” HSBC OCC 8876645-664. 

See ! 1/27/2008 email from HBMX Luis Pena to HBMX Emiison Alonso, copy to HSBC 
Michael Geoghegan, “Money Launderying,” HSBC OCC 8874849. 

See 12/8/2008 email from HSBC Warren Learning to HBMX Ramon Garcia and John 
Rendall with copies to HSBC David Bagley, John Root, Susan Wright, and others, “Mexico 
Visit,” HSBC-PSI-PROD-0197874-876. 
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customer at a time.^^’ Warren Learning, Deputy Head of HSBC Group 
Compliance, who supported those changes, noted in an email: “There 
remain AML issues in respect of travellers cheques which historically 
are very high risk from an AML perspective and accordingly we would 
expect that the limits are reasonably low and that there are very strong 
controls in place to ensure that branches do not abuse the rules.”^*° 

At HBUS, the documents reviewed by the Subcommittee indicate 
that, despite their large volume, HBMX travelers cheques attracted little 
AML review or attention, even though the travelers cheques would have 
been presented for payment at HBUS’ processing centers in New York 
and subjected to review. The HBUS processing centers segregated and 
reviewed all travelers cheques and were required to send blocks of 
sequentially numbered cheques exceeding $10,000 to HBUS AML 
Compliance for review.^*' At the same time, the processing centers had 
no information on expected account volume, conducted no trend 
analysis to identify suspicious transactions, and conducted no due 
diligence on the persons cashing the cheques, A 2007 OCC 
examination of HBUS’ pouch activities, which included clearing U.S. 
dollar travelers cheques, identified numerous deficiencies in the AML 
policies and procedures and called for stronger AML controls, but it did 
not appear to result in any greater review of the HBMX travelers 
cheques.^*^ To the contrary, a 2007 HBUS policy change appears to 
have further limited AML reviews of travelers cheques presented by 
HSBC Group affiliates in non-high risk countries, restricting them to 
cases where the deposits exceeded $1 million.^*'’ At that time, ILBUS 
deemed both Mexico and HBMX to be at low risk of money laundering. 

In 2009, the OCC conducted a second review of HBUS’ pouch 
activities, including procedures to clear U.S. dollar travelers cheques.’'*^ 


12/8/2008 email from HSBC Warren Learning to HBMX Ramon Garcia and John Rendall, 
with copies to HSBC David Bagley, Susan Wright, John Root, and others, “Mexico Visit,” 
HSBC-PSI-PROD-0 1 97874-876. 

*id. 

See 6/26/2008 OCC memorandum, “Pouch Transactions - Hokuriku Bank and SK Trading 
Company Ltd,” OCC-PSI-00885828, at 1 [Sealed Exhibit.]. HBUS’ AML policies and 
procedures regarding travelers cheques are discussed in more detail in the Report Section on 
Hokuriku Bank: Cashing Bulk Travelers Cheques, supra . 

See 4/27/2007 email from HBUS Robert Guthmuller to HBUS Alan Ketley, “Visit to 
Brooklyn OpsLink ” OCC-PSl-00312153, at 4. 

See 3/31/2007 OCC Report of Examination, OCC-PSI-00304077 [Sealed Exhibit]; 9/13/2007 
OCC Supervisory Letter, “Pouch Services and Middle Market at HBUS,” OCC-PSI-00000391- 
394. [Sealed Exhibit] 

See 5/7/2007 email from HUBS George Tsugranes to HBUS Alan Ketley and others, “Visit to 
Brooklyn Ops ” OCC-PSL003 12153, at 3. 

See, e.g., 2/15/2010 email from HBUS Jane Burak to HBUS Lesley Midzain, “Advice 
Requested,” OCC-PSl-00256833 (describing banknotes examination that included reviews of 
travelers cheques); 2/1 1/2010 minutes of a “OCC & Chicago FED update Meeting,” prepared by 
HSBC, OCC-PSI-00256916 (noting that HSBC made a presentation to the OCC on 2/9/2010, on 
enhancements to its cash letter process and an “internal look-back of cash letter activity for 
Travelers Checks and Money Orders”). 


VerDate Nov 24 2008 
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As part of that examination, HBUS produced to the OCC a lengthy 
description of its AML policies and procedures for foreign financial 
institutions that present items for processing through a correspondent 
account, including travelers cheques/*® Those procedures contained a 
number of restrictions or conditions, but did not impose a ceiling on the 
amount of money that HBUS would provide to a correspondent client 
through the cash letter process. The procedures did, however, require 
transactions over a certain amount to be reported to HBUS AML 
Compliance before processing. The reporting triggers were linked to the 
risk rating of the foreign financial institution presenting the monetary 
instrument for payment. The five relevant risk ratings, from highest risk 
to lowest, were: Special Category Client (SCC), high risk, cautionary 
risk, medium risk, and standard risk. The reporting triggers were as 
follows: 

For SCC customers - $1,000 for an individual item, and $10,000 
in total deposits. 

For high risk customers - $10,000 for an individual item, and 
$100,000 in total. 

For cautionary risk customers - $50,000 for an individual item, 
and $200,000 in total. 

For standard and medium risk customers - $50,000 for an 
individual item and $250,000 in total. 

Clients seeking to cash travelers cheques in excess of the reporting 
threshholds were not automatically prohibited from proceeding; instead, 
their transactions were reported to HBUS AML Compliance which was 
then supposed to make a case-by-case decision on whether to allow the 
transactions to proceed. 

By 2009, Mexico and HBMX were considered high risk and, due 
to the large volume of HBMX travelers cheques it sold, HBMX cheques 
should have regularly triggered the AML reporting requirement and 
AML reviews. In addition, HBMX travelers cheques should have 
produced numerous alerts due to the large amounts, sequentially 
numbered cheques, and structuring patterns involved. Instead, the 
documentation suggests that few alerts issued and very little review of 
HBMX travelers cheques took place. 

As part of its 2009 examination, the OCC expressed concern that, 
based on samples taken from 2007, 2008, and 2009, HBUS’ monitoring 
of travelers cheques required too few AML reviews and was inadequate 


See undated “Request No. 7,” prepared by HSBC, OCC-PSI-00000075-195 at 123-130 
(providing detailed information in response to OCC questions regarding HBUS’ remote deposit 
capture and cash letter pouch transactions). [Sealed Exhibit.] 
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to detect suspicious activity.^®’ In response, HBUS undertook a detailed 
review of all cash letter items in 2009.^*® HBUS determined that 280 
items had been flagged for review, a tiny number in comparison to the 
huge number of transactions cleared per year. In addition, according to 
HBUS, of those 280 items, less than a handful contained information 
suggesting suspicious activity'.^*’ While HBUS presented that result as 
evidence of minimal AML risk, it is possible that the criteria used to flag 
transactions for review were too narrow to catch suspicious transactions. 

One reason to think the latter might be the case is that, from 2007 
to 2012, other financial institutions have reported significant instances of 
suspicious activities involving U.S. dollar travelers cheques either issued 
or cleared by HBMX.^^® These reports generally describe coordinated 
teams of individuals, each of whom purchased large numbers of 
travelers cheques from HBMX, and then cashed or deposited the 
cheques in suspicious patterns. Some of the U.S. dollar travelers 
cheques identified by these financial institutions had a combined value 
in excess of $I million, and some of the suspicious activity occurred 
over an extended period of time. Many of the suspicious transactions 
involved sequentially numbered cheques, illegible signatures, or difficult 
to understand markings or numbers on the cheques. In some cases, 
groups of cheques were made payable to the same health food business, 
toy company, or automobile auction house. 

Four examples illustrate the issues. In the first example, nearly 
1,500 U.S. dollar travelers cheques were purchased from the same 
HBMX branch in Mexico over a seven-month period from 2007 to 2008, 
and cashed shortly thereafter at several automobile auctions in the 
United States. Money launderers have been shown in the past to utilize 
the purchase of expensive, but liquid items, such as cars to hide illicit 
funds. The travelers cheques had a combined value of $900,000. In a 
second instance from 2008, on four occasions over a period of 16 days, 
individuals purchased from an HBMX branch in Mexico travelers 
cheques which, each time, had a combined value of $20,000 to $30,000, 
and altogether added up to $109,000. All of the cheques were then 
signed and countersigned with the same illegible signature, and made 
payable to the same toy business in Mexico. Ten months later, in a 
coordinated effort over a two-week period, all of the cheques were either 
cashed or deposited. In a third instance, 188 travelers cheques in 
denominations of $500 and $1000, totaling $1 10,000, were purchased in 
nine large blocks of sequentially numbered cheques from a major U.S. 
bank. Then, over a three-month period from April to June 2011, all 188 


See 2/15/2010 email from HBUS Janet Burak to HBUS Lesley Midzain, “Advice Requested,” 
OCC-PSI-00256833. 

5!8 

®Id. 

See Sealed Exhibits. 


I 
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cheques were negotiated for payment at the same HBMX branch in 
Mexico, using illegible signatures so that the cheques provided no 
information about the payees. 

In the fourth instance, two men purchased groups of travelers 
cheques from the same HBMX branch in Mexico. On 14 occasions over 
a three month period in 201 1, the two men purchased the travelers 
cheques in batches which, each time, had a combined value of $10,000, 
and altogether added up to $140,000. All of the cheques were then 
signed with the same illegible signature. Over time, small groups of the 
travelers cheques, often with consecutive serial numbers, were cashed or 
deposited, with the majority of cheques failing to bear a stamp indicating 
exactly where they were negotiated. The 201 1 transactions were part of 
a larger pattern in which the same HBMX branch sold travelers cheques 
to the same two men over a three year period from 2009 to 201 1 , for a 
combined value of $1.9 million. 

While HBMX has tightened its travelers cheque policies by 
restricting the sale of travelers cheques to pre-existing customers and 
limiting the dollar amount of travelers cheques that can be provided to 
one customer at a time, HBMX travelers cheques continue to surface in 
reports of suspicious activities filed with U.S. authorities. Because 
many if not all of the cheques are cashed through the HBMX 
correspondent accounts at HBUS, HBMX continues to expose HBUS to 
money laundering risks through its issuance and cashing of U.S. dollar 
travelers cheques. 

HBMX’s money service business clients. Cayman accountholders, 
and travelers cheque purchasers all relied on the U.S. dollar services that 
HBMX was able to provide through its correspondent accounts at 
HBUS. In some cases, it appears those HBMX clients used HBMX’s 
U.S. dollar correspondent account at HBUS to commit criminal acts. 

For its part, HBUS should have known of the money laundering risks it 
was incurring from those and other high risk HBMX clients, accounts, 
and products. Because HBMX was an HSBC affiliate and was also 
categorized for many years as located in a low risk jurisdiction, 
however, until recently, HBUS did not perform the KYC due diligence 
or account monitoring needed to uncover HBMX’s high risk activities. 

E. Bulk Cash Movements 

In addition to using HBUS correspondent accounts to execute wire 
transfers, clear cash letter instruments, and conduct other U.S. dollar 
transactions, in 2007 and 2008, HBMX used its HBUS banknotes 
account to supply more physical U.S. dollars to HBUS than any other 
Mexican bank or HSBC affiliate. The documents indicate that both 
HBMX and HBUS were unaware of the flood of dollars HBMX was 
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pouring into the United States through HBUS, in part because HBUS 
had stopped monitoring HSBC affiliates’ banknotes accounts for a three- 
year period, from mid-2006 to mid-2009. HBUS policy was also 
consistent with the HSBC Group policy of not performing due diligence 
or account monitoring for HSBC affiliates. When, in 2008, Mexican 
and U.S. regulators began pressing both HBMX and HBUS to explain 
the huge flow of U.S. dollars from Mexico and whether the funds 
included illegal drug proceeds, both banks were caught by surprise and 
eventually took action to turn off the spigot. In 2009, HBMX stopped 
accepting U.S. dollar deposits at its branches in Mexico, and then in 
2010, HBUS exited the banknotes business. 

(1) HBUS’ Global Banknotes Business 

Prior to its exit, HBUS operated a very large U.S. banknotes 
business which the Federal Reserve estimated in 2010, to be worth 
approximately $300 billion annually.^’' As part of that business, HBUS 
supplied physical U.S. dollars and accepted bulk cash shipments from 
financial institutions around the world, including over two dozen HSBC 
affiliates.’’^ 

Bulk cash shipments typically use common carriers, independent 
carriers, or U.S. Postal Service carriers to ship U.S. dollars by air, land, 
or sea to a bank located in the United States.’’’ Shipments have gone 
via airplanes, armored trucks, ships, and railroads. Most shipments are 
transported via containerized cargo. Shippers may be “currency 
originators,” such as businesses that generate cash from sales of goods 
or services; or “intermediaries” that gather currency from originators or 
other intermediaries to form large shipments. Intermediaries are 
typically central banks, commercial banks, money service businesses, or 
their agents.’” Bulk cash shipments can be made directly to a bank in 
the United States, or to a U.S. Federal Reserve Bank or branch, which 
will accept the cash and credit it to the account of the intended recipient 
bank.’” Banks that receive bulk cash shipments via common carriers or 
the Postal Service have no obligation to report the amount of the cash 
received to U.S. authorities, though they still must report any suspicious 
activity.' 


1/12/2010 memorandum from the Federal Reserve, “US Department of Justice Investigation 
of HSBC Bank USA NA’s (‘HSBC Bank USA’) Bank Note Business (Revised) ” BOG-SR- 
000442-443, 001402-409. [Sealed Exhibit.] 

See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, OCC-PSI-00864335-365, at 342. 
[Sealed Exhibit.] 

1/12/2010 memorandum from the Federal Reserve, “US Department of Justice Investigation 
of HSBC Bank USA NA’s (‘HSBC Bank USA’) Bank Note Business (Revised),” at BOG-SR- 
001404. [Sealed Exhibit.] 

Id. 

Id., citing 31 CFR §103.23. 
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Until 2010, HBUS was one of about 30 U.S. financial institutions 
that bought and sold physical currency on a wholesale basis around the 
world/’^ The headquarters of HBUS’ Global Banknotes business was 
located in New York, headed by Christopher Lok, with offices in 
London, Hong Kong, Singapore, and other locations.*’* Until 2010, 
HSBC was also one of a relatively small number of international banks 
that contracted with the Federal Reserve Bank of New York (FRBNY), 
under the Extended Custodial Inventory (ECl) Program, to manage the 
FRBNY’s U.S. currency vaults. The ECl Program facilitates the 
international distribution of U.S. dollars, repatriates old dollars, 
circulates new designs, and provides information on the international use 
of U.S. currency.*” HSBC operated FRBNY currency vaults in 
London, Frankfurt, and Singapore.®™ The currency in those vaults 
remained on the hooks of the Federal Reserve, and was used to fill 
orders from third parties or the operator itself®®' When distributing U.S. 
dollars, HSBC was obligated to comply with U.S. AML and Office of 
Foreign Assets Control (OF AC) requirements.®®^ 

While bulk cash shipments are a normal and legitimate part of 
international banking, they are also vulnerable to misuse by money 
launderers and other criminals. In 2001, the U.S. Congress made 
smuggling large amounts of physical U.S. dollars across U.S. borders a 
crime.®®* In 2005, a U.S. Money Laundering Threat Assessment 
identified bulk cash smuggling as a key method used to launder criminal 
proceeds and highlighted how drug traffickers were smuggling U.S. 
dollars obtained from illegal U.S. drug sales across the border into 
Mexico and then using various means to arrange for their deposit into a 
U.S. bank.®®'* In 2006, the U.S. Financial Crimes Enforcement Network 
(FinCEN) issued an advisory to U.S. financial institutions warning them 


Id. at BOG-SR-001405. [Sealed Exhibit] 

See 1 1/2006 HBUS presentation, “Banknotes Trading A Global Reach Organizational Chart 
as of November 2006,” OCC-PSI-00000501-5I2. 

1/12/2010 memorandum from the Federal Reserve, “US Department of.Iustice Investigation 
of HSBC Bank USA NA's (‘HSBC Bank USA’Bank Note Business (Revised),” at BOG-SR* 
001405. [Sealed Exhibit.] 

600 

601 

Id. 

See Section 371 of the USA Patriot Act, P.L. 107-56, codified at 31 U.S.C. §5332 (outlawing 
the smuggling or attempted smuggling of over $10,000 in currency or monetary instruments into 
or out of the United States, with the specific intent to evade U.S. currency reporting 
requirements). 

See Dec. 2005 “U.S. Money Laundering Threat Assessment,” issued by the Money 
Laundering Threat Assessment Working Group, which included the U.S. Departments of 
Treasury, Justice, and flomeiand Security, Federal Reserve, and U.S. Postal Service, Chapter 5 
on “Bulk Cash Smuggling” (“Upon leaving the country, cash may stay in Mexico, continue on to 
a number of other countries, or make a U-tum and head back into the United States as a deposit 
by a bank or casa de cambio.”). 
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in particular about money laundering associated with bulk cash 
shipments from Mexican casas de cambio.*’*’^ 

As of 2010, 29 HSBC affiliates had banknotes accounts with 
HBUS.®“® Some of those affiliates operated in high risk countries 
plagued by drug trafficking, corruption, money laundering, or other 
criminal enterprises, including Angola, Bangladesh, Colombia, 
Democratic Republic of Congo, Haiti, Mexico, Panama, Paraguay, Saudi 
Arabia, and Ukraine. HBUS did not distinguish, however, between high 
and low risk affiliates with banknotes accounts.'’'” 

(2) HBMX U.S. Dollar Sales to HBUS 

For a three-year period, from mid-2006 until mid-2009, HBUS 
accepted more than $15 billion in physical U.S. dollars from other 
HSBC affiliates, but failed to conduct any AML monitoring of the bulk 
cash transactions.'^'** HBUS had performed AML monitoring both prior 
to and following that time period. HBUS personnel have been unable to 
explain why all AML monitoring of its banknotes accounts ceased 
during that period and then resumed later, but the OCC has noted that 
the monitoring ceased when a formal AML oversight agreement 
applicable to HBUS expired, and resumed when an OCC AML 
examination of the banknotes operations was launched in July 2009.^°^ 
The absence of AML monitoring meant that HBUS did not track for 
AML purposes its growing dollar traffic with HBMX, which reached $3 
billion in 2007, and then jumped another 25% in 2008 to $4 billion.^"* 

In February 2008, Mexican regulators held a private meeting with 
HBMX CEO Paul Thurston and informed him that HBMX was 
repatriating more U.S. dollars to the United States than any other 
Mexican bank - more than each of the four largest Mexican banks, all of 
which were larger than HBMX.*" The CNBV also informed Mr. 
Thurston that the Mexican Financial Intelligence Unit (FIU) was very 


4/28/2006 “FinCEN Guidance to Financiai Institutions on the Repatriation of Currency 
Smuggled into Mexico from the U.S.,”No. FIN-2006-A003. 

“ See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, OCC-PSl-00864335-365, at 342. 
[Sealed Exhibit.] 

Id. at OCC-PSl-00864336. 

“* Id. at 336. 

See id. at 360. When asked why HBUS stopped monitoring its affiliates’ banknotes activity, 
HBUS personnel offered conflicting reasons. Daniel Jack, in charge of HBUS compliance for 
banknotes, thought that his supervisor, Alan Ketley, had approved the decision to stop 
monitoring affiliates, but Alan Ketley did not recall the decision. Neither did their superior, 
Teresa Pesce. David Bagley called the decision to stop monitoring banknotes for affiliates 
“inexplicable.” Subcommittee interviews of Daniel Jack (3/13/2012), Alan Ketley (2/16/2012), 
Teresa Pesce (3/30/2012) and David Bagley (4/12/2012). 

Id.; 6/29/2009 OCC notes of telephone conversations, prepared by OCC AML Examiner 
Joseph Boss, OCC-PSI-00928760. 

See 2/18/2008 draft report entitled, “Internal Control, HBC Mexico, S.A.,” prepared by 
CNBV, HSBC OCC 8966021-026, at 5. 
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concerned about the “high level of ML [money laundering] risk” 
involved.^'^ The FIU indicated that in the “majority of the most relevant 
ML cases” they had investigated in 2007, “many transactions were 
carried out through” HBMX 

In November 2008, the CNBV and FIU held a second private 
meeting, not only with the HBMX CEO, then Luis Pena, but also with 
the HSBC CEO of Latin America, Emilson Alonso, and the CEO of the 
HSBC Group, Michael Geoghegan.*''* Again, the regulators expressed 
their alarm at the volume of U.S. dollars that HBMX was sending to the 
United States and described law enforcement concerns about the extent 
to which those dollars may be the proceeds of illegal drug trafficking in 
the United States. A November email from the HSBC Group 
Compliance Deputy Head summarizing the meeting stated that, between 
January and September 2008, HBMX had repatriated $3 billion to the 
United States, which represented 36% of the market volume and double 
what the biggest bank in Mexico, Banamax, had repatriated, even though 
HBMX was only the fifth largest bank in the country.*'^ According to an 
internal OCC document, the Department of Homeland Security’s 
Immigration and Customs Enforcement (ICE) division conveyed that, 
within Mexico, HBMX “led the market in cash repatriation in 2007 and 
2008,” with “$3.2 billion repatriated in 2007 and $4.2 billion repatriated 
in 2008.”*'® 

A quick analysis undertaken by HBMX immediately after the 
November meeting found that while HMBX was “very good at 
buying/acquiring dollars,” it did “not seem to sell them and hence our 
very high repatriation figures.”*'’ The analysis also determined that 
“80% of our dollars come from money exchange business at 
branches.”*'* It noted further that “there is no limit on the amount of 
dollars that c[u]stomers can convert to pesos,” and that with respect to 
non-customers, HBMX branches would “convert up to 3000 dollars, and 
do not require any KYC.”*'’ HSBC Group Compliance head David 
Bagley responded: “The practice of changing USD in the branches 
pres[u]mably with little or no ID for non customers is in breach of 


Id, at 6. Examples of these cases included Zhenly Ye Gon, Casa de Cambio Puebla, and 
Sigue Corporation. 

See 1 1/27/2008 email from HSBC Warren Learning to HSBC David Bagley and Richard 
Bennett, “Mexico,” HSBC OCC 8875605-607. 

1 1/27/2008 email from HSBC Warren Learning to HSBC David Bagley and Richard Bennett, 
“Mexico,” HSBC OCC 8875605-607, at 606. 

6/29/2009 OCC notes of telephone conversations, prepared by OCC AML Examiner Joseph 
Boss, OCC-PSI-00928760. 

1 1/27/2008 email from HSBC Warren Learning to HSBC David Bagley and Richard Bennett, 
“Mexico,” HSBC OCC 8875605-607, at 606. 

618 

6.9 jd. 
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Group policy. When looking at our USD exposure how can this have 
been missed.”^® 

At HBUS, an undated analysis was eonducted of its banknotes 
traffic with Mexican financial institutions over a three-month period, 
from November 2006 to February 2007. The analysis disclosed that 
HBUS was doing far more business with HBMX than any other 
Mexican financial institution. It showed that during the three-month 
period: 


- HBUS had purchased about $470 million in U.S. dollars from 
Banco Mercantil Del Norte, a major Mexican bank, while 
selling it only about $22 million in U.S. dollars. 

- HBUS had purchased about $281 million in U.S. dollars from 
BBVA Bancomer, another major Mexican bank, while selling it 
only about $5 million. 

- HBUS had purchased about $196 million in U.S. dollars from 
Case de Cambio Puebla, and $194 million from Consultoria 
International, without selling either any U.S. dollars. 

- During the same period, HBUS had purchased about $742 
million in U.S. dollars from HBMX, while selling it only a little 
more than $1.3 million. 

These figures indicate that HBMX was, by far, HBUS’ largest banknotes 
customer in Mexico. 

In July 2009, the OCC initiated an AML examination of HBUS’ 
global banknotes operations, and soon discovered that the bank was not 
monitoring the banknotes activities of its affiliates.*^^ That same month, 
HBUS resumed monitoring its banknote accounts.®^^ In September, the 
OCC requested documentation related to banknotes accounts for 25 
Latin American financial institutions, including ten in Mexico. In 
November 2009, the examination team added examiners from the 
Federal Reserve. Additional requests for information were made, 
including with respect to HSBC affiliates with banknotes accounts, 


620 j j/ 27/2008 email from HSBC David Bagley to HSBD Warren Learning, copy to Richard 
Bennett, “Mexico,” HSBC OCC 8875605. 

See undated “HBUS Banknotes NY -■ USD Bought from or Sold to Customers in Mexico: 3- 
Month Period (Nov-06 to Feb-07),” prepared by HBUS, OCC-PSI-001 51506. See also undated 
“Banknotes-NY Selected Customers’ Activity Alerts & Traders’ Explanations for USD 
Purchases & Sales from 2005-2009,” prepared by HNAH, OCC-PSI-00005890-904. 

See 2/6/2010 email from HBUS Janet Burak to HBUS Brendan McDonagh, “Expanded 
‘Banknotes Exam,”’ OCC-PSl-00787479 (summarizing the banknotes examination effort). See 
also Subcommittee interview of Joseph Boss (1/30/2012). 

See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, OCC-PSl-00864335-365, at 360. 
[Sealed Exhibit.] 
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HBMX, Mexican casas de cambio, and HBMX’s U.S. dollar accounts in 
the Cayman Islands, 

In August 2009, the OCC summarized some of the information in 
an internal memorandum.*^'' According to the OCC, due to transaction 
costs, banknotes transactions at HBUS typically occurred only about 
once per month and involved large shipments.*^* In addition, transaction 
volumes often fluctuated on a seasonal basis, increasing during holidays 
or tourist seasons.*^* According to the OCC, HBUS said that it 
conducted AML monitoring on a monthly basis, examining banknotes 
transactions by customer and inquiring when significant changes in the 
volume of U.S. dollar sales or purchases took place.*^’ 

When the OCC conducted tests on the 2009 HBUS banknotes data, 
however, it determined that the volume data was not always accurate, 
and HBUS did not keep records of its reviews or actions: 

“When volumes changed significantly, the bank did not seem to be 
aware of these changes, and it does not appear that the bank took 
any action as a result. For example, even though transactions 
volumes for customers in Mexico increased significantly from the 
first 6 months of 2008, over the first 6 months of 2009, there was 
no documentation in the files that the bank noted the change or 
took any action. ... Bank employees ... assured us that adequate 
monitoring takes place within the business line and Compliance. 
However, we were unable to find anything in the files that this was 
the case. They also cautioned that too much documentation results 
in increased legal risk. We explained to the bank that written 
documentation is necessary, for institutional memory, and to 
ensure that controls are exercised. We noted the bank’s appetite 
for risk, as well as the risk inherent in the Banknotes business. The 
business line seemed to resist this message, but Compliance staff 
seemed to eventually grasp the importance of better 
documentation.”*^* 

As the data confirmed that HBMX was the single largest supplier 
of U.S. dollars to HBUS, transferring billions of dollars that far 
outstripped the volumes being supplied by larger Mexican banks and 
other HSBC affiliates, Mexican and U.S. law enforcement and 
regulatory authorities continued to express concern that HBMX’s bulk 
cash shipments could reach that volume only if they included illegal 


See 8/13/2009 OCC memorandum to OCC AML Examiners from the OCC Compliance Risk 
Analysis Division, “HSBC Global Banknotes, Compliance RAD assistance,” OCC-PSI- 
00846642. [Sealed Exhibit.] 

Id. at 4. 

“Id. 

“Id. 

Id. at 4-5. 
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drug proceeds. In a January 2010 meeting, U.S. law enforcement and 
regulators also expressed concern that the problem extended beyond 
Mexico: 

“The bulk cash receipts by HSBC’s Bank Note Business from 
certain correspondent accounts based in Central and South 
America exceed reasonably expected volumes of USDs that should 
be within those countries from tourism, foreign business, etc.”®^ 

(3) Remedial Action 

In response to the concerns expressed by regulators and law 
enforcement, HBMX took a number of steps to gain a better 
understanding and control of its U.S. dollar transactions. The first set of 
actions, in February 2008, focused on gaining better information. 

HBMX announced a new policy, effective immediately, to deem all 
customers who deposited more than $100,000 in a month as SCC clients 
subject to enhanced due diligence. HBMX identified 312 customers that 
met that criteria and subjected them to a KYC review. HBMX also 
undertook a review of its branches to identify the nature and volume of 
their U.S. dollar transactions,*^' and a review of its money service 
business clients to determine whether each relationship should 
continue.*^^ Still another action HBMX took was to change its account 
monitoring criteria to increase scrutiny of U.S. dollar deposits by 
customers.*''^ 

In November 2008, after another meeting with regulators critical of 
its U.S. dollar transactions, HBMX went further. It ordered its branches 
to stop providing physical U.S. dollars to customers and non-customers 
alike, other than through ATMs at airports.*'*"' It also prohibited 


1/1 1/2010 meeting memorandum, prepared by the Federal Reserve Bank of Chicago, “DOJ 
Concerns with HSBC Bank Notes Activities,” BOG-SR'001402-1409, at 402 [Sealed Exhibit.] 

See undated “Actions taken since 18FEB.” prepared by HBMX, HSBC OCC 8875040- 
041 (describing actions taken after a Feb. 18, 2008 meeting with the CNBV); 3/3/2008 “Internal 
Control, HSBC Mexico SA,” prepared by HBMX, HSBC OCC 8966027-038. But see 7/28/2008 
email from HBMX Luis Alverez to HSBC John Root and HBMX Ramon Garcia, “Major Issues 
Outstanding,” HSBC OCC 8873598 (“In order to mitigate risk in HBMX, I OOK process was 
implemented (customers which make USD cash deposits exceeding 100k within a one-month 
period). It has been identified that 974 customers made cash deposits for a total amount of 
USD308 Million from Jan to May. These customers are classified in our monitoring systems as 
high-risk customers and an enhanced KYC must be performed for them. If any customers do not 
meet requirements, accounts are closed.”). 

See, e.g., undated “Rectification Programme - 12 major projects in 6 categories,” prepared by 
HBMX, HSBC OCC 8875046 (listing as item 5, on “USD Banknotes”: “Review of USD 
intensive customers” and “Analysis of transaction patterns through branches”). 

7/28/2008 email from HBMX Luis Alverez to HSBC John Root and HBMX Ramon Garcia, 
“Major Issues Outstanding,” HSBC OCC 8873598. 

Undated “Actions taken since 1 8FEB,” prepared by HBMX, HSBC OCC 8875040- 
041 (describing actions taken after a Feb. 18, 2008 meeting with the CNBV). 

See 1 1/27/2008 email from HBMX Luis Pena to HBMX Emiison Alonso, copy to HSBC 
Michael Geoghegan, “Money Launderying,” HSBC OCC 8874849. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00320 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



307 


VerDate Nov 24 2008 


133 

branches from accepting U.S. dollar cash deposits from customers.®^^ In 
addition, HBMX stopped opening new U.S. dollar accounts at its 
Cayman branch, and prohibiting the acceptance of new cash deposits for 
existing Cayman accounts.®^** All of these actions led to a steep drop in 
the number and volume of HBMX U.S. dollar transactions. 

As HBMX cut back dramatically on its U.S. dollar business 
beginning in early 2009, OCC AML examiners found that HBUS 
appeared to be increasing its U.S. dollar transactions with Mexican 
clients, including some of the high risk casas de cambio that could no 
longer engage in the same volume of U.S. dollars with HBMX.®^’ 

HSBC Group Compliance knew about HBUS’ Mexican casa de cambio 
clients. Rather than press HBUS to close the accounts, however, HSBC 
Group Compliance head David Bagley merely observed to a colleague 
in January 2009: “I am surprised that HBUS still have cambio 
clients.”*’ * 

A year later, in June 2010, HBUS decided to exit the U.S. 
banknotes business. It closed the Global Banknotes offices in New 
York, London, Hong Kong, and Singapore, and later sold portions of the 
banknotes business to other banks.*^ HBUS also declined to renew its 
contract to operate U.S. currency vaults for the Federal Reserve Bank of 
New York when that contract expired in 2010. In September 2010, the 
OCC issued a supervisory letter identifying multiple AML deficiencies 
at HBUS, including with respect to its banknotes business, and followed 
with a cease and desist order in October. 

F. Analysis 

Over the years, HBUS maintained correspondent accounts for at 
least 80 HSBC affiliates and banknotes accounts for at least 29 HSBC 
affiliates, which accounted for a large portion of its U.S. dollar activities. 
In 2009, for example, HSBC determined that “HSBC Group affiliates 
clear[ed] virtually all USD [U.S. dollar] payments through accounts held 
at HBUS, representing 63% of all USD payments processed by 
HBUS.”®'"’ HSBC also calculated that, over an eight-year period, its 

Id. 

! 1/27/2008 email from HSBC Warren Learning to HSBC David Bagley and Richard Bennett, 
“Mexico,” HSBC OCC 8875605-607. 

See, e.g., 9/1/2009 OCC memorandum to the Files, “Washington Meeting,” OCC-PSi- 
01416833 (“[0]nce HSBC Mexico ceased its operations, FIBUS began significant volume of 
Banknote activity directly with some of HSBC Mexico’s former Banknote clientele.”). [Sealed 
Exhibit.] 

638 {/27/2009 email from HSBC David Bagley to HSBC Susan Wright and Warren Learning, 
“Press Release,” HSBC OCC 8873485. 

Id. In 2010, HSBC Holdings pic sold its U.S. wholesale banknotes business in Asia to United 
Overseas Bank Limited (UOB) for $1 1 million, and in 201 1, sold its European banknotes 
business to HSBC Bank pic. It recorded total closure costs of $ 1 4 million during 20 1 0. id. 

See 9/9/2009 chart entitled, “HSBC Profile,” included in “HSBC OFAC Compliance 
Program,” a presentation prepared by HSBC and provided to the OCC, at HSBC OCC 8874197. 
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U.S. dollar clearing business had increased over 200%, from processing 
an average daily amount of $185 billion in 2001, to $377 billion in 
2009.^'" HBUS functioned as the U.S. nexus for the entire HSBC global 
network of financial institutions. Some of those institutions used their 
access to the U.S. financial system as a selling point to attract clients.®”*^ 
Not all of those affiliates operated in high risk jurisdictions like Mexico; 
not all had high risk clients like casas de cambio; not all had high risk 
products like U.S. dollar Cayman accounts; and not all had weak AML 
controls. But some HSBC affiliates operated under those circumstances, 
and HBMX provides a case history of the money laundering risks that 
followed. HBMX illustrates how the U.S. affiliate of a global bank can 
belter protect itself by conducting careful due diligence of fellow 
affiliates, as already required by law, identifying higher risk institutions, 
and understanding their high risk clients, high risk products, AML 
controls, and money laundering vulnerabilities. HBMX also illustrates 
the need for ongoing, effective account monitoring to detect, prevent, 
and report suspicious activity. Effective monitoring and SAR reporting 
require adequate resources and personnel. Still another lesson is that 
AML personnel at the parent and affiliates of a global bank should 
consider all legal avenues for systematically sharing information with 
each other about suspicious clients and transactions in order to combat 
misuse of their network by drug traffickers, organized crime, and other 
wrongdoers. 


“"id. at “USD Payment Statistics - Fact SheeC HSBC OCC 8874211. 
Subcommittee interview of Michael Geoghegan (5/42/2012). 
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IV. HSBC AFFILIATES: CIRCUMVENTING OFAC 

PROHIBITIONS 

The United States prohibits doing business with certain persons 
and entities, including terrorists, persons engaged in nuclear 
proliferation, drug kingpins, and persons associated with rogue 
jurisdictions such as Iran, North Korea, and Sudan. To implement the 
law, the U.S. Treasury Department’s Office of Foreign Assets Control 
(OFAC) has developed a list of those prohibited persons and countries 
which banks use to create an “OFAC filter” to identify and halt 
potentially prohibited transactions. Transactions stopped by an OFAC 
filter typically undergo an individualized review to see if the transaction 
can proceed. 

Foreign banks that engage in U.S. dollar transactions typically 
execute them through the account of a bank in the United States, subject 
to the U.S. bank’s OFAC filter. While most processing takes less than 
24 hours, transactions stopped by the OFAC filter for further review 
may undergo substantial processing delays and, in some cases, payments 
may be blocked and held for years. Because of the additional time and 
expense involved when transactions are subjected to review, some 
foreign banks have developed a variety of tactics to avoid the OFAC 
filter. Common tactics included intentionally stripping information from 
the transaction documentation to conceal the participation of a 
prohibited country or person, or using “cover payments.” In the context 
of Iranian transactions, cover payments are transfers between 
correspondent banks in non-sanctioned jurisdictions which lack 
underlying payment details, including information about a party that is a 
prohibited country or person. In the case of Iranian U.S. dollar 
transactions, some banks used one or both of these practices when 
conducting so-called “U-tum” transactions, a type of transaction that 
was allowed under OFAC regulations prior to November 2008, but 
because the transactions referenced Iran, routinely triggered the OFAC 
filter and required an individualized review which delayed the 
transaction’s processing. In recent years, U.S. law enforcement has 
penalized some international banks that used willfully deceptive tactics 
to circumvent the OFAC filter and process prohibited transactions. 

The Subcommittee conducted a review of issues related to the 
sending of OFAC sensitive transactions through HBUS’ correspondent 
accounts from 2000 to 2010, by HSBC affiliates. The evidence indicates 
that, for years, some HSBC affiliates sending OFAC sensitive 
transactions involving Iran through their U.S. dollar correspondent 
accounts at HBUS took steps to conceal them, including by deleting 
references to Iran from the payment instructions or by characterizing the 
transaction as a transfer between banks in permitted jurisdictions without 
disclosing any Iranian connection. More specifically, from at least 2001 
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to 2007, two HSBC affiliates, HSBC Europe (HBEU) and later HSBC 
Middle East (HBME), repeatedly conducted U-tum transactions 
involving Iran through HBUS, many of which were not disclosed to the 
bank, even though they knew HBUS required full transparency to 
process U-tums. To ensure HBUS cleared the transactions without 
delay, HBEU routinely altered transaction documentation to delete any 
reference to Iran that might trigger the OFAC filter at HBUS and also 
typically characterized the transaction as a transfer between banks in 
permitted jurisdictions. The aim of the affiliates’ efforts appeared to be 
to ensure the Iranian transactions utilized HBUS’ automated processing 
procedures and avoided any human intervention or manual review, a 
process known as straight through processing or STP. Internal bank 
documents also indicate that the affiliates viewed the U-tums they sent 
through HBUS’ accounts as permitted by OFAC rather than prohibited 
transactions under U.S. law, but their failure to provide full transparency 
prevented any individualized review by HBUS to confirm their legality. 

Internal bank documents show that HSBC Group Compliance 
knew of HBUS’ insistence on full transparency for U-tums and the 
practice of HSBC affiliates to conceal the Iranian transactions sent 
through their U.S. dollar correspondent accounts at HBUS. HSBC 
Group Compliance, as well as other senior HSBC Group executives, 
allowed the HSBC affiliates to continue to engage in these practices, 
which even some within the bank viewed as deceptive, for more than 
five years without disclosing the extent of the activity to HBUS. The 
bank documents show that, from 2000 to 2005, the practice of altering 
U-tum transaction documentation was repeatedly brought to the 
attention of HSBC Group Compliance, including by HBEU personnel 
who objected to participating in the alteration of documents and twice 
announced deadlines to end the activity. Despite receiving this 
information, HSBC Group Compliance did not stop HSBC affiliates 
from sending concealed Iranian transactions through FIBUS’ accounts 
until the bank decided to exit Iran altogether in 2007. 

At the same time, while some at HBUS claimed not to have known 
they were processing undisclosed Iranian transactions from HSBC 
affiliates, internal documents show key senior HBUS officials were 
informed as early as 2001 . In addition, on several occasions, HBUS’ 
OFAC filter stopped Iranian transactions that HBUS had indicated 
should be disclosed by HSBC affiliates, but were not. Despite the 
evidence of what was taking place, HBUS failed for years to demand a 
full accounting of what HSBC affiliates were doing. While HBUS 
insisted, when asked, that HSBC affiliates provide fiilly transparent 
transaction information, when it obtained evidence that some affiliates 
were acting to circumvent the OFAC filter, HBUS failed to take decisive 
action to confront those affiliates, stop the conduct, and ensure all 
Iranian U-tums were subjected to individualized reviews to gauge 
whether they complied with the law. 
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In addition to Iranian transactions, HBUS documents indicate that, 
from at least 2002 to 2007, some HSBC affiliates also sent potentially 
prohibited transactions through HBUS involving Burma, Cuba, North 
Korea, or Sudan, although none of the affdiates employed the same type 
of systematic effort used for transactions involving Iran. In recent years, 
HBUS’ OF AC compliance program as a whole has also displayed AML 
deficiencies. 

In 2010, HBUS hired an outside auditor, Deloitte LLP, to identify 
and examine the OF AC sensitive transactions involving Iran and other 
prohibited countries or persons that went through the bank.*'*^ That 
review, which is ongoing and has yet to review all relevant transactions, 
has so far identified, over a seven-year period from 2001 to 2007, more 
than 28,000 OFAC sensitive transactions sent through HBUS involving 
a total of $19.7 billion. Of those 28,000 transactions, more than 25,000 
totaling more than $19.4 billion involved Iran, while 3,000 involved 
other prohibited countries or persons. The Deloitte review characterized 
2,584 of those transactions, involving assets in excess of $367 million, 

79 of which involved Iran, as “Transactions of Interesf’ requiring 
additional analysis to determine whether violations of U.S. law 
occurred,®'''' HBUS is currently in the process of analyzing those 
transactions, which could lead to financial penalties if it is found to have 
violated OFAC regulations. 

Finally, another issue involves actions taken by some HSBC Latin 
American affiliates, with the approval of HSBC Group Compliance, to 
send non-U. S. dollar payment messages through a U.S. server whose 
OFAC filter was not turned on to screen them for terrorists, drug 
kingpins, or other prohibited persons. HSBC Group Compliance 
allowed those payment messages to move through the United States and 
utilize U.S. facilities while bypassing the OFAC filter, despite HBUS 
concerns that such messaging traffic might require OFAC screening to 
block transfers involving terrorism, drug trafficking, or other 
wrongdoing. The transactions were later screened by HSBC Group’s 
WOLF filter. 

A. Background on OFAC Prohibitions 

OFAC. The Office of Foreign Assets Control (OFAC) within the 
U.S. Department of Treasury administers and enforces economic and 
trade sanctions stemming from U.S. foreign policy and national security 
goals, and other threats to the foreign policy, national security, or 
economy of the United States. ®''® The office was formally established in 


See Deloitte Review of OFAC transactions, “Results of the Transactions Review - UK 
Gateway, March 29, 2012,” HSBC-PSl-PROD-0197919 -989, at 930. 

644 

See U.S. Department of Treasury Office of Foreign Assets Control (OFAC), 
http://www.treasury.gov/about/ organizational-structure/offices/Pages/Office-of-Foreign-Assets- 
Control.aspx. 
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December 1950, when President Truman blocked all Chinese and North 
Korean assets subject to U.S. jurisdiction.^* Its programs seek to 
prohibit U.S. persons and entities ftom engaging in trade or financial 
transactions with terrorists, persons engaged in activities related to the 
proliferation of weapons of mass destruction, international narcotics 
traffickers, and rogue jurisdictions. 

OF AC’s regulatory authority is exercised under Presidential 
national emergency powers and laws enacted by the U.S. Congress to 
impose controls on transactions and authorize the freezing of assets 
under U.S. jurisdiction. According to OF AC, “[mjany of the U.S. 
sanctions are based on United Nations and other international mandates, 
are multilateral in scope, and involve close cooperation with allied 
governments.”*"*^ The freezing of assets “immediately imposes an 
across-the-board prohibition against transfers or dealings of any kind 
with regard to the property,” and the owner of the asset must contact 
OF AC directly to request the release of a frozen asset. OF AC 
prohibitions support U.S. and international efforts to combat terrorism, 
nuclear proliferation, drug trafficking, and other wrongdoing. 

OF AC administers both comprehensive and selective sanctions 
programs. The comprehensive U.S. programs apply to persons and 
entities within a designated jurisdiction and have applied to Burma 
(Myanmar), Cuba, Iran, Sudan, and Syria. The non-comprehensive 
programs target specific individuals and entities rather than impose 
broad prohibitions involving an entire country. These programs have 
applied at times to persons and entities associated with Iraq, Libya, 

North Korea, Somalia, and Zimbabwe. To carry out U.S. sanctions 
programs, OFAC has developed a list of Specially Designated Nationals 
and Blocked Persons (SDN). The SDN designation covers both 
individuals and entities in which SDN persons have a direct or indirect 
ownership interest of 50% or more. The SDN designation applies to 
covered entities whether or not the entity is named on the SDN list.*"** 
U.S. persons are prohibited from dealing with persons and entities on the 
SDN list, and all SDN assets in the United States are supposed to be 
blocked. OFAC also has authority to grant general and specific 
“licenses,” which authorize exceptions for certain categories of 
transactions, such as those related to humanitarian efforts. 


Id. OFAC is the successor to the Office of Foreign Funds Control (the “FFC”) that was 
established at the beginning of World War I! in 1940. However, the Treasury Department 
administered sanctions as far back as the War of 1812 when sanctions were imposed against 
Great Britain. Id. 

‘"Id. 

See OFAC website, FAQ #10: http;//www.treasury.gov/resource- 
centcr/faqs/Sanctions/Pages/ques_index.aspx. 
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OFAC regulations apply to all U.S. persons, both citizens and 
permanent resident aliens, regardless of where they are located, as well 
as all persons and entities within the United States, and all U.S. 
incorporated entities and their foreign branches.'’^” Fines for violating 
U.S. sanction laws and OFAC regulations can be substantial. Criminal 
penalties can result in fines ranging from $50,000 to $10 million and 
imprisonment for 10 to 30 years for willful violations. Civil penalties in 
various matters range from $250,000 or twice the amount of each 
underlying transaction to $1,075,000 for each violation.*^' 

Iran and U-turn Transactions. For more than thirty years, dating 
back to 1979, the United States has applied sanctions programs to Iran, 
enforced by OFAC.*’^^ These programs have generally prohibited U.S. 
persons from engaging in transactions with anyone associated with Iran, 
and the OFAC filter has stopped any financial transaction including an 
Iranian reference. 

Between 1995 and November 10, 2008, however, OFAC 
regulations also included an exception to the prohibition on Iranian 
transactions commonly referred to as “U-tums.” U-tum transactions 
were authorized by OFAC under regulations issued in 1995. In that 
year. President Clinton declared that Iran was an international threat for 
its attempt to obtain a nuclear weapon as well as its role in undermining 
ongoing peace talks in the Middle East. As such, U.S. financial 
institutions were generally barred by OFAC from processing 
transactions involving Iran. In their place, OFAC allowed only those 
Iran-related transactions that began and ended in non-Iranian foreign 
banks. According to Treasury: 

“This is commonly referred to as the ‘U-tum’ authorization. It is 
so termed because it is initiated offshore as a dollar-denominated 
transaction by order of a foreign bank’s customer; it then becomes 
a transfer from a correspondent account held by a domestic bank 
for the foreign bank to a correspondent account held by a domestic 
bank for another foreign bank; and it ends up offshore as a transfer 


See OFAC website, FAQ til I: http://www.trea3ury.gov/resource- 
center/faqs/Sanctions/Pages/answer.aspx# 1 0 

See U.S. Department of Treasury Office of Foreign Assets Control (OFAC), 
http://www.treasury.gov/about/ organizationaJ-structure/offices/Pages/Office-of-Foreign-Assets- 
Control.aspx. 

See 31 C.F.R. Part 535, Iranian Assets Control Regulations, and 31 C.F.R. Part 560, Iranian 
Transactions Regulations, which together comprise the Iranian sanctions program. Initial Iranian 
sanctions regulations, now detailed in Part 535, were created on November 14, 1979, after U.S. 
diplomats were taken hostage in Tehran, and President Carter blocked assets located in the 
United States belonging to the Government of Iran. On October 29, 1987, following Iran’s 
expressions of support for international terrorism and aggressive actions against non-hostile 
shipping in the Persian Gulf, President Reagan issued Executive Order 1 2613, the predecessor to 
Part 560. From 1995 to 1997, President Clinton issued three additional Executive Orders, 
numbered 1 2957, 1 2959, and 1 3059, which culminated in a prohibition of nearly all trade and 
investment activities with Iran by U.S. persons, rega-dless of location. 
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to a dollar-denominated account of the second foreign bank’s 

customer.”*^^ 

In essence, the new regulations only allowed U.S. financial 
institutions to clear U.S. dollar transactions involving non-Iranian 
intermediaries, even if they involved Iranian clients. This restriction 
meant transactions involving Iran could be processed only if the 
beginning and ending points were non-Iranian foreign banks. The 
purpose of U-tum transactions was to allow U.S. dollar-denominated 
transactions to continue throughout the world - benefitting both U.S. 
commerce and the value of the dollar - but to prevent U.S. citizens and 
institutions from doing business with Iran. This goal was accomplished 
by ensuring that the only point such transactions touched the United 
States was in clearing them for foreign banks. 

The U-tum exception was widely used to carry out U.S. dollar 
Iranian transactions in the United States for many years. In November 
2008, the exception was revoked, and it was no longer legal under 
OF AC regulations to clear Iran-linked transactions even for foreign 
banks, although U.S. banks were still permitted to handle Iranian funds 
in limited circumstances, including transactions supporting humanitarian 
relief.*^'* U.S. persons were explicitly prohibited, however, from 
engaging in any transaction or dealing in any property or property 
interest with any Iranian bank designated under the Nonproliferation of 
Weapons of Mass Destruction or Specially Designated Global Terrorist 
programs.*’’ 

The U-tum exception for Iran in OFAC regulations until 2008 does 
not appear in any other OFAC regulation, and so does not affect 
transactions involving any other prohibited country or person. 

Prosecutions for OFAC Violations. In recent years, a number of 
large, international banks have been prosecuted for systematically 
violating OFAC prohibitions. In most cases, the violations involved the 
practice of stripping information from wire transfer documentation to 
hide the participation of a prohibited person or country, and executing 
the prohibited transaction through a U.S, dollar account at a U.S, 
financial institution. For example, in December 2009, Credit Suisse was 
fined $536 million by the Department of Justice for altering wire transfer 
documentation from 1995 to 2006, in transactions involving Burma, 
Cuba, Iran, and Libya. That same month Lloyd’s Bank was fined $217 


See Treasury website, http://vt'ww.treasury.gov/resource- 
center/sanctions/Documents/fr73_ 66541.pdf; OFAC website, 

htlp://www.treasury.gov/about/organizat{onal-structure/ofrices/Pages/Office-of-Foreign- Assets- 
Control.aspx, at 2. 

See OFAC website, http://www.treasury.gov/about/organizational- 
structure/offices/Pages/Office-of-Foreign-Assets-ControI.aspx, at 2. 

Id. at 2. 
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million for stripping information from wire transactions over a ten-year 
period, from the mid 1990s through September 2007. In May 2010, 
ABN Amro was fined $500 million for removing information from wire 
transfers involving OFAC sanctioned countries between 1995 and 2005. 

Most recently, on June 12, 2012, the U.S. Justice Department and 
New York County District Attorney’s Office entered into a deferred 
prosecution agreement with ING Bank N.V. and imposed the largest fine 
ever levied against a bank for OFAC violations.*^* For processing more 
than $2 billion in transactions on behalf of Cuban, Iranian, and other 
prohibited persons, ING Bank agreed to a criminal forfeiture of $619 
million. The Treasury Department’s press release revealed that ING 
Bank had “intentionally manipulated financial and trade transactions to 
remove references to Iran, Cuba, and other sanctioned countries and 
entities.”**^ It noted that ING Bank’s methods included not referencing 
a payment’s origin, utilizing “misleading” payment messages, and using 
shell companies. According to court filings, between the early 1990s 
and 2007, ING Bank processed more than 20,000 transactions in 
violation of OFAC prohibitions, “with the knowledge, approval and 
encouragement of senior corporate managers and legal and compliance 
departments.”*** 

A summary of recent prosecutions and legal actions related to 
OFAC violations follows. 


Recent Prosecutions and Legal Actions Related to OFAC Violations 


Bank 

Date 

Fine 

Link 

Brief Summary 

ING 

Bank 

N.V. 

6/12/2012 

$619 

million 

• DOJ Press Release 

(htip://www.treasury.gov 
/press-center/press- 
releases/Pages/tg 1612. 
aspx) 

The Department of Justice and the 
New York County District 
Attorney’s Office entered into 
simultaneous deferred prosecution 
agreements with ING Bank relating 
to 20,000 transactions totaling $1.6 
billion processed through the U.S. 
financial system on behalf of 

Cuban and Iranian entities from the 
early 1990s through 2007. 


See, e.g. United States V- Ing Batik. N.V. . Case No. I;i2cr!36 (USDC DDC), Information 
(6/12/2012) and Deferred Prosecution Agreement (6/12/2012). 

6/12/2012 “ING Bank N.V, Agrees to Forfeit $619 Million For Illegal Transactions With 
Cuban and Iranian Entities,” Treasury press release, www.treasury.gov/press-center/press- 
releases/Pages/tg 1 6 1 2.aspx. 

658 id_ 
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Barclays 

Bank 

8/18/2010 

$298 

million 

• DOJ Press Release 
{ht4):/Avww.jiistice.gov/o 
pa/pr/201 0/August/l 0- 
crm-933.htin!) 

• Wall Street Journal. 
Probe Circles Globe 
to Find Dirtv 

Money 

(hnp;//online. wsj.com/arti 
cle/SB100014240527487 
0343 16045754680940907 
00862.html) 

The Department of Justice and the 
New York County District 
Attorney’s Office entered into 
deferred prosecution agreements 
with Barclays Bank for activity 
relating to transactions illegally 
conducted for customers in Cuba, 
Iran, Libya, Sudan, and Burma 
from the mid-1990s until 

September 2006. 

ABN 

Amro 

Bank 

5/10/2010 

$500 

million 

• DOJ Press Release 
(http://www.jusrice.gOv/o 
pa/pr^O 1 0/May/1 0-crm • 
548.html) 

• Wall Street Journal. 
RBS. DOJ lo End 
Deferred Prosecu- 
lion Aereement 
over ABN Amro 

(hOp://blogs.wsj.cotTi/coiT 
uption-cuTTCnts/20 1 !/ 

1 2/28/rbs-doJ-to-en<J- 
deferred-prosecution- 
agreement -0 ver-abn 
amro/) 

The Department of Justice entered 
into a deferred prosecution 
agreement with ABN Amro Bank 
for removing information from 
wire transfers from 1995-2005 for 
customers in Iran, Libya, the 

Sudan, Cuba, and other OFAC- 
listed countries. 

Credit 

Suisse 

Bank 

12/16/2009 

$536 

million 

• DOJ Press Release 
(hnp://www.justice.gov/o 
pa/pr/2009/December/09- 
ag-1358.html) 

• DOJ Statement of 
Facts 

(http://wwwjustice.gOv/c 
rim inal/pr/documents/ 1 2- 
16-09-CreditSuisse- 
factualstatement.pdf) 

The Department of Justice entered 
into a deferred prosecution 
agreement with Credit Suisse. The 
fines related to alterations on wire 
transfers from 1 995 to 2006 from 
Iran, Cuba, Burma, and Libya. 

Lloyd’s 

Bank 

01/09/2009 

$217 

million 

• DOJ Press Release 
(hnp;//www.jusiice.gov/o 
pa/pr/2009/January/09- 
cnn-023.htm0 

The Department of Justice and the 
New York County District 
Attorney’s Office entered into 
deferred prosecution agreements 
with Lloyd’s Bank for wire 
stripping transactions from the mid- 
1990s through September 2007. 

Australia 

and New 

Zealand 

Bank 

Group 

Ltd. 

8/24/2009 

$5,75 

million 

• Treasury Settlement 
Statement 

(http://www.treasufy.gov/ 
resource-center/sanctions 
/OFAC-Enforcemenl/ 
Documents/anz 
08242009.pdf) ’ 

• Enforcement 
Documents 

(http://www.treasufy.gov/ 

resource-center/sancrions 

/OFAC-Enforcemeni/Do 

cumCTts/08242009.pdf) 

The Treasury Department entered 
into a settlement with the Australia 
and New Zealand Bank Group 
relating to currency exchanges 
from 2004 lo 2006, for transactions 
processed through U.S. 
correspondent accounts for 
customers in Cuba and Sudan. 


Prepared by the U.S. Senate Permanent Subcommittee on Investigations 
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HSBC is currently under investigation by the U.S. Justice 
Department and several Federal financial regulatory agencies for 
engaging in similar practices in possible violation of OFAC 
regulations.*^’ In October 2010, an internal Federal Reserve email 
discussing HSBC’s decision to hire an outside auditor to review its 
records “presumably to find problematic transfers,” noted that “HSBC 
was one of the two major UK banks for Iranian banks during the early 
2000s (Lloyds being the other), so we can imagine what will be 
found.”*“ 

B. Executing OF AC-Sensitive Transactions 
(1) Transactions Involving Iran 

(a) Overview 

Documents collected by the Subcommittee do not pinpoint when 
undisclosed Iranian transactions began moving through HBUS in 
potential violation of OFAC regulations. HSBC officials were aware of 
the practice generally as early as 2000, as seen in an email discussion 
between HSBC Group’s Compliance head, then Matthew King, and 
AML head Susan Wright. Ms. Wright criticized actions taken by a bank 
client to alter transaction documentation to disguise a wire transfer 
moving through the United States, but their email exchange does not 
disclose whether such transactions were already taking place at 
HBUS.**' By 2001, they clearly were, as described in an email from 
HBEU to HBUS.**^ 

In 2001, when HSBC Europe (HBEU) raised the issue of 
processing U-turn transactions through its U.S. account in compliance 
with U.S. requirements, HBUS personnel made it clear that any such 
transactions would need to be fully transparent and include all 
underlying payment details to enable HBUS to evaluate whether they 
qualified as permissible U-tums. From at least 2001 to 2007, however, 
despite repeated HBUS requests for full transparency, HBEU and later 
HSBC Middle East (HBME) sent transactions involving Iran through 
their U.S. dollar correspondent accounts at HBUS without full disclosure 
of the transaction details. In some instances, the HSBC affiliate simply 
stripped the identifying Iranian information from the transaction 


See 2/27/2012 HSBC Holdings pic 6-K filing with the Securities and Exchange Commission, 
item 13, 

http://sec.gOv/Archives/edgar/data/i089il3/000119163812000216/hsba201202276k7.htm. 

10/07/2010 email from Federal Reserve Stephen Meyer to Federal Reserve Kwayne Jennings, 
and others, “HSBC OFAC.” 

See 6/1 6/2000 email from HSBC Susan Wright to HSBC Matthew King, HSBC OCC 
8875191-92. 

See 6/28/2001 email from HBEU John Wilkinson to HBUS Denise Reilly and others, “Bank 
Melli,” HSBC OCC 8876132-133, discussed below. 
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documentation. In others, the HSBC affiliate also sent the transaction as 
a transfer between hanks in permitted jurisdictions, a tactic sometimes 
referred to as a “cover payment,” since the bank-to-hank transfer acted 
as a cover for the underlying transaction.*®^ Both methods sought to 
ensure that a transaction would not be stopped by HBUS’ OF AC filter 
and delayed for individualized review to determine whether it, in fact, 
qualified as a permissible U-turn, but would instead benefit from 
“straight through processing” or STP. 

From 2001 until 2005, the two HSBC affiliates frequently 
discussed processing Iranian U.S. dollar transactions for various Iranian 
financial institutions and entities through their HBUS correspondent 
accounts. Numerous emails among HBEU, HBME, HBUS, and HSBC 
Group discuss whether HBUS would be willing to process Iranian U- 
tum transactions and, if so, how. At the same time, HSBC Group, 
HBEU and HBME bankers were pushing to expand contacts with Iran. 
The Senior Payments Manager in HBUS reported being told in a July 
2001 conference call that the HSBC Group, with backing from the 
Chairman, was seeking to “significantly grow our presence in Iran.”**'' 

In 2003, an HBME business proposal estimated that processing 700 U.S. 
dollar payments for Iranian banks per day using U-tum transactions 
would produce income of $4 million, while failing to process them 
would threaten HSBC’s current Iranian business which produced annual 
bank income of $2 million.*** HBME also noted that it already had a 
“number of existing USD accounts for Iranian banks.”*** 

Even though discussions with HBUS over processing the 
transactions continued in 2002 and 2003, documentation shows that 
HBEU had already begun to send U-tum transactions through HBUS 
without disclosing an Iranian connection for many of them.**^ Some 
HBUE compliance and payments personnel objected to altering payment 
instructions in connection with the Iranian transactions, and a key 
payments official even announced deadlines in January 2004 and 
September 2004, after which no Iranian payment instructions would be 
altered, but both deadlines were ignored. HBUS finally approved a 


The cover method utilizes the MT202 SWIFT message or payment instruction format, which 
provides a U.S. bank with the names of the foreign banks acting as the originator or beneficiary 
of the immediate transfer, but is not required also to provide the underlying origination and 
beneficiary customer information. 

7/12/2001 email from HBUS Denise Reilly to Douglas Stolberg and others, “Bank Melli,” 
HSBC OCC 8876128-129. HSBC legal counsel told the Subcommittee that the HSBC affiliates 
were already doing business with Iran, but they wanted to increase that business by doing it with 
Bank Melli. Subcommittee meeting with HSBC legal counsel (6/20/12). 

1/2003 memorandum from HBME Rick Pudner to HBUS Denise Reilly, HBEU Malcolm 
Eastwood, and others, “Business Case-USD Payment From Iranian Banks/Entities,” HSBC OCC 
8876490. 

Id. 

See, e.g., 12/30/2002 email from Protomastro to Carolyn Wind and others, HSBC OCC 
8873909. 
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protocol to process transparent U-tums in December 2004.®®* Even after 
that protocol was approved, however, HBEU continued to send 
undisclosed U-tum payments through HBUS using cover payments, 
failing to provide requested information to its own affiliate. 

At HBUS, during the same time period, internal documents show 
that, as early as 2001, senior HBUS payments, compliance, and business 
managers were informed that Iranian U.S. dollar payments were being 
sent by HBEU through HBUS after deleting references to Iran. They 
were also informed of an HBEU proposal to streamline the processing of 
U-tum transactions by omitting references to Iran so the transactions 
would not be halted by the OF AC filter in the United States. Emails at 
the time show that senior HBUS officials expressed discomfort with the 
HBEU proposal, but took no other action to stop or prevent the activity 
already occurring.®®^ In addition, HBUS’ OF AC filter occasionally 
caught an Iranian-related transaction, sent by an HSBC affiliate, in 
which the identifying information had not been fully removed, 
demonstrating that undisclosed U-tums continued to be sent through 
HBUS correspondent accounts, but again, no HBUS personnel took 
further action to stop the activity. In 2003, the Iranian issue was 
discussed again when a new HBUS AML Director arrived, but once 
more, no decisive action was taken to put a stop to undisclosed U-tums. 

Although HSBC Group Compliance was aware of HBUS’ 
concerns, HBEU’s practice of stripping information or using cover 
payments to conceal U-tum transactions involving Iran, and the fact that 
such undisclosed transactions were routinely slipping through HBUS 
accounts, HSBC Group did not prohibit the practice for years. In July 
2005, HSBC Group issued a Group-wide directive, Group Circular 
Letter (GCL) 050047, barring all HSBC affiliates from engaging in U.S. 
dollar transactions in violation of OFAC regulations, but continued to 
allow their use of cover payments for permissible U-tum transactions, 
which meant the transactions would continue to circumvent the OFAC 
filter and individualized review by recipient U.S. banks. In April 2006, 
HSBC Group issued a second Group-wide directive, GCL 060011, 
requiring HSBC affiliates and other financial institutions to use fully 
transparent payment instructions when sending transactions through 
HBUS accounts, but again allowed U-tums “to be made as cover 
payments,” In 2007, HSBC Group decided to exit Iran. 


See 12/2/2004 email from HBUS Denise Reilly to HBUS Michael Gallagher and others, “U- 
Tums,” HSBC OCC 3407526-527; 1 2/1 5/2004 email from HSBC David Bagley to HSBC 
Marilyn Spearing and HBME David Hodgkinson, “Iran — OFAC,” HSBC OCC 8874039; and 
5/4/2005 email from HBUS Elizabeth Protomastro to HBUS Teresa Pesce and others, “Wire 
Payments Suspended,” HSBC OCC 8874710. 

7/1 1/2001 email from HBUS Douglas Stolberg to HBUS Denise Reilly, HBUS .loe Harpster, 
and HBUS Michael Gallagher, “ Bank Melli,” HSBC OCC 8876129. 
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In recent years, OFAC has sent over a dozen so-called Cautionary 
Letters to HBUS about incidents in which it failed to block a prohibited 
transaction, including transactions involving Iran.^’° In 2010, HSBC 
Group employed an outside auditor, Deloitte LLP, to identify and review 
OFAC sensitive transactions at HBUS over a seven-year period from 
2001 to 2007. That review has so far examined 58 million payment 
messages involving assets of $37 billion that passed through the key 
server, located in the United Kingdom, during that timeframe and 
identified OFAC sensitive U.S. dollar transactions involving assets 
totaling $19.7 billion. The review identified almost 25,000 U.S. dollar 
transactions involving Iran, involving assets in excess of $19,4 billion.*” 
The vast majority of the Iranian transactions, ranging from 75% to 90% 
over the years, were sent through HBUS and other U.S. dollar accounts 
without disclosing any connection to Iran. While the affiliates may have 
viewed these U-turns as permissible under U.S. law, the absence of 
identifying information meant they did not trigger the OFAC filter or an 
individualized review by HBUS to make sure. 

(b) Concealing Iranian Transactions 

2000 Notice Regarding Iranian Transactions. On June 9, 2000, 
the HSBC Group AML Compliance head Susan Wright learned in an 
email that a client bank was using deceptive practices to send OFAC 
sensitive U.S. dollar transactions through U.S. correspondent accounts 
while evading detection by the OFAC filter. 

In the June 9, 2000 email to Ms. Wright from an HSBC colleague, 
she was informed that a particular bank, whose name was redacted by 
HSBC from the email, was “automatically replacing a remitter’s name 
with that of’ the bank.*’^ The email stated that the bank planned to 
cease the practice by the end of June, but in the future, for OFAC 
sensitive transactions, would “arrange cover for the payment using 
MT202/203 remittances.” “MT202/203” refers to the SWIFT message 
or payment instructions used to execute bank-to-bank transfers. The 
email explained that bank-to-bank transfers did not require identifying 
the underlying party who originated the transaction or the ultimate 
beneficiary of the payment.*’^ It also indicated that the bank planned to 
send a separate “MTIOO message” to the recipient bank providing full 
payment details for the originator and ultimate beneficiary. The email 
stated: “In this way a payment, in US$ can be made for an individual or 


Department of the Treasury, Office of Foreign Assets Control (OFAC) Cautionary Letters 
sent to HSBC, September 2008 - April 2012, PSI-OFAC-01-0001 -01 5. 

Deloitte Review of OFAC transactions, “Results of the Transactions Review - UK Gateway, 
March 29, 2012,” HSBC-PSl-PROD-0197919-989, at 930. 

6/9/2000 email from HSBC Bob Cooper to HSBC Susan Wright, “Significant Exception 
2Q00-04,” HSBC OCC 8875192-193. 

Id. 
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company on the OFAC list, without the name being ‘detected’ by the 
OF AC filters that all US banks would apply 

Ms. Wright forwarded the June 2000 email to Matthew King, then 
head of HSBC Group Compliance, describing the client bank’s past 
procedure of altering transaction documentation when processing OFAC 
sensitive wire transfers. She wrote: “We advised them that this was 
contrary to SWIFT guidelines (drawn up to address FATF®^^ concerns re 
money laundering via wire transfers) which required that the full details 
(names and addresses) of remitters and beneficiaries are included.”®’® 
She also described the client bank’s future plan to conceal OFAC 
sensitive transactions behind bank-to-bank transfers. Ms. Wright wrote: 
“From a Group perspective I consider the continuation of this practice to 
be unacceptable and as a deliberate and calculated method to avoid the 
US OFAC sanctions has the potential to raise serious regulatory 
concerns and embarrass the Group.”®” 

Ms. Wright’s reaction indicates that as early as 2000, HSBC Group 
Compliance learned of practices being used to avoid detection by the 
OFAC filter, and viewed them as “unacceptable” and raising potential 
regulatory concerns that were capable of embarrassing HSBC. 

2001 Bank Melli Proposal. Six months later, in January 2001, 
HBEU approached HBUS with a proposal to use its U.S. dollar 
correspondent account at HBUS to clear U.S. dollar transactions for 
Bank Melli, the largest commercial retail bank in Iran.®’* At that time. 
Bank Melli’s London Branch maintained a U.S. dollar account with 
several other major international banks, but was interested in 
establishing a relationship with HSBC that would give the bank the 
majority of Bank Melli’s U.S. dollar clearing business. HBEU 
conducted an extensive review, with advice from two outside U.S. law 
firms, to determine whether transactions originated by Bank Melli would 
meet the definition of a permissible U-tum transaction under OFAC 
regulations, and concluded that they would, in fact, be permissible. 

Even though the proposed U-tums would be permissible under 
OFAC regulations, HBEU proposed carrying them out in the form of 
bank-to-bank transfers, without any reference to the underlying 
originator or ultimate beneficiary and, so without any reference to 


™ Id. 

FATF is the Financial Action Task Force, the leading international body that set standards tor 
combating money laundering and terrorist financing. 

6/14/2000 email from HSBC Susan Wright to HSBC Matthew King, “Memo: Significant 
Exception 2Q00-04 ” HSBC OCC 887519M92. 

"^Id. 

HSBC had established a relationship with Bank Melii’s office in Tehran in 1999. 7/1 1/2001 
email from HBUS Carolyn Wind to HSBC Matthew King and others, “Bank Melli,” HSBC-PST 
PROD-0096130-I32. 
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Iran.*^’ The aim was to ensure that the transactions would not be 
delayed by triggering an OFAC filter and having to undergo 
individualized review. HBUS compliance personnel responded that any 
such transactions would have to be done in a more transparent manner, 
with detailed payment information specifying the underlying originating 
and beneficiary customer information. HBUS employees expressed 
concern about using cover payments, since the limited payment 
instructions would not enable HBUS to know whether it was processing 
a valid U-tum transaction involving Iran or whether it was even 
processing a U-turn transaction at all.®*'* It would see only two banks 
making the transfer on the payment instructions and would have no 
knowledge of the underlying customers for whom the transaction was 
being processed, including whether they were prohibited persons. 

Legal Advice. In January 2001, HBUS OFAC Compliance officer 
Elizabeth Protomastro asked outside legal counsel, Tom Crocker, for an 
opinion as to whether HBUS could process U.S. dollar transactions from 
HBEU on behalf of either Bank Melli or Iran’s Central Bank, Bank 
Markazi.^*' After extensive consultations involving two law firms and 
OFAC, HBUS was advised that the Bank Melli transactions could 
qualify as permissible U-turn transactions.**^ 


Id. at 0096130. Under international banking practice, it was legal for bank-to-bank 
transactions to omit underlying payment details for the originator and ultimate beneficiary. 
Subcommittee briefing by OFAC (5/8/2012). 

Id. at 00961.10-131. 

See 1/31/2001 email from Elizabeth Protomastro to Tom Crocker, HSBC OCC 8903860. 

On February 1, 2001, HBEU provided Ms. Protomastro with more information about the type 
of U,S. dollar transactions that would be sent through HBEU’s correspondent account at HBUS, 
explaining that they would include 25 treasury-related payments involving about $750 million 
per day, 25 treasury-related receipts involving about $750 million per day, and 100 commercial 
payments involving $200 to $300 million per day, none of which would be related to letters of 
credit for military goods. (See 2/1/2001 email from HBEU Peter Blenk to HBUS Elizabeth 
Protomastro, “Centra! Bai^ of Iran,” HSBC OCC 8903864-865.) On February 2 , 2001, Mr. 
Crocker advised that the scenario outlined by HBUE did not appear to qualify for the U-tum 
exception as stipulated in the OFAC Iranian Transactions Regulations, because HBEU could not 
serve as both the originating and receiving foreign bank. (See 2/2/2001 email from Tom Crocker 
to HBUS Elizabeth Protomastro, “Central Bank of Iran,” HSBC OCC 8903859-860.) 

In response to Mr. Crocker’s opinion, on February 19, 2001, HSBC Group Compliance 
head Matthew King contacted a second law firm, Winthrop Brown, to obtain a second opinion. 
(See 2/19/2001 email from HSBC Matthew King to Winthrop Brown and HBME John Richards, 
“Memo: OFAC constraints in the Central Bank of Iran operating a USD Clearing account with 
HSBC Bank pic in London,” HSBC OCC 8903876-877.) One of the firm’s lawyers, John 
Simons, consulted with OFAC and obtained a copy of the payment processing procedure for 
qualified “U-Tum Dollar Clearing” transactions. He explained he was waiting to confirm with 
OF AC’s Chief Counsel Office about whether a second U.S. bank was required to process 
permissible U-tum transactions. The emml indicated that they had also determined that a 
requirement in Section 560.516 (b) for U.S. depository institutions to determine if an underlying 
transaction was prohibited by OFAC, “prior to initiating a payment on behalf of any customer or 
crediting a transfer to the account on its books of the ultimate beneficiary,” did not apply to U- 
tums. (See 2/2001 email from John Simons to Winthrop Brown, “Memo: OFAC constraints in 
the Central Bank of Iran operating a USD Clearing account with HSBC Bank pic in London,” 
HSBC OCC 8903875-876.) 

In April 200 1 , Mr. Simons emailed King that OFAC had confirmed that a second 
U.S. bank was not required when processing permissible U-tum transactions and no specific 
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HSBC Group Compliance head Matthew King forwarded the legal 
advice to HBME officials Brian Richards and John Richards, stating: “I 
confirm I am happy for the business to be undertaken on this basis.” He 
also wrote: “I am assuming this business will be booked in HBEU, 
hence 1 am copying Chris Couldrey. If any other Group entity is likely 
to be involved, could you let me know.”^*’ Brian Richards responded 
the following day to confirm that payment orders from Bank Melli’s 
account would originate from HBEU, and credits in favor of Bank Melli 
would be credited to their account at HBEU. He stated that the payment 
orders would not mention Bank Melli, and HBUS would not receive 
payment orders or receipts directly from an Iranian entity. Mr. Richards 
concluded that the payment chain would meet the U-turn definition 
provided by Mr. Simons.™ 

HBEU Payment Instructions. HBEU, HBUS, and HSBC Group 
Compliance continued to discuss HBEU’s proposal to process U.S. 
dollar transactions for Bank Melli. 

In a letter dated April 30, 2001, HBEU’s Multicurrency Payments 
Department (MPD) sent Bank Melli a proposal to process their 
payments with “minimal manual intervention.”**^ The letter included 
payment templates with specific instructions on how to format U.S. 
dollar transactions so the paperwork would not have to be altered by 
HBEU. MPD proposed that Bank Melli use the provided templates to 
complete payments fields for both MT202 and MTIOO SWIFT 
messages*** and to test the proposal.**’ In the letter, MPD Business 
Development Manager John Fowle advised the Bank Melli Cash and 
Payments Manager in London, Saeed Pourjam: 

“[FJollowing tests in our payments environment we are confident 
that we have found a solution to processing your payments with 
minimal manual intervention. The key is to always populate field 
52 - if you do not have an ordering party name then quote “One of 
our Clients”, never leave blank. This means that the outgoing 
payment instruction from HSBC will not quote “Bank Melli” as 
sender -just HSBC London and whatever is in Field 52. This then 


OF AC license was required to engage in U-tum transactions. (See 4/26/200 1 email from John 
Simons to HSBC Matthew King and others, OF AC - Iran,” HSBC OCC 8903868-870.) 

4/26/2001 email from HSBC Matthew King to HBME Brian Richards and others, ‘"OFAC - 
Iran,” HSBC OCC 8903868. 

4/27/2001 email from HBME Brian Richards to HSBC Matthew King and others, “OFAC - 
Iran,” HSBC OCC 8903874. 

See 7/1 1/2001 email from HBUS Carolyn Wind to HSBC Matthew King and others, “Bank 
Melli,” HSBC OCC 8876130-136, at 135-136 (including a copy of the April letter). 

MT202 and MTIOO are examples of SWIFT messages used by financial institutions to 
facilitate payment processing. Different messages utilize specialized formats, dependent on the 
type of transaction, to process the payments. Subcommittee briefing by OFAC (5/8/2012); 
Subcommittee briefing by Deloitle (5/51/2012). 

7/1 1/2001 email fi-om HBUS Carolyn Wind to HSBC Matthew King, “Bank Melli” HSBC 
OCC 8876130-136, at 133-136. 
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negates the need to quote “DO NOT MENTION OUR NAME IN 

NEW YORK” in field 72.”*** 

This email shows HBEU designed a payment method to avoid the 
OFAC filter by preventing the inclusion of information about the 
participation of the Iranian bank. The method developed by HBEU 
ensured that no language that would normally trigger an OFAC review - 
such as “do not mention our name in New York” - appeared in the 
transaction documentation. 

On May 25, 2001, in an email to colleagues, Michael Gallagher, an 
HBUS senior official at the Payments and Cash Management (PCM) 
division, expressed discomfort with the Bank Melli proposal to 
colleagues, including his supervisor, Douglas Stolberg, head of 
Commercial and Institutional Banking (CIB): “I wish to be on the 
record as not comfortable with this piece of business.”**^ His statement 
did not elicit any immediate response. When interviewed, Mr. Gallagher 
told the Subcommittee that he sent this email to express his concerns to 
his colleagues, including his supervisor, and then left it to them to 
determine what should be done.*’® 


In the meantime, HBEU had already begun processing Bank Melli 
U-tums through its account at HBUS, using cover payments so that the 
transactions would not trigger HBUS’ OFAC filter. This fact was 
disclosed in a June 28, 2001 email from the HBEU Institutional Banking 
Relationship Manager who handled the Bank Melli account, John 
Wilkinson.*” In the email, he was discussing the Bank Melli proposal 
with the head of HBUS’ payment services, Denise Reilly. Mr. 

Wilkinson explained that once the proposal “goes live,” Bank Melli was 
instructed “to alter the format” of their payments to achieve straight 
through processing. Mr. Wilkinson wrote: 


“[W]e have further asked them to only put ‘One of our clients’ in 
field 52, thus removing the chance of them inputting an ‘Iranian 


Id. at 135 (emphasis in original). Two months earlier, on May 21, 2001, HBEU Institutional 
Banking (CIB IBL) conducted a call with Bank Melli to inquire about the names of the principal 
beneficiaries of their payments. The resultant call report indicated that “as expected,” Bank 
Melli was unable to answer with the reasoning that Iran imports from many countries and 
suppliers worldwide. This information had been previously requested by a Senior Manager in 
Payment Operations at HBUS, Denise Reilly. An Area Manager within HBEU CIB IBL, Brian 
Richards, forwarded the response to Ms. Reilly the following day. Ms. Reilly then forwarded 
Mr. Richard’s email to HBUS Compliance personnel. 5/22/2001 email from HBUS Denise 
Reilly to HBUS Carolyn Wind and others, “BankMclH " HSBC-PSI-PROD-0096 138-142. 

5/25/2001 email from HBUS Michael Gallagher to HBUS Denise Reilly and Douglas 
Stolberg, “BANK MELLI,” HSBC-PSI-PROD-0096138- 

Subcommittee interview of Michael Gallagher(6/13/2012). 

6/28/2001 email from HBEU John Wilkinson to HBUS Denise Reilly and others, “Bank 
Melli,” HSBC OCC 8876132-133, at 133. 
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referenced’ customer name, that causes fall out of the cover 
payment sent to HBUS and a breach of OF AC regulations.”^^^ 

He also explained that using “One of our clients” in field 52 “is a 
standard phrase used by MPD [HBEU’s Multicurrency Payments 
Department] in these situations.”*’^ Acknowledging Ms. Reilly’s 
concerns following “a recent formatting error” detailed in an earlier 
email of June 15, 2001, Mr. Wilkinson noted that Bank Melli had not yet 
begun to use the new formatting method detailed in the April letter: 

“Bank Melli are still formatting payments in their usual method, in 
this instance MPD failed to spot the poor input and did not follow 
their normal procedure of altering the payment, hence it was 
blocked. MPD have again confirmed the new formatting method 
will achieve straight through processing and overcome these 
difficulties.”*’'’ 

Mr. Wilkinson’s email shows that Bank Melli was already processing 
undisclosed U-tum transactions through HBEU’s account at HBUS, 
using what he calls “their usual method” for formatting the payments, 
prior to the proposed changes. His email also described HBEU’s 
“normal procedure” as “altering” Bank Melli’s payments to prevent the 
payments from being blocked. The proposed new procedure was aimed 
at eliminating those manual interventions on the part of HBEU to 
expedite payments, potentially saving time and therefore money. 

This June 2001 email put HBUS on notice that HBEU had at times 
altered transactions involving Bank Melli in Iran, a practice already so 
commonplace at HBEU it was called its “normal procedure.” This email 
was sent to the head of HBUS’ payment service operations, who then 
alerted other HBUS executives. When asked about this document 
describing the alteration of documents being engaged in by an HSBC 
affiliate, senior HBUS Compliance official Anne Liddy, who oversaw 
HBUS’ OF AC compliance program, told the Subcommittee that it 
would have been a problem if U-tums were being processed in 2001, 
since HBUS did not then have a process in place to conduct U-tums 
appropriately.*’* 

HBUS Objections. On July 1 1, 2001, after HBUS Compliance 
head Carolyn Wind learned of the HBEU proposal, she sent an email to 
HSBC Group Compliance head Matthew King objecting to it.*’* What 
followed was a growing consensus that HSBC should not be pursuing its 

™!d. 

6M 

Subcommittee interview of Anne Liddy (2/22/2012). 

7/1 1/2001 email from HBUS Carolyn Wind to HSBC Matthew King and others. “Bank 
Melli," HSBC OCC 8876130-136. 
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business in this fashion. Ms. Wind included the Wilkinson email from 
June and a copy of the April letter sent to Bank Melli providing payment 
message instructions. Ms. Wind expressed several concerns, including 
whether the transactions sent via the cover payments would be 
permissible under OFAC regulations and that “HBUS will not be able to 
confirm whether or not the underlying transaction actually meets the ‘U- 
Tum’ requirement.” She noted further that it was “not apparent that 
HBEU will be able to confirm that each payment meets the 
requirements.” She wrote: 

“In an effort to facilitate ‘straight-through processing’, it now 
appears that HBEU will train Bank Melli on formatting the 
payments and that we will be relying on Bank Melli to ensure that 
only qualifying payments are processed through HBEU’s account 
with HBUS.”®^ 

Ms. Wind also expressed concern about how it might appear to 
U.S. regulators that HBEU trained Bank Melli to write payment 
instructions in such a way, pointing out that if OFAC were to identify a 
transaction that did not qualify as a permissible U-tum, OFAC might 
consider “HSBC’s actions due to the non-disclosure as having involved 
willful disregard or evasion.”*’* 

HBUS payment services head Denise Reilly forwarded Ms. 

Wind’s email to Douglas Stolberg, head of HBUS Commercial and 
Institutional Banking (CIB). He responded: “With the amount of smoke 
coming off of this gun, remind me again why we think we should be 
supporting this business?”*” 

Ms. Reilly responded by sending Mr. Stolberg a memorandum 
prepared by the HSBC Group Representative for Iran, John Richards, 
which stated that HSBC Group “with the backing of Bond” - referring to 
the HSBC Chairman of the Board of Directors - wanted to “significantly 
grow our presence in Iran” with current lines of credit reported to be 
$800 million, trade lines of $150 million, and growth anticipated in 
trade, cash management and Internet banking. The memorandum 
indicated that HSBC Group and HBEU wanted to expand the bank’s 
presence in Iran and viewed clearing U.S. dollar transactions for Bank 
Melli as a profitable venture that could help win additional business in 
Iran, despite U.S. sanctions and HBUS concerns. 


Id. at 130, 

“ Id. at 131. 

See 7/1 1/2001 email exchanges among HBUS Douglas Stolberg and HBUS Denise Reilly, 
Joe Harpster, and Michael Gallagher, “Bank Melli,” HSBC OCC 8876128-130. 

Id. at 128-129. 
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These email exchanges show that, by July 2001, senior HBUS 
compliance, payments, and business managers, as well as the HSBC 
Group Compliance head, were aware that Iranian U.S. dollar transaction 
documentation was being altered by HBEU and the transactions were 
being processed through HBUS.™’ HBUS Compliance head Carolyn 
Wind complained to HSBC Group Compliance head Matthew King, but 
neither stopped the practice, nor did HSBC Group obtain a legal opinion 
about whether its U.S. dollar cover payments were in compliance with 
OFAC regulations. 

HBUS’ Payments Proposal. In August 2001, HBUS offered its 
own proposed procedures to clear U.S. dollar transactions involving 
Bank Melli.’”^ Uncomfortable with the formatting solution proposed by 
HBEU a few months prior, HBUS proposed that Bank Melli be listed as 
the originator in the payment instructions and proposed establishing a 
segregated account for the transactions so HBUS could ensure that all 
Bank Melli payments would be stopped by the OFAC filter for further 
review and approval. 

On August 30, 2001, HSBC’s John Richards expressed his support 
for the procedures, noting it would be the first time that an Iranian bank 
name was mentioned in the payment message.’"'’ 

On September 6, 200 1 , HBUS met with the Director of the Office 
of Foreign Assets Control (OFAC) to discuss clearing Bank Melli U- 
tum transactions. Carolyn Wind commented that although OFAC did 
not approve or reject the proposal, she walked away from the meeting 
thinking that OFAC was “okay with it.”™"' 

HBME’s Iranian Transactions. While HBEU was processing U- 
tum transactions for Bank Melli, a second HSBC affiliate, HSBC 
Middle East (HBME), was also carrying out OFAC sensitive 
transactions for other clients, using its own and HBEU’s U.S. dollar 
correspondent accounts at HBUS apparently without alerting HBUS to 
the transactions. In an October 2001 email, David Bagley, then HBME 
Regional Head of Legal and Compliance, sought guidance from HSBC 

7/1 1/2001 email exchange among HBUS Carolyn Wind, HBUS, Paul Lee, HBUS Anne 
Liddy, HBUS Douglas Stolberg, HBUS Michael Gallagher, and HBUS Denise Reilly, HSBC 
OCC 8876129. 

The procedures consisted of a two-step debit process and a five-step OFAC review process, 
and committed to same day processing for transactions determined to be U-tum compliant. The 
procedures required that Bank Melli transactions be segregated in an “HBEU Special Account” 
with the account number entered into the OFAC filter so that every Bank Melli transaction 
would be stopped in the OFAC queue for two reviews and two approvals prior to processing. 
Bank Melli would appear as the originator for al! related transactions. 8/29/2001 email from 
HBUS Denise Reilly to HBAP Alan Wilkinson and others, “Bank Melli,” HSBC OCC 7687346- 
348. 

8/30/2001 email from HSBC John Richards to HBUS Denise Reilly and others, “Bank Melli,” 
HSBC-PSI-PROD-00961 47- i 48. 

Subcommittee interview of Carolyn Wind (3/7/2012). 
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Group Compliance head Matthew King about how OFAC sensitive 
transactions should be handled.™^ Mr. Bagley wrote: “As 1 understand 
the current position we do routinely, and across the Group, adopt 
differing approaches to payments potentially subject to OFAC 
sanctions.” Mr. Bagley wrote that, at HBME, payments were not 
structured “against a specific request from the customer, rather we 
undertake this structuring as a routine,” and that he was not clear about 
whether those procedures were viewed “as being inappropriate, and thus 
should be disallowed.” He also noted: “I am advised that there may 
even be software in the UK which filters such payments for restructuring 
in the event that the original message has been structured in such a way 
that it will be caught by the OFAC filters.” 

Mr. Bagley cautioned that subjecting all OFAC sensitive payments 
to the OFAC filter for further review and approval would likely hurt 
business. He wrote: “disallowing all payments which are potentially 
subject to the OFAC process,” or the alternative of forwarding 
“messages in such a way that they would be caught,” would have a 
“significant affect” upon HBME’s business within the Middle East and 
the Group’s business within correspondent banking. He also wrote: 
“given the likely volumes it is impractical to submit each payment to a 
process of referral to HBUS,” as HBUS had proposed. He concluded 
with a request for clear guidance: “I would be grateful for your 
clarification as to whether what is currently going on is acceptable, or 
whether we should be adopting a different practice.”™^ 

Mr. King responded that the September 1 1, 2001 terrorist attack on 
the United States required a reassessment. He wrote: “some of the 
routes traditionally used to avoid the impact of US OFAC sanctions may 
no longer be acceptable.” Mr. King indicated that an automated 
screening system was being looked into, and in the interim asked that 
OFAC sensitive payments be vetted manually.’”^ 

Mr. Bagley’s email alerted Mr. King to the fact that HBME, like 
HBEU, was routinely sending U.S. dollar transactions through its 
correspondent account at HBUS using methods intended to circumvent 
HBUS’ OFAC filter. His email did not limit those transactions to 
Iranian U-tums, but sought broader guidance on acceptable practice. 

Mr. King wrote back: “all we can do is ask that payment from the 
affected countries are vetted manually.”™* 


10/10/2001 email exchange among HSBC Matthew King and HBME David Bagley and 
others, “OFAC Sanctions,” HSBC OCC 8873890-893, at 892. 

™ Id. at 892. 

Id. at 890. 

Id. at 890-891. 


i 
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(c) Pressuring HBUS on Iran 

In April 2002, HBME asked HBUS to re-circulate its proposed 
procedures for processing Iranian U-tum transactions,™’ indicating that 
the two affiliates were still attempting to reach agreement on the 
procedures to be used.’™ 

HBEU Draft Guidelines. While the HBEU Relationship Manager 
for Institutional Banking in HBME, John Wilkinson, was trying to 
streamline the cover payments procedure used to send Iranian U-tums 
through HBEU’s correspondent account at HBUS, HBEU Compliance 
was trying at the same time to put a stop to the practice altogether. On 
July 15, 2002, an HBEU Compliance officer forwarded draft guidelines 
for handling OF AC sensitive transactions to HBEU Compliance 
manager Julie Clarke and HBEU Multicurrency Payments Department 
(MPD) head Malcolm Eastwood and requested their approval.’" The 
proposed guidelines stated in part that, although HBEU was not legally 
required to comply with U.S. OF AC prohibitions, “It is strongly 
recommended . . . that RMs [Relationship Managers] do not deliberately 
take action aimed at assisting a customer to circumvent OF AC sanctions. 
For example payment instructions should not be amended by IBL staff.” 
The proposed guidance also stated; “On no account should you 
deliberately guide, encourage or coerce the sender into amending the 
payment details so as to circumvent the OF AC sanctions. . . . We will 
simply process as instructed.”"’ The draft guidance relied on the 
following Group Policy: 

“Group members should comply with both the letter and spirit of 
all relevant laws, codes, rules, regulations and standards of good 
market practice in each jurisdiction around the world where they 
conduct business.”"’ 


4/15/2002 email from HBUS Denise Reilly to HBEU John Wilkinson and others, “Bank 
Melli.” HSBC OCC 7687376-377, 

According to Mr. Bagley, the HBEU Payment Services’ December 2002 Compliance 
Certificate made explicit reference to its practice of altering Iranian U.S. dollar payments. 
Subcommittee interview of David Bagley (4/12/2012), Compliance Certificates from affiliates 
are normally consolidated and sent to HSBC Group Compliance for review, which would have 
provided a formal channel for addressing the issue. David Bagley told the Subcommittee, 
however, that the reference to U-tum transactions in HBEU’s 2002 certificate was not 
incorporated into the consolidated Compliance Certificate and therefore was not formally 
escalated to Group Compliance for review. Id. 

' 7/15/2002 email from HBEU Paul Proctor to HBEU Julie Clarke, HBEU Malcolm Eastwood, 
and others, “Monitoring of payment transactions against sanctions,” HSBC OCC 88771 03-106. 

^’Md. atl06. 

Id. at 105. The guidelines also noted that the responsibility for “policing payment and cheque 
clearings against sanctions” would move to Payment Services in the future. 
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These guidelines were later approved and became effective in the 
fall of 2003. They show that HBEU Compliance and business 
personnel were aware of and concerned about potentially deceptive 
practices some could use to circumvent OF AC prohibitions. 

HBME Negotiations. While HBEU Compliance developed the 
OF AC guidelines, Gary Boon, HBME Payment and Cash Management 
(PCM) sales manager in Dubai, spent the second half of 2002, making a 
concerted effort to reach agreement with HBUS on how to process U- 
tum transactions. On August 29, 2002, Mr. Boon emailed Denise Reilly 
and Nancy Hedges in HBUS Payment Operations, to encourage HBUS 
to officially approve the processing of U-tum transactions involving 
Iranian banks. He wrote: “I can now confirm that HSBC Bank pic, 
London does not have any processing or compliance issues in respect of 
USD payments from existing or new opportunities with Iranian 
Banks.”’’^ He also wrote that HBEU wanted “to ensure the payments 
are STP [straight through processing],” and HBEU would provide its 
clients with guidelines for formatting transactions to “ensure that our 
Iranian clients fully understand, when or how, payments could be 
rejected.”^'* He indicated that he was seeking HBUS’ formal agreement 
to process the U-tum transactions, from both a resource and reputational 
risk standpoint, “before I attempt to sell a USD clearing proposition.”’'’ 

On October 8, 2002, Mr. Boon sent an email to senior HBUS 
Compliance official, Anne Liddy, seeking feedback on the HBEU 
proposal.’'* Ms. Liddy responded that the position of HBUS 
Compliance remained unchanged “in that all transactions involving 
Bank Melli must be fully disclosed and represented in one single 
transaction that reflects the complete flow of funds. Ms. Liddy noted 
that the HBUS proposed procedures had been approved by Legal 
Counsel as meeting OF AC requirements. She also stated that HBUS 
and HBEU needed to reach agreement on the payment procedures before 
HBUS Compliance would present an official proposal to HBUS’ Senior 
Management Committee or OF AC for approval. Ms. Liddy was also 
clear that these steps had to be taken prior to HBEU’s making any 
proposal to Bank Melli or another Iranian bank.’^" 

Mr. Boon responded on the same day that HBEU would soon be 
complying with the Financial Action Task Force (FATF) regulations 

See 9/8/2003 email from HBEU Julie Clarke to HBEU Paul Proctor and others, “OF AC 
sanctions evasion ~ Iranian payments,” HSBC OCC 8876819-820. 

8/29/2002 email from HBME Gary Boon to HBUS Nancy Hedges, HBUS Denise Reilly, and 
others, “IRAN-USD PAYMENTS,” HSBC OCC 0948193-195. 


Sec 10/08/2002 email exchanges among HBUS Anne Liddy, HBME Gary Boon, and others, 
“Bank Melli,” HSBC OCC 7687374-375. 

’’^Id. at 375. 
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requiring full disclosure of payment details on MT100/MT103 message 
formats, which was already part of the HBEU proposal since HBEU sent 
those messages to the bank receiving a U-tum payment in addition to 
sending a cover payment on a MT202 form. He indicated that the 
payments sent to HBUS fall into the category of permissible U-tum 
transactions, and noted that HBUS was already processing U.S. dollar 
transactions through two existing accounts in London,^^' Mr. Boon 
wrote: “The majority of payments will be processed with HBEU 
sending a MT100/MT103 to the beneficiary bank and HBUS will 
receive the MT202 cover payment (again your already doing this).”’^^ 

He indicated that, due to “massive opportunities,” he would like to 
resolve the procedural issues prior to a scheduled visit to Iran in 
November 2002.’^^ In response, Ms. Liddy reluctantly set up a 
conference call with Mr. Boon and included Carolyn Wind and Denise 
Reilly.™ 

When asked about this email, Ms. Liddy told the Subcommittee 
that she did not understand his email and may have misinterpreted Mr. 
Boon’s assertion that HBUS was already processing Iranian payments 
through existing accounts in London to mean that the issue affected 
London accounts, but not accounts in the United States. She said that 
she became more concerned two months later, in December 2002, when 
a Bank Melli payment was caught in HBUS’ OFAC filter.™ Carolyn 
Wind told the Subcommittee that she was surprised by Mr. Boon’s email 
and didn’t know what his comments meant. Ms. Wind said that she 
contacted HSBC Group Compliance head Matthew King to follow-up, 
but didn’t know what action he took, if any.’^’ 

The results of the conference call between HBME and HBUS were 
discussed in email correspondence later that month. On October 28, 
2002, Mr. Boon wrote to Denise Reilly requesting an update. Ms. Reilly 
responded that HBUS had spoken with OFAC; the “MT100/MT103 and 
MT202 normal cover payment process has been deemed unacceptable”; 
and OFAC required “full disclosure of the transaction.”^^* Mr. Boon 
and Ms. Reilly then agreed that HBEU should open a separate “Special 
nostro account” for all U-tum transactions to ensure each transaction 


™ Id. at 374-375. 

™ Id. at 375. 

10/17/2002 email from Gary Boon to Anne Liddy, “IRAN,” HSBC OCC 7687373. 

10/21/2002 email from Arme Liddy to Carolyn Wind and Denise Reilly, “IRAN,” HSBC 
OCC 7687373. 

Subcommittee interview of Anne Liddy (2/22/2012). 

Id. See also 12/30/2002 email exchanges among HBUS Elizabeth Protomastro, HBUS 
Carolyn Wind, HBUS Anne Liddy, HBUS Denise Reilly, and HSBC David Bagley, “OFAC: 
PLC wire on behalf of Melli Bank PLC.” HSBC OCC 8873909. 

Subcommittee interview of Carolyn Wind (3/07/2012). 

1 0/29/2002 email from HBUS Denise Reilly to HBME Gary Boon and HBUS Nancy Hedges, 
“ IRAN-USD Payments,” HSBC OCC 0948192-193. 
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would be caught by the OF AC filter for review and approval.^^^ Mr. 
Boon requested confirmation that if HBEU met those terms and the 
HBUS committee approved the proposal, that “HBUS would be in a 
position to potentially become Iran’s USD Clearing Agent, HBEU 
would be their USD Correspondent Bank?”’^” Ms. Reilly responded that 
the current proposal was to “process transactions on behalf of Bank 
Melli” and if the proposal were broader “then it should be included in 
the business rationale that we requested in our conference call earlier 
this week for presentation to HBUS senior management.”’^' She 
indicated that the HBUS Senior Management Committee was comprised 
of the President of the bank, key business heads, and the head of key 
support units. While these emails suggest HBUS Compliance was 
poised to present the Iranian U-tum proposal to the HBUS Senior 
Management Committee, there is no indication in the documentation 
that the committee ever received or approved it. 

Eastwood Memorandum. In November 2002, HBEU 
Multicurrency Payments Department (MPD) head Malcolm Eastwood 
sent a memorandum to HBUS Payments Services head Denise Reilly 
and Geoff Armstrong expressing concern that HSBC was exposing itself 
to unnecessary risk by handling OFAC sensitive payments.”’ He wrote: 

“I currently feel that we may be exposing ourselves to unnecessary 
and unacceptable Reputational and Operational Risk when we are 
handling payments originating from FIs [financial institutions] 
domiciled in or who are a local branch of an FI domiciled in an 
OFAC regulated country.” 

Mr. Eastwood stated that HBEU’s current process was to send OFAC 
sensitive payments to HBUS via the “cover” payment method that made 
no mention of Iran or other prohibited countries.’” He noted that two 
payments, one from Iran and one from Cuba, had recently been caught 
by HBUS’s OFAC filter. Mr. Eastwood stated that he wanted to resolve 
the situation, and “we therefore need to seek clarification of 
HBUS/OFAC’s stance so that we can determine our future payments 
strategy 

The Eastwood memorandum again put HBUS on notice regarding 
HBEU’s practice of concealing U-tum transactions behind cover 
payments and altering the payment instructions received from Iranian 


™ Id. at 192. 

™Id. 

Id. 

™ 1 i/14/2002 memorandum from HBEU Malcolm Eastwood to HBUS Denise Reilly and 
HBEU Geoff Armstrong, “Compliance - OFAC Issues in General and Specific to Iran,” HSBC 
OCC 7688824. 

Id. at 825. 

™Id. 
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banks, Mr. Eastwood wrote: “The Iranian banks continue to send us 
what I describe as conditional payment instructions which for HBEU 
require an element of amendment by ourselves.”^^^ Mr. Eastwood 
warned: “If we cannot achieve this [a resolution on how to handle U- 
tum transactions] I will have to recommend to my General Manager a 
view that processing these payments is ‘unsafe’ and that these items 
should be filtered out and cancelled. This would have severe 
repercussions for our Group relationship within the Iranian FIs.”’^* 

That same day, HBUS Payments Services head Denise Reilly 
forwarded the Eastwood memorandum to HBUS PCM head Michael 
Gallagher and HBUS Compliance head Carolyn Wind, with the note: 
“We need to discuss.”^^’ HBUS records do not indicate whether that 
discussion took place. When asked about this email, Mr. Gallagher told 
the Subcommittee that he wasn’t sure he received Mr. Eastwood’s 
memorandum because he wasn’t named on it.’^* When shown another 
email indicating he had discussed the Eastwood memorandum again in 
December 2003, with the new HBUS AML head,^^^ he told the 
Subcommittee that he did not recall the memorandum, any discussion of 
it, or taking any action in response to it.’*’” When Carolyn Wind was 
asked about the Eastwood memorandum, she told the Subcommittee that 
HBUS kept “pushing back on U-tums.”’*" 

Do Not Mention Our Name. In late December 2002, HBUS 
OFAC Compliance officer Elizabeth Protomastro notified Carolyn 
Wind, Denise Reilly, and Anne Liddy that, on December 27, 2002, the 
HBUS OFAC filter had stopped and rejected a payment listing Bank 
Melli as the originator of the payment and containing a field that read, 
“Do not mention our name in NY.” Ms. Protomastro advised rejeeting 
all U-tum transactions containing such language. The language on the 
stopped transaction shows how information related to Iranian payments 
was intentionally withheld from HBUS. In response, Ms. Liddy went to 
Carolyn Wind’s office and spoke with her, Denise Reilly, and Paul Lee, 
HBUS’ Legal Counsel, about the transaction. She was told to alert 
David Bagley, who had become head of HSBC Group Compliance in 
January 2002.’'*^ That same day, Anne Liddy forwarded Ms, 

™ Id. at 826. 

“Id. 

1 i/14/2002 email from HBUS Denise Reilly to HBUS Carolyn Wind and HBUS Michael 
Gallagher, “Compliance - OFAC Issues in General and Specific to Iran,” HSBC OCC 7688822- 
827. 

Subcommittee interview of Michael Gallagher (6/13/2012). 

See 12/17/2003 email from HBUS Denise Reilly to HBUS Teresa Pesce, “Compliance - 
OFAC Issues in General and Specific to Iran,” HSBC OCC 34075 1 7-522 (“Attached is the 
memo that we discussed yesterday in our meeting with Michael Gallagher.”). 

Subcommittee interview of Michael Gailagher(6/i3/20l2). 

Subcommittee interview of Carolyn Wind (3/7/2012). 

Subcommittee interview of Anne Liddy (2^22/2012). Mr. Bagley assumed the duties of 
HSBC Group Compliance head in January 2002, but his appointment did not become official 
until May 2002, after the U.K. Financial Services Authority approved it. Subcommittee 
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Protomastro’s email to Mr. Bagley.^'^^ Ms. Liddy told the Subcommittee 
that she was concerned about the Bank Melli payment, because HBEU 
still had not obtained approval to do those types of transactions.^"''’ She 
told the Subcommittee that neither Mr. Bagley nor Ms. Wind provided 
any feedback on the incident, and she didn’t know what action, if any, 
Mr. Bagley took.^''^ 

The 2002 Eastwood memorandum again put senior HBUS 
compliance and business officials on notice that HBEU was sending 
undisclosed OFAC sensitive transactions through its U.S. dollar 
correspondent accounts at HBUS. Again, HBUS officials alerted their 
superiors, but no further action was taken. 

(d) Continuing Pressure on HBUS to Process 
Iranian Transactions 

Although HBEU handled the Bank Melli account, it was HSBC 
Middle East (HBME) that was at the center of efforts to pressure HBUS 
to process Iranian transactions without triggering the OFAC filter. 
HBME took the lead in dealing with Iran and selling bank services to 
Iranian banks. In January 2003, HBME Group Relationship Manager 
for the Middle East, Nigel Weir, sent HBUS Payments Services head 
Denise Reilly and HBEU MPD head Malcolm Eastwood a memorandum 
entitled, “Business Case-USD Payments from Iranian Banks/Entities.”’''® 
This HBME memorandum laid out the “business case” for HBUS’ 
processing Iranian transactions using the procedures proposed by HBEU 
back in August 200 1 The memorandum stated: 

“Currently, it is estimated that Iranian banks issue up to 700 USD 
payments a day using their USD service providers, mainly banks in 
the UK and Europe, which in turn use their New York USD 
correspondents to effect the payments. It is believed that some 


interview of David Bagley (5/10/2012); Subcommittee briefing by Cahill Gordon & Reindel LLP 

( 6 / 20 / 2012 ). 

See 12/30/2002 email exchanges among HBUS Elizabeth Protomastro, HBUS Carolyn Wind, 
HBUS Anne Liddy, HBUS Denise Reilly, and HSBC David Bagley, “OFAC; PLC wire on 
behalf of Melli Bank PLC.” HSBC OCC 8873909. 

Subcommittee interview of Anne Liddy (2/22/2012). 

Id. See also 12/30/2002 email exchanges among HBUS Elizabeth Protomastro, HBUS 
Carolyn Wind, HBUS Anne Liddy, HBUS Denise Reilly, and HSBC David Bagley, “OFAC; 
PLC wire on behalf of Melli Bank PLC,” HSBC OCC 8873909. 

1/2003 memo from HBME Rick Pudner to HBUS Denise Reilly and HBEU Malcolm 
Eastwood and others, “Business Case-USD Payments From Iranian Banks/Entities,” HSBC OCC 
8876490-493; 1/21/2003 email exchanges among HBUS Anne Liddy, HBUS Carolyn Wind, 
HBUS Denise Reilly, and others, HSBC OCC 3407510. Nigel Weir and Rick Pudner were joint 
authors of the memorandum. 

Id. at 1 . The memorandum stated: “This paper has been produced in order for the Senior 
Management Committee (SMC) of HSBC Bank USA (HBUS) to evaluate whether or not HBUS 
will process US dollar (USD) payments initiated by Iranian Banks via accounts held with FISBC 
Bank Pic (HBEU).” Id. 
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service providers amend the payments to ensure Iran is not 
mentioned in the body of the payment instruction to their USD 
correspondent. This process minimizes the risk of payment being 
referred to OFAC.”^''® 

The memorandum did not state explicitly that both HBME and HBEU 
were already engaged in the same practice using their U.S. dollar 
accounts at HBUS. 

The HBME memorandum stated that HBME “believe[s] there is a 
substantial income opportunity to see a USD payments proposition to 
Iranian Banks,” and provided an appendix detailing existing and 
potential business opportunities in Iran, while noting HBEU already had 
a “number of existing USD accounts for Iranian banks, which are used 
for payments clearing purposes.”’'*’ The memorandum concluded; 

“It is anticipated that Iran will become a source of increasing 
income for the group going forward and if we are to achieve this 
goal we must adopt a positive stance when encountering 
difficulties. We are aware of the concerns expressed by HBUS but 
strongly believe that by working together we can overcome them 
using means which are perfectly legitimate and in accordance with 
rules laid down by the relevant regulatory bodies. I hope we will 
be able to resolve this issue otherwise I fear we will destroy future 
value in a market which has substantial potential for the group.””’ 

HBME asked that the business case be presented to HBUS’ Senior 
Management Committee at the earliest opportunity. 

On January 16, 2003, Denise Reilly forwarded the HBME 
memorandum to HBUS Compliance officials Carolyn Wind and Anne 
Liddy.”' On January 2 1 , 2003, Ms. Liddy forwarded it to Tom 
Crocker, the outside legal counsel advising HBUS on OFAC matters.’^’ 
When asked about the memorandum, Ms. Liddy told the Subcommittee 
she did not recall it or the outcome of Mr. Crocker’s review.’^’ 


Id. at 490. 

Id. at 493. Internal bank documents indicate that HBEU cleared U.S. dollar transactions 
through its correspondent account at HBUS for at least six Iranian banks. Bank Melli, Bank 
Kesharvazi, Bank Markazi, Bank Sepah, Bank Tejarat, and the Export Development Bank of 
Iran. See, e.g., 10/23/2003 email from HSBC John Root to HSBC David Bagley and others, 
“USD Clearing - Iranian Banks,” HSBC OCC 887521 7. HBEU senior payments official Rod 
Moxley told the Subcommittee that he believed seven or eight Iranian banks used HSBC for U.S. 
dollar correspondent services. Subcommittee interview of Rod Moxley (6/07/2012). 

1/2003 memo from HBME Rick Pudner to HBUS Denise Reilly and HBEU Malcolm 
Eastwood and others, “Business Case-USD Payments From Iranian Banks/Entities,” HSBC OCC 
8876-493, at 492. 

Subcommittee interview of Anne Liddy (2/22/2012). 

See 1/21/2003 email from HBUS Anne Liddy to External Counsel Tom Crocker and others, 
“USD Payments from Iranian Banks,” HSBC OCC 3407510-511. 

Subcommittee interview of Anne Liddy (2/22/2012). 
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On February 3, 2003, HSBC Group Compliance head David 
Bagiev sent an email to HBME, where he used to work, discussing the 
issue. He conveyed that he had asked senior Compliance official John 
Root to review the OFAC issue from a Group perspective. He also 
wrote that he “would be grateful if we could exercise greater care with 
regard to the content of written material” being sent to HBUS, 
explaining: “The business case includes a number of express references 
to practices which may constitute a breach of US sanctions, including 
the OFAC provisions, and could provide the basis for action against the 
HSBC Group for breach of those sanctions, or seeking to facilitate a 
breach.”’^^ Mr. Bagley requested that future communications regarding 
this subject be cleared through him or John Root “to avoid relative 
sensitive references,” prior to involving HBUS.’^^ The recipient of the 
email, Nigel Weir, responded that the memorandum was intended to 
recommend pursuing a significant business opportunity, while 
complying with applicable regulations.’^^ Mr. Bagley told the 
Subcommittee that this was the first time, in his role as head of HSBC 
Group Compliance, he addressed the OFAC issue. He noted that 
HBME’s actions could potentially “constitute a breach of US sanctions,” 
yet it would take him two more years, until July 2005, to establish Group 
policy prohibiting such conduct. 

Again, there was no indication that a proposal for handling Iranian 
U-tum transactions was ever presented to or approved by HBUS’ Senior 
Management Committee. At the same time, undisclosed transactions 
continued to be sent by HSBC affiliates through their correspondent 
accounts at HBUS. A later analysis performed by an outside auditor at 
HBUS’ request found that, in 2002 alone, HBEU sent at least 1,900 and 
HBME sent at least 400 Iranian transactions through U.S. dollar 
accounts in the United States.’^* 

Caught in the OFAC Filter. On June 1 3, 2003, another Bank 
Melli transaction was caught in the HBUS OFAC filter, containing not 
only a reference to the bank, but also the words “do not mention our 
name.”’^^ On June 16, 2003, HBUS OFAC Compliance officer 


2/3/2003 email from HBUS David Bagley to HBME Rick Pudner and others, “Business Case- 
US Payments From Iranian Banks/Entitics,” HSBC OCC 8876487-488. 


2/3/2003 email from HBME Nigel Weir to HSBC David Bagley and others, “ Business Case- 
US Payments From Iranian Banks/Entities,” HSBC OCC 8876487. 

Deioitte, Results of the transactions Review - UK Gateway, March 29, 20 1 2. HSBC-PSI- 
PROD-0197919, at 62. The Deioitte review examined HBEU and HBME Iranian transactions 
sent through U.S. dollar accounts at both HBUS and JPMorgan Chase. 

See 6/1 7/2003 email from HBUS Elizabeth Protomastro to HSBC John Root and HBUS 
Carolyn Wind, “Re: PLC-Re “do not mention our name,” at HSBC OCC 8873922. 
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Elizabeth Protomastro alerted both Carolyn Wind and Anne Liddy/*’” 
Ms. Wind forwarded the email to HSBC Group Compliance officer John 
Root, and Ms. Protomastro provided him with additional details about 
the payment, including that it involved $150,000. She explained that 
when the HBUS Funds Transfer staff saw the message “do not mention 
our name,” they rejected the payment in accordance with HBUS policv, 
“due to concerns about evasion issues under the OFAC regulations.”^^' 
Ms. Protomastro explained that HBUS would not process a payment 
containing such a message, even if it qualified as a permissible U-tum 
transaction. 

On June 17, 2003, Mr, Root forwarded the payment details to 
HSBC Group Compliance head David Bagley.^®^ Mr. Bagley responded 
by asking if they should allow a payment “with this sort of instruction to 
be passed to HBUS, regardless of the wider issue as to the applicability 
of OFAC to non us persons.”’*^ 

The June 2003 transaction once again made several senior officials 
at HBUS and HSBC Group aware that HSBC affiliates were sending 
undisclosed OFAC sensitive transactions through HBUS accounts, even 
though HBUS had yet to approve a U-tum protocol. When asked about 
this incident, Ms. Wind told the Subcommittee that she did not recall 
what HSBC Group Compliance said or did about the payment.’®'^ She 
also did not recall whether there was an inquiry made to identify similar 
transactions, whether the transaction was reported to OFAC, or whether 
a SAR was considered or filed. When asked who in HBUS was 
responsible for following up on the incident, she replied that from the 
business side, Denise Reilly and her supervisor Michael Gallagher, and 
from the compliance side, herself and Anne Liddy,’*^ When Mr. 
Gallagher was asked about the incident, he responded that it was not his 
responsibility to take action, because blocked payments are an 
operational and compliance effort, not a PCM issue.’** He stated that he 
would not have had the authority to either stop or release a suspect 
payment; operations staff, including Denise Reilly, did not report to Mr. 
Gallagher in 2003. 

Using “Selves” Instead of Client Names. In August 2003, 
internal bank documents show that Compliance personnel in HSBC 
Group and HBEU learned of, and objected to, the practice of some 


6/i 6/2003 email from HBUS Elizabeth Protomastro to HBUS Carolyn Wind and HBUS Anne 
Liddy, “PLC-Re “do not mention our name,” HSBC OCC 8873925. 

6/17/2003 email from HBUS Elizabeth Protomastro to HSBC John Root and HBUS Carolyn 
Wind, “Re: PLC-Re “do not mention our name,” HSBC OCC 8873922-923. 

Id. 

Id. 

Subcommittee interview of Carolyn Wind (3/7/2012). 

Id. 

Subcommittee interview of Michael Gallagher (6/13/2012). 
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HBEU personnel, when sending Iranian U-tum transactions, to alter the 
payment instructions and identify HBEU itself as the active party in the 
transaction, rather than use a client name that might trigger HBUS’ 
OFAC filter. Despite their objections, the practice continued for years. 

On August 20, 2003, the head of HSBC Group Audit Matthew 
King informed HSBC Group Compliance head David Bagley that 
“HBEU continues to send remittances to the US with ‘selves’ noted as 
the ordering party when the transfer would otherwise be filtered out for 
OFAC sanctions reasons.”’’’’ He wrote: “I recall that this has been 
raised in the past, but I thought we had apeed the practice would cease. 
Are you aware of the current position?” 

On September 1, 2003, Mr. Bagley forwarded Mr. King’s email to 
John Root and asked him to investigate.™’ Mr. Bagley wrote that there 
is now “some clarity” that OFAC prohibitions do not apply to non-U.S. 
persons, even when payments are denominated in U.S. dollars.”” He 
also wrote that an established payment mechanism exists for bank-to- 
bank transfers, which did not require underlying payment information 
and which might apply to HBEU transfers to HBUS.”' Mr. Root agreed 
to look into the matter. 

On September 2, 2003, HBEU Compliance manager Julie Clarke 
sent an email to an individual whose name was redacted by HSBC 
seeking more information about the transactions that triggered the 
inquiry by HSBC Group Audit head Matthew King.’” The email 
recipient responded: 

“During the conversation, I mentioned that historically we used 
‘selves’ but that 1 had stopped the practice as soon as 1 had 
discovered it in mid-2000. He stated that it was still done in 
FIBEU. This was not in connection with [redacted] payments and I 
have no examples.”’” 


8/20/2003 email from HSBC Matthew King to HSBC David Bagley and others, “OFAC ” 
HSBC OCC 8S76504-505. 

Id. at 505. 

^'’^9/1/2003 email from HSBC David Bagley to HSBC John Root and HSBC John Allison, 
“OFAC,” HSBC OCC 8876504. 

Id. Mr. Bagley told the Subcommittee that the applicability of OFAC prohibitions to non- 
U.S. persons was an undecided issue in 2003, with legal opinions offering differing conclusions. 
Subcommittee interview of David Bagley (4/12/2012). OFAC now takes the position that its 
prohibitions apply to all U.S. dollar transactions, including those involving non-U.S. persons. 

9/1/2003 email from HSBC David Bagley to HSBC John Root and HSBC John Allison, 
“OFAC,” HSBC OCC 8876504. As explained earlier, at that time, bank-to-bank transfers could 
be executed on forms which required information on the remitting and beneficiary banks, but not 
the underlying customers. 

772 9/2/2003 email from HBEU Julie Clarke to [redacted], “OFAC sanctions,” HSBC OCC 
8876824-825. 

Id. at 8876824. 


S 
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The following day Ms. Clarke forwarded the email to Rod Moxley in 
HBEU’s Multicurrency Payment Department (MPD), and asked him for 
more information regarding the practice of using “ourselves” in a 
payment message.’’ 

On September 8, 2003, Mr. Moxley responded to Ms. Clarke.”^ 
He explained that the OF AC sanctions issue had been “under discussion 
for some time” within MPD.’’® He forwarded to her an August email 
that he had sent to Pat Conroy, Malcolm Eastwood’s supervisor, 
addressing various issues related to OF AC sensitive transactions. The 
August email indicated that a certain person, whose name was redacted 
by HSBC, had brought “our current practice regarding the alteration of 
the remitter field on Iranian payments to the attention” of Matthew King 
and David Bagley.’” The August email also stated that “[t]he specific 
issue with Iran had been formally raised with the RM [Relationship 
Manager], John Wilkinson” who had been “given a deadline of 31 
December 2003 to remedy this situation.” The August email also noted: 
“Malcolm’s stance, 1 understand, is that any payments after 31 
December 2003 will not be processed unless signed off at a very senior 
level.””* 


That same day, September 8, 2003, Ms. Clarke forwarded the 
email chain to HBEU Compliance officer Paul Proctor and wrote: “It 
appears that John Wilkinson has been allowed to continue (to 31/12/03) 
to use ‘selves’ as the remitter name for Iranian payments which 1 believe 
contravenes your recently issued guidelines.”” Mr. Proctor responded: 

“This is the first time I have seen in writing, an admission that 
Payments Services are amending payments by removal of either 
the remitter’s name or country to prevent the probable trigger of 
the US filter and the subsequent freezing of funds. 

You indicate that Group Compliance have now forbidden you to 
tamper with such payments, which 1 would fully support as it flies 
in the face of Group policy re complying with the spirit and letter 
etc.”’*“ 


9/3/2003 email from HBEU Julie Clarke to HBEU Rod Moxley and Chris Pollard, “OFAC 
Sanctions ” HSBC OCC 8876824. 

9/8/2003 email from HBEU Rod Moxley to HBEU Julie Clarke, “OF AC Sanctions,” HSBC 
OCC 8876820-821. 

™ Id. at 8876821. 

8/22/2003 email from HBEU Rod Moxley to HBEU Pat Conroy, “Project Wolf,” HSBC OCC 
8876821-822. 

™ Id. 

9/8/2003 email from HBEU Julie Clarke to HBEU Paul Proctor and others, “OFAC sanctions 
evasion - Iranian payments,” HSBC OCC 8876819-820. 

9/8/2003 email from HBEU Paul Proctor to HBEU Julie Clarke and others, “Re: OFAC 
sanctions evasion - Iranian payments,” HSBC OCC 8876818-819. 
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This email indicates that HBEU Compliance had not been aware that 
some HBEU personnel were continuing to alter documentation 
connected to OFAC sensitive transactions, in defiance of new guidelines 
prohibiting such conduct. The email also indicates that HSBC Group 
Compliance had instructed HBEU Compliance that HBEU personnel 
were “forbidden” to “tamper” with the documentation. 

When asked about these emails, Mr. Bagley told the Subcommittee 
that, in October 2003, Mr. Root reported to him that HBEU Compliance 
had admitted HBEU was still altering Iranian U-turn transaction 
documentation, despite a recommendation by HBEU Compliance that it 
cease.^*' Mr. Bagley told the Subcommittee that HBEU had explained 
that it had been sued when payments were blocked by the HBUS filter, 
so It was using cover payments to avoid additional operational losses.^*’ 
Mr. Bagley also explained that neither HBEU Compliance nor HSBC 
Group Compliance could simply order a business unit to cease a 
particular practice; each could only “recommend” a course of action 
which it had done. 

The internal bank documents show that, in the fall of 2003, Mr. 
Eastwood and Mr. Moxley in MPD, HBEU Compliance manager Julie 
Clarke and Compliance officer Paul Proctor, as well as the heads of 
HSBC Group Audit and Compliance, expressed repeated concern about 
actions taken by persons like the HBEU Relationship Manager for Bank 
Melli John Wilkinson to alter U-tum transaction documentation in a way 
that would avoid the OFAC filter; all agreed the practice should stop. 
HBEU Compliance took the step of issuing guidelines recommending 
against such conduct, but HBEU personnel apparently ignored the 
guidance. 

Proposal to Expand U.S. Dollar Clearing for Iranian Banks. In 

October 2003, HBME increased the pressure on HBUS to process 
Iranian transactions by proposing to expand its U.S. dollar clearing 
business in Iran. In early October, HBME Planning head Steve Banner 
circulated a document entitled, “Iran - Strategy Discussion Paper,” to 
several senior bank executives, including HBME Deputy Chairman 
David Hodgkinson; HBME Global Relationship Manager for the Middle 
East Nigel Weir; HSBC Group Compliance deputy head Warren 
Learning, HBUS General Counsel Paul Lee, and HBUS Compliance 
head Carolyn Wind.^*^ The strategy essentially sought approval for 
HBME offering U.S. dollar payment services to more Iranian banks 
since, as the strategy noted, “the Iranian market offers substantial 
untapped potential for the HSBC Group.”^*"' 


Subcommittee interview of David Bagley (5/10/2012). 

Id. 

Undated HSBC document, “Iran - Strategy Discussion Paper,” HSBC OCC 8873949-956. 
Id. at 949. 
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The strategy listed “significant business wins” involving Iran, in 
the Project and Export Finance, Trade Finance, and Treasury and Capital 
Markets areas with an estimated $7 million per year in revenues 
generated by Iranian businesses for “various Group entities.”^®^ In a 
section entitled, “Phase 1 - Immediate Opportunities,” the strategy 
stated that Iran’s annual international trade business was valued at $25 
billion, 80% of which was denominated in U.S. dollars. It stated that 
HBEU PCM currently offered U.S. dollar payment services to four 
Iranian banks, and could market the same services “to other Iranian 
commercial banks, including Iran’s Central Bank (Bank Markazi).” It 
estimated the potential business as worth up to $4 million per year. 

The strategy also noted an upcoming change in U.K. law that 
would require U.K. bank-to-bank transfers to identify, not only the 
banks involved in the transfer, but also their underlying customers. It 
stated that the impending U.K. legislation, together with U.S. sanctions 
laws, would “significantly complicate the USD payments process for 
Iranian counter-parties,” and if “the Group decides to pro-actively 
promote USD payments services to Iranian banks the payments will 
need to be processed by HBUS with full details to satisfy OFAC 
requirements.”’®® To facilitate the process, the strategy said that HBME 
planned to prepare a paper for HSBC Group requesting an increase in 
the country risk limits for Iran.’*’ The strategy concluded by asking for 
HSBC Group’s approval and HBUS’ “no objection” to HBEU’s 
providing U.S. dollar services to additional Iranian banks.’*® 

The strategy stated clearly that, “HBEU PCM currently offerjs] 
USD [U.S. dollar] payment services to 4 Iranian banks.”’*^ It once again 
alerted HBUS to the fact that HBEU was already processing U.S. dollar 
transactions for Iranian banks through its account at HBUS. The 
strategy was sent to both HBUS’ legal counsel and top compliance 
officer. 


On October 15, 2003, the HBUS CEO at the time, Youssef Nasr, 
sent an email to HBUS PCM head Michael Gallagher noting that with 
regard to Iranian U-tums, “there remain serious political and 
reputational risks within the USA if they proceed with this and that he 
should ensure that Paul Lee is kept in the loop at all times because of the 
prior work he has done both on this and some recent approaches from 
Group offices about opportunities in Libya.””® When asked if Mr. 
Gallagher discussed the strategy paper with Mr. Nasr, Mr. Gallagher told 


Id. at 951. 

Id. at 954. 

■'*’ Id. at 952. 

Id. at 955. 

Id, at 952. 

10/1 5/2003 email from HBUS YoussefNasrto HBUS Michael Gallagher, “Subject, Re: Iran- 
USD Payments,” HSBC OCC 8873942. 
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the Subcommittee that he did not recall seeing it.™‘ On October 21, 
2003, HBUS General Counsel Paul Lee contacted HSBC Group 
Compliance head David Bagley “expressing some concerns” about the 
Iranian strategy 

On October 21, 2003, Mr. Bagley sent an email to HBME officials 
indicating several issues surrounding the U-tum transactions needed 
clarification and asked whether the costs associated with incurring U.S. 
legal fees made it worthwhile to continue the discussion. Mr. Bagley 
also wrote: 

“I am not sure that HBUS are aware of the fact that HBEU are 
already providing clearing facilities for four Iranian banks, 
presumably including USD [U.S. dollar] clearance. Bank Markazi 
is named in the OF AC sanctions as a government owned bank and 
thus on the face of it not able to benefit from U-tum 
exemptions.”’^^ 

On October 26, 2003, HBME Deputy Chairman David 
Hodgkinson sent an email in response to Mr. Bagley. He wrote: 

“HSBC earns USD7.5m a year from its business dealings with Iran and 
we believe that there is significant long-term potential for growth.”’^'* 
Mr. Hodgkinson indicated that he was willing to incur costs to 
investigate the options and find “an acceptable way to offer the 
maximum range of services possible without jeopardizing the Group’s 
position in the U.S.”™^ Mr. Bagley then directed senior Compliance 
official John Root to work with Gary Boon at HBME on a payment 
solution.™® 

Root Report. As he had been instructed to do by Mr. Bagley, 
John Root looked into the Iranian U-tum issue. On October 23, 2003, 
Mr. Root sent an email to Mr. Bagley, HSBC Group AML head Susan 
Wright, Money Laundering Control Officer John Allison, and HBEU 
Compliance officer Paul Proctor. Mr. Root wrote that the Iranian 
relationship at HBEU consisted of a U.S. dollar clearing service volume 
of approximately 1 1 payments every business day for six banks: Melli, 
Keshavarzi, Markazi, Sepah, Tejarat, and the Export Development 
Bank.’^’ His email again confirmed that HBEU was altering the 


Subcommittee interview of Michael Gallagher (6/13/2012). 

See 10/21/2003 email exchange among HSBC David Bagley, HBME Steve Banner, and 
others, “Iran-Strategy Discussion Paper,” HSBC OCC 8873946-947. 

™Id. 

1 0/26/2003 email from HBME David Hodgkinson to HSBC David Bagley, “Iran-Strategy 
Discussion Paper,” HSBC OCC 8873959. 

Id. 

Subcommittee interview of David Bagley (5/10/2012). See also 10/28/2003 email from 
HSBC David Bagley to HBME Ajay Bhandoola, “Memo: Iran-Strategy Discussion Paper,” 
HSBC OCC 8873958. 

Mr. Root identified two more banks than were referenced in the October Iran strategy paper. 
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payment documentation, despite HSBC Group Audit head, Matthew 
King’s having expressed concerns about the practice, and the HBEU 
Compliance guidelines calling for the practice to stop by the end of the 
year. Mr. Root wrote; 

“EPS [the payment services team within MPD where Mr. 

Eastwood and Mr. Moxley worked] HBEU have been manually 
intervening in the processing of Iranian bank payment instructions 
by removing the remitter’s name and country to prevent the 
probable trigger of a filter in the US, and the subsequent 
declaration to OFAC (and possible freezing) of the fimds.”’^* 

Mr. Root wrote that he believed EPS had been instructed by HBEU 
Compliance to cease this practice, but was unclear when the instructions 
were given or by whom. He noted that HBEU Institutional Banking 
(IBL) had negotiated an extension until December 31, 2003, due to 
“long-standing valuable relationships.” After the December 3 1 , 2003 
deadline, Mr. Root stated that cover payments would be considered 
unacceptable, and EPS would have to send HBUS fully formatted 
payment instructions on a MTlOO/103 serial basis. 

Mr. Root also noted that Project WOLF, an HSBC Group project 
developing an automated payment filter to screen transactions for 
terrorists, would not ensure HBEU compliance with U-tum regulations 
in the United States. As a result, he said that HBUS would continue to 
be responsible for screening all U.S. dollar transactions with regard to 
OFAC prohibitions.™’ 

Moxley Deadline. The following day, John Root forwarded David 
Bagley, Susan Wright, and John Allison an email from Rod Moxley in 
HBEU’s Multicurrency Payments Department (MPD) expressing Mr. 
Moxley’s objection to participating in procedures designed to conceal 
U-tum transactions. In his October 24, 2003 email, Mr. Moxley first 
objected to the notion that the MPD procedures being used for Iranian 
transactions were new or unknown: 

“I have been alarmed by recent inferences that Payment Services 
have been amending the Iranian banks’ payments without the 
knowledge or consent of IBAl RIM or IBL Compliance. This has 
been a long standing practice and to avoid future doubt, I will 
reiterate the points made in Malcolm Eastwood’s memo to Niger 
Weir of 22 Jan. 03.”™ 


^ 10/23/2003 email from HSBC John Root to HSBC David Bagley and others, “USD Clearing 
- Iranian Banks,” HSBC OCC 8875217. 
at 217. 

10/24/2003 email from HBEU Rod Moxley to HBEU John Wilkinson and others, “Iran,” 
HSBC OCC 8874661-663. Mr. Moxley then outlined anew procedure that he advocated for 
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Mr, Moxley also stated that the position of his office in terms of 
processing the Iranian payments was becoming “increasingly 
untenable.” He wrote that HBEU Risk Management Services*"' would 
be controlling the new WOLF filter, but “we have been requested to find 
ways to circumnavigate our own and other institutions’ compliance 
filters.”*"^ He described his role as protecting the bank from 
reputational risk, but “I now feel uncomfortable in compromising my 
position by leading IBL, PCM or Iranian counterparties down certain 
routes which may directly contravene the spirit of the Compliance 
framework.”*"* Mr. Moxley warned that, given the internal HBEU 
deadline to stop processing concealed Iranian transactions, beginning 
January 1, 2004, “no Iranian payments will be amended.”*"'' 

On November 11, 2003, HSBC Group Money Laundering Control 
Officer John Allison sent an email to HSBC Group AML head Susan 
Wright about his visit to HBEU’s Multicurrency Payments Department 
(MPD) the week prior to discuss Iranian payments.*"* He wrote that 
Iranian correspondent bank customers entered payment information on a 
form, and MPD staff were then expected to review the form to ensure 
the phrases “Iran,” “do not mention Iran,” or any other compromising 
reference were not included in the MT202 payment message transmitted 
to HBUS. He described this process as “established custom” rather than 
a documented procedure, “believed by MPD to be at the request of 
relationship management.” He also wrote that the new MPD 
Compliance manager was “not comfortable with the custom which he 
has inherited, neither from a moral compliance perspective, nor from the 
operational loss/embarrassment factor.” Mr. Allison also wrote that 
MPD Compliance is “very uncomfortable” about periodically being 
asked by Nigel Weir and Gary Boon in HBME whether a specific 
payment format will pass through an OF AC filter.*"" He stated that 
MPD Compliance viewed all of the Iranian payments they proeessed as 
meeting the requirements for a permissible U-tum transaction,*"’ and 
wanted to move toward the legitimate execution of these payments in 


Iranian payments, the result of which would be that the Iranian banks would enter the payment 
information instead of HBEU. 

RMS was located within HBEU’s Payment Services. Subcommittee interview of Rod 
Moxley (6/7/2012). 

1 0/24/2003 email from HBEU Rod Moxley to HBEU John Wilkinson and others, “Iran,” 
HSBC OCC 8874661-663. 

Id. at 662. 

1 1/1 1/2003 email from HSBC John Allison to HSBC Susan Wright, “Iran payments,” HSBC 
OCC 8877136-137. 

Id. at 136. 

Id. at 1 37. The email did not address the issue of whether Bank Markazi, as a government 
owned Central Bank, was unable to utilize the U-tum exception. Bank Markazi was added to the 
OFAC list in 2007. 
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light of what Mr. Root described as an “instruction” from Mr. Bagley 
“to cease processing Iranian bank payments.”*”* 

On November 27, 2003, Mr. Moxley sent Ms. Wright a draft 
proposal to process Iranian U.S. dollar transactions. Although the 
proposal would prohibit altering a transaction document to remove the 
name of a prohibited country or town, and required a review for OF AC 
compliance, it did not require the transaction to include full payment 
details for the originator and ultimate beneficiary as outlined in the 
HBUS August 2001 U-turn payment procedure.*”” 

On December 10, 2003, after having consulted FIBUS Compliance 
head Carolyn Wind, Ms. Wright sent Mr. Moxley an email updating him 
on the Iranian U-tum payment proposal.**” Ms. Wright indicated that 
the issue of processing payments through HBUS had been “discussed at 
length” among HBUS Compliance, outside legal counsel Tom Crocker, 
HBUS payments personnel, and HBEU during the summer of 2001. She 
indicated she had asked Ms. Wind to forward the 2001 HBUS proposal 
for consideration. The following day, Nigel Weir wrote to Ms. Wright 
that the HBUS proposal required a method for processing payments that 
was not HBME’s preferred solution.*" He also expressed concern that 
HBEU would be unable to advise their customers of the proposed 
processing changes before the December 31 deadline and requested an 
extension. Ms. Wright forwarded the correspondence to Mr. Bagley. 

On December 12, 2003, Mr. Bagley emailed Mr. Weir that if 
HBUS felt it could agree to processing the Iranian transactions only on 
the basis of fully transparent documentation, then its views would have 
to be taken into account. He also wrote that HBUS “must be 
comfortable” with the approach. 

HBEU continued, however, to object to the new payment 
procedure. On December 18, 2003, HBEU wrote to HSBC Group 
Compliance that HBUS’ procedure, which it referred to as “the serial 
method,” “ requires a large amount of work prior to commencement, a 
disproportionate amount of expense and a higher than average risk to the 
banks reputation being damaged by a future payment.”*’^ 


Id. at 1 37. Although Mr. Root indicated that Mr. Bagley had ordered the MPD payments to 
“cease,” they continued for another two years. 

1 1 /27/2003 email from HBEU Rod Moxley to HSBC Susan Wright, “Draft Iranian - USD 
Payment Procedures,” HSBC OCC 8875225-232. 

12/10/2003 email from HSBC Susan Wright to HBEU Rod Moxley and others, HSBC OCC 
8875508. 

See 12/1 1/2003 email exchange between HSBC Susan Wright, HBME Nigel Weir, and 
others, “Iran - U-Tum Payments,” HSBC OCC 8877150-154. 

1 2/1 8/2003 email from HBEU 3'ony Collins to HSBC John Allison and others, “Memo: Re; 
Iran - U-Tum Payments,” HSBC OCC 8873974-975. Group Compliance John Allison and John 
Root sought legal advice from outside counsel Tom Crocker of Alston & Bird and Mr. Crocker 
determined that “it is not clear that the cover payments meet the requirement of the U.S. Dollar 
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At the same time HBEU and HBUS were arguing over payment 
procedures, HBEU and HBME continued to send transactions involving 
Iran through their correspondent accounts at HBUS, the vast majority of 
which were undisclosed. A later analysis performed by an outside 
auditor at HBUS’ request found that, in 2003, HSBC affiliates sent at 
least 5,400 Iranian transactions to U.S. dollar accounts in the United 
States, of which about 90% were not disclosed.*'^ 

Also in December, HBUS payments services head Denise Reilly 
spoke with HBUS’ new AML Director Teresa Pesce, who began work in 
September 2003, about the Iranian issue and sent her a copy of the 2002 
Eastwood memorandum describing how HBEU altered documentation 
and used cover payments to send U.S. dollar transactions involving Iran 
through their correspondent account at HBUS without HBUS’ 
knowledge. Ms. Reilly’s email indicated that Ms. Pesce had also 
discussed the issue with Mr. Gallagher the previous day, although Mr. 
Gallagher told the Subcommittee he did not recall either seeing the 
memorandum or discussing it with Ms. Pesce. 

(e) Reaching Agreement 

Despite the HBEU deadline announced by Rod Moxley, that MPD 
would stop processing concealed Iranian transactions after December 31, 
2003, no agreement was reached by that date on how to process the 
transactions. Documents obtained by the Subcommittee indicate that 
HBEU did not adhere to its deadline, but continued to process Iranian 
transactions using cover payments and deleting any references to Iran in 
the payment instructions. 

On March 10, 2004, after an Iranian transaction was detected and 
halted in London, HBEU MPD head Malcolm Eastwood wrote: “I 
remain extremely uncomfortable with the practice of amending Iranian 
payment orders for whatever means.”*’* Mr. Eastwood advised HBEU 
Compliance and Institutional Banking to resolve the issue as soon as 


u-tum exception to the Regulations.” 1/8/2004 memo from Thomas Crocker to John Root and 
John Allison, “Iranian U.S. Dollar U-Tum Transactions and Cover Payments,” HSBC OCC 
8903992-000. 

Deloitte presentation, “March 29, 20I2,"HSBC-PSI-PROD-0197919, at HSBC OCC 
8966143. The Deloitte review examined HBEU and HBME Iranian transactions sent through 
U.S. dollar accounts at HBUS and other U.S. banks. 

See 12/17/2003 email from HBUS Denise Reilly to HBUS Teresa Pesce, “Compliance - 
OF AC Issues in General and Specific to Iran,” HSBC OCC 3407517-522 (“Attached is the 
memo that we discussed yesterday in our meeting with Michael Gallagher.”). See also 
1 1/14/2002 memorandum from HBEU Malcolm Eastwood to HBUS Denise Reilly and HBEU 
Geoff Armstrong, “Compliance - OF AC Issues in General and Specific to Iran,” HSBC OCC 
7688824. 

Id. Subcommittee interview of Michael Gallagher (6/13/2012). 

3/10/2004 email from HBEU Malcolm Eastwood to MDBK (Midland Bank) Quentin 
Aylward and others, “BankMarkazi Payment,” HSBC OCC 8873979-980. 
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possible and remarked that his Compliance certificate is “heavily 
caveated to reflect that we are not compliant in respect of Iran.” Mr. 

Eastwood sent a copy of his email to HSBC Group AML head Susan 
Wright who forwarded it to David Bagley. 

The following day, Mr. Bagley responded to Mr. Eastwood by 
writing that he understood and shared his concerns, but believed his 
comments underestimated “the complexity of the OF AC regulation, and 
the competing competitive pressures across the Group.”*'* Mr. Bagley 
also wrote that one reason for the slow resolution was that “HBUS was 
unaware that any arrangements existed with Iranian banks.” 

On March 22, 2004, more than two years after becoming head of 
HSBC Group Compliance, David Bagley confronted HBME Deputy 
Chairman David Hodgkinson about the need to change how HBME was 
handling U.S. dollar clearing activity for Iranian banks.*'^ Mr. Bagley 
wrote that he was “uncomfortable with this activity in its current form,” 
and “the amount of revenue may not justify” the “additional work and 
investment” required, “nor would it justify rufnjning the reputational 
and regulatory risk in the US.” He expressed his willingness to discuss 
the issue further, but suggested “that any such conversation take place 
over the telephone, as we are seeking to avoid correspondence with 
HBUS on this sensitive issue other than through lawyers so as to 
preserve privilege.”*^® 

WOLF Filter Announced. On March 23, 2004, HSBC Group 
issued a new Group Circular Letter 040021 implementing a major new 
initiative on “Payment screening.”*^' The circular announced that HSBC 
Group had developed an internal filter called “WOLF” to screen against 
terrorists and sanctioned countries and persons. The circular explained: 

“As part of the international effort to combat terrorism. Competent 
Authorities in numerous countries have published lists of names 
that are known to be, or are believed to be involved in terrorist 
activity. ... In addition . . . sanctions against a number of countries 
and names are imposed .... Compliance with these sanctions and 
orders has to date relied upon manual processes to identify when 
relevant names are contained in payment instructions. In order to 
ensure that compliance with the restrictions ... is achieved 
consistently across the Group, an automated payment screening 


Id. at 8873980. 

^''^3/1 1/2004 email from HSBC David Bagley to HBEU Malcolm Eastwood and others, “Bank 
Markazi Payment,” HSBC OCC 8873985-986. 

3/22/2004 email from HSBC David Bagley to HBME David Hodgkinson and HSBC Warren 
Learning, “Iran - Correspondent Banking Services,” HSBC OCC 8873995-997. 

Id. 

3/23/2004 “GCL 040021 : Payment screening,” prepared by HSBC Group, HSBC OCC 
0953080-084. 
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utility named WOLF has been developed. When installed ... 
WOLF will, before execution, search all fields of a payment 
message for matches with listed terrorist/sanctioned names. Once 
a potential match with a word or words ... is identified, the 
unexecuted payments must be reviewed to establish whether the 
match is actually a true match, with appropriate action taken if it is. 

WOLF is the Group solution for real-time pre-execution payment 
1)822 

screening. 

The circular indicated that globally, WOLF would screen against 
terrorists listed by the United Nations, United States, United Kingdom, 
European Union, and Hong Kong, as well as countries or persons 
sanctioned by the United Nations. It indicated that compliance and 
payment operations personnel in HSBC affiliates were responsible for 
ensuring WOLF was loaded with other sanctioned names that were 
applicable locally. It indicated that the screening would be applied 
first to international transactions, and later to domestic ones. The 
circular required affected HSBC entities to install the WOLF filter by 
the end of 2004. 

HBME Extension. On April 1 7, 2004, HBME Deputy Chairman 
David Hodgkinson contacted David Bagley about the unresolved issues 
involving HBME’s U.S. dollar clearing business for Iran, because he 
anticipated having to explain HSBC’s position to the Central Bank 
during a visit to Tehran in May. Mr. Hodgkinson noted: “The current 
position as briefed to me last week was that we have not yet found a way 
to handle major USD clearing business.”*^'* He informed Mr. Bagley 
that he had directed his staff to develop a proposal to undertake this 
business while minimizing risk, “so that if circumstances change we 
know our preferred way forward.” 

Mr. Bagley forwarded the email to his supervisor, HSBC Group 
legal counsel Richard Bennett. Mr. Bagley wrote: “[T]he most pressing 
issue to be resolved is that relating to the limited number of existing 
relationships that we have (for two small Iranian Banks) where I suspect 
that HBUS are not aware that payments may be passing through them. 
Do not believe that we can allow this situation to continue very much 
longer, which is the point I will make to David in my response.”*^^ 


Id. HSBC added the OF AC SDN list to the WOLF filter in 2004, and added the OF AC 
country list in August 2005. Subcommittee briefing by Cahill Gordon & Reindel LLP 

(6/20/2012). 

4/] 7/2004 email from HBME David Hodgkinson to HSBC David Bagley and HSBC Warren 
Learning, “Iran -Correspondent Banking Services,” HSBC OCC 8874671. 

!d. at 671. 

4/19/2004 email from HSBC David Bagley to HSBC Richard Bennett, “Iran Correspondent 
Banking Services - OF AC,” HSBC OCC 8873994 and HSBC OCC 8966146. Mr. Bagley had 
allowed these payments to continue by granting a dispensation since they ran afoul of Group 
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This email is the third*^’ in which Mr. Bagley indicated that HBUS 
might be unaware it was processing Iranian U-tum transactions that, in 
his own words, “may constitute a breach of U.S. sanctions,” yet 
contained no indication that Mr. Bagley planned to inform HBUS about 
the risks it was incurring. 

Two days later, on April 19, 2004, Mr. Bagley again pressed 
HBME to resolve the issue. In an email to Mr. Hodgkinson, Mr. Bagley 
expressed concern about the correspondent relationships operating 
through HBME “which do not currently meet the requirement of the US 
Legal opinion that has now been obtained.”*^* He continued: “I have 
sanctioned the continuation of these services pending an early resolution 
of the way forward, but it is clear from your note that we are some 
distance away from finalizing our thinking such that we can go to HBUS 
with any proposal with regard to a way forward.” Mr. Bagley warned: 

“1 feel that there is little option other than for me to recommend to 
HBEU that the existing activity be discontinued given the risk that we 
are posing for HBUS, unless the solution under consideration at your 
end gives us a satisfactory option.” 

HBME’s Nigel Weir responded to Mr. Bagley’s email at the 
request of Mr. Hodgkinson, stating that he had already spoken with Gary 
Boon at HBME and John Allison at HSBC Group to develop a solution. 
He also requested that Mr. Bagley extend the dispensation from the 
HBEU decision to stop altering Iranian documentation until June 30, 
2004.®^’ Two days later, Mr. Bagley told John Allison that he was 
reluctant to extend the dispensation “unless there is a clear and agreed 
solution with a definite and proximate implementation date,” and 
reque.sted an update the following week.“° Despite Mr. Bagley’s 
indication that he would not grant an extension without an agreement, 
the same practices continued amid ongoing negotiations over the 
agreement’s provisions. 


policy. However, an increase in business, which is what HBME was seeking, was on hold 
pending an agreement between HBUS, HBEU, and HBME. 

The other two were a 1 0/2 1 /2003 email from HSBC David Bagley to HBME Steve Banner, 
and others, ‘Tran-Strategy Discussion Paper,” HSBC OCC 8873946-947 (“I am not sure that 
HBUS are aware of the fact that HBEU are already providing clearing facilities for four Iranian 
banks, presumably including USD clearance.”); and a 3/11/2004 email from HSBC David 
Bagley to HBEU Malcolm Eastwood and others, “Bank Markazi Payment,” HSBC OCC 
8873985-986 (“The complexity of the OFAC regulations, and the fact that HBUS were unaware 
that any arrangements existed with Iranian Banks, has made speedy resolution of this issue 
difficult.”). 

4/19/2004 email from HSBC David Bagi^ to HBME David Hodgkinson, “Iran- 
Correspondenl Banking Services,” HSBC OCC 8966135. 

5/2/2004 email from HBME Nigel Weir to HSBC David Bagley and others, “Iran - 
Correspondent Banking Services,” HSBC OCC 8874673-674. 

5/4/2004 email from HSBC David Bagley to HSBC John Allison, “Iran - Correspondent 
Banking Services,” HSBC OCC 8874673. 
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Second Moxley Deadline. About eight months after Mr. Moxley 
had raised strong objections to continuing to alter Iranian payments, no 
agreement had been reached among HSBC affiliates on increasing the 
transparency of the transactions. HBEU continued to delete references 
to Iran from the payment instructions, generate cover payments with 
incomplete payment information, and send undisclosed Iranian 
payments to HBUS. To break the impasse, in June 2004, outside legal 
counsel in the United States proposed a new payments solution, which 
essentially required that all U-tums be processed by HBUS in a 
transparent or “serial” manner that identified the underlying originators 
and beneficiaries. 

On June 9, 2004, HBEU senior payments official Rod Moxley 
reacted negatively to the proposal due to operational difficulties. At the 
same time, he wrote: “I feel very uncomfortable recommending that we 
continue to process Iranian payments.”*^' He requested a formal 
response by June 18, 2004, and stated that “unless compelling 
commercial reasons” approved by HSBC Group Compliance and HBUS 
exist, he would stop handling Iranian payments after September 30, 
2004.*^^ This email represented his second attempt to cut off Iranian 
payments that MPD was uncomfortable processing. 

On June 30, 2004, Nigel Weir wrote to Mr. Moxley and asked him 
to revisit the issue and work with HSBC Group Compliance on a 
solution enabling HBEU to execute U.S. dollar payments for Iranian 
banks in accordance with U.S. regulations.*^^ Mr. Weir told Mr. Moxley 
that if the payments were stopped, “we will be effectively insulting the 
Government and State of Iran.” Mr. Weir stated that the bank had 
declined new U.S. dollar payment business from Iranian banks due to 
the sensitive political situation, “but to exit business which we have been 
conducting for many years would jeopardize all other existing business 
activities.” He estimated that the Group profit from existing Iranian 
business activities amounted to $10 million per year. 

Also on June 30, 2004, HBME Deputy Chairman David 
Hodgkinson forwarded the correspondence between Mr. Moxley and 
Mr. Weir to then HBEU CEO Michael Geoghegan, asking for his 
“intervention and support” in positively resolving the long-standing 
issue, and noting Iran’s “significant strategic importance” to the 
Group.**'' Mr. Hodgkinson also noted that the volume of Iranian 
payments was small at 20 per day. When asked about this email, Mr. 


6/9/2004 email from HBEU Rod Moxley to HSBC John Allison and others, “Iran,” HSBC 
OCC 8874002-004. 

“Id. 

6/30/2004 email from HBME Nigel Weir to HBEU Rod Moxley and others, “Memo: Re; 
Iran,” HSBC OCC 8874001-002. 

6/30/2004 email from HBME David Hodgkinson to HBEU Michael Geoghegan, “Memo: Re: 
Iran," HSBC OCC 8874001. 
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Moxiey told the Subcommittee that it resulted in HBEU and HBME’s 
obtaining a “dispensation” from having to end the alteration of Iranian 
transactions until the end of 2004.*^^ When asked about the dispensation 
approval process, he said that he thought that HSBC Group Compliance 
approval was needed along with secondary approval from either HSBC 
Group Audit or another manager. 

Later that day, another HBEU official John Ranaldi sent an email 
to Mr. Geoghegan stating that he was aware of the Iranian situation and 
would get an update. He wrote: “[BJasically, our interpretation was that 
we were being asked to ‘fudge’ the nature of the payments to avoid the 
U.S. embargo and seizure.”* ^ When asked about this email, Mr. 
Geoghegan told the Subcommittee that he could not explain what Mr. 
Ranaldi meant by using the word “fudge,” except that it related to 
Iran.*^’ He said that, at the time, he was unaware that HBEU was 
altering transaction documentation or using cover payments. Having 
since learned what was going on, he told the Subcommittee that he 
assumed that’s what Mr. Ranaldi was talking about. When asked 
whether it raised alarm bells at the time, he remarked that he got many 
emails and Mr. Ranaldi used colorful language. He said that he also 
knew Mr. Ranaldi would follow-up with him in a few days. 

HBEU Proposal. On July 6, 2004, HBEU’s Rod Moxiey 
produced a specific proposal as a potential way forward using his 
preferred solution of serial payments.*^* The extensive proposal also 
shed light on existing practices at HBEU.*’’ 

The proposal noted that HBEU had been trying to come up with a 
solution for two years after an HBEU compliance officer challenged the 
practice of altering Iranian payment instructions in June 2002. It noted 
that Bank Melli, Bank Markazi, Bank Tejarat, Bank Kesharvazi, and the 
Export Development Bank of Iran were the five Iranian financial 
institutions that took advantage of this practice to effect U.S. dollar 
payments with a daily volume estimated at between 10 and 50 payments 
per day at an approximate total value of $500,000 to SI million. The 
proposal also noted that the Central Bank payments were much larger, in 
the range of $10 million, and were typically made at certain times of the 


Subcommittee interview of Rod Moxiey (6/7/2012). 

6/30/2004 email from HBEU John Ranaldi to HBEU Michael Geoghegan, “Memo: Re: Fw: 
Iran,” HSBC OCC 8873999. 

Subcommittee interview of Michael Geoghegan (5/24/2012). 

See 7/2004 discussion paper, “HSBC Bank PLC Iranian Payment Processing Proposals,” 
HSBC OCC 8874026-034. 

Id, For example, according to the document, the existing HBEU practice was that if an 
Iranian financial institution included a cautionary statement, such as “Do not mention Iran,” in 
Field 72 of the payment instruclions, the payment would drop out to what was called a repair 
queue. Once in the repair queue, HSBC personnel would alter the payment instructions by 
deleting any reference to Iran. 
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month.*''® The proposal stated that the “vast majority of payments are 
valid, falling within the U-tum exception.”*'" 

The proposal discussed two potential payment options that would 
meet HBUS’ requirement for transparency. It noted that HBEU 
preferred the “serial payment” option which would allow the Iranian 
banks to format their payments in a way that would not require 
intervention from HBEU. HBEU believed this aspect of the proposal 
would relieve it of any responsibility to review the payments, leaving it 
up to HBUS, or another U.S. bank where a payment was directed, to 
verify that the payment met the U-turn exception requirements. The 
proposal indicated that HBEU would continue to utilize WOLF and 
other filters to screen the payments, but the Iranian financial institutions 
would be responsible for ensuring they submitted only valid U-turn 
payments “permissible under the terms of US legislation.” The proposal 
indicated this solution would also transfer the risks associated with 
blocked payments to the Iranian banks.*”*^ The proposal acknowledged 
that HBUS would need to agree to this solution, and HBEU and Group 
Compliance would need to “sign-off’ on it prior to moving forward. 

On July 6, 2004, HBEU MPD head Malcolm Eastwood forwarded 
Mr. Moxley’s proposal to John Ranaldi, noting that he continued to have 
serious concerns about the Iranian U.S. dollar clearing business, Mr. 
Ranaldi forwarded the email to then HBEU CEO Michael Geoghegan, 
writing: “reference your earlier query.”*'*'’ According to Mr. Ranaldi, 
Mr. Eastwood’s department was being asked to “amend instructions or 
assume responsibility that the contents of the payment message do not 
attract the Fed’s attention and seize the payment.” He explained that a 
“payment clerk is asked to judge upon a payment kicked out by the 
filtering system, whether to release, or return.” He wrote, “there is an 
irony; someone could argue that by returning payments to Iran that we 
are contravening the ofac rules.”*''^ Mr. Ranaldi characterized the risks 
associated with the existing practice as including operational losses due 
to payment seizure, threats to HSBC’s reputation, and “incurring hefty 
fines.” He told Mr. Geoghegan that Lloyds Bank had been fined “and 
few if any u.k. banks are in the business.” 

When asked about this email, Mr. Geoghegan told the 
Subcommittee that he was “puzzled” that he didn’t act to stop the 


7/2004 discus.sion paper, “HSBC Bank PLC Iranian Payment Processing Proposals,’' HSBC 


OCC 8874026-034. 
Id. 


Id. at 030. 

7/6/2004 email from HBEU Malcolm Eastwood to HBEU iohn Ranaldi and others, ’’HBEU 
Iranian Payments Business,” MSBC OCC 8876861 


Id. 

7/6/2004 email from HBEU John Ranaldi to HBEU Michael Geoghegan, “HBEU Iranian 
Payments Business,” HSBC OCC 8876861. 
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practice immediately or get out of the business. He remarked that he did 
respond that way with Mexico, so thought it was odd that he didn’t in 
this case. He couldn’t recall whether he talked to any other senior 
HSBC Group executives about the issue.*''* 

Emails in early August 2004 show HBEU and HBME reviewing 
and discussing the Moxley proposal.*'*’ On August 6, 2004, Mr. Bagley 
commented: “My initial reaction is that the proposals are more robust, 
and therefore more likely to be acceptable that we originally 
contemplated or proposed.”*'** He also said the proposal had to be sent 
to HBUS’ outside legal counsel for confirmation it would meet OFAC 
requirements.*'*’ Later that day, the HSBC Global head of Payments and 
Cash Management, Iain Stewart, forwarded Mr. Bagley’s email to Mr. 
Geoghegan and Mr. Hodgkinson with a note: “Progress report. This 
will delay it a bit but we are getting there.”*** When asked about this 
email, Mr. Geoghegan surmised that HBUS was involved and legal 
opinions were being obtained.**' 

On September 22, 2004, HBEU Nigel White informed Mr. Stewart 
and others, including Mr. Bagley, that “all involved parties have signed 
off on the proposal,” and the next step was for HSBC Group Compliance 
to obtain agreement from HBUS.**’ At the same time these negotiations 
were ongoing, HBEU and HBME continued to send undisclosed Iranian 
transactions to HBUS with the tacit approval of HSBC Group 
Compliance. 

HBUS Approval. The revised Moxley proposal was sent to 
HBUS in November 2004. On November 30, 2004, HBUS’ AML 
Director Terry Pesce, PCM head Michael Gallagher, and Payment 
Services head Denise Reilly met with HBUS CEO Martin Glynn, about 
HBUS processing U-tum transactions. Prior to the meeting, Ms. Reilly 
circulated the HBUS procedures that were developed in 2001 , “when the 
topic was last active.”*** The internal emails suggest that one HBUS 
employee may have been under the impression that the processing of 
Iranian transactions had not yet begun and did not know that HBUS had 


Subcommittee interview of Michael Geoghegan (5/24/2012). 

See 8/4/2004 email exchanges among MDBK Phil Baines to HBEU Nigel White and others, 
“Iranian ~ Payment Processing Proposals,” HSBC OCC 8874705-708. 

8/6/2004 email from HSBC David Bagley to HBEU Nigel White and others, “Iranian - 
Payment Processing Proposals,” HSBC OCC 8874703-704. 

Id. 

8/6/2004 email from HSBC Iain Stewart to HBEU Michael Geoghegan and HBME David 
Hodgkinson, “Iranian - Payment Processing Proposals,” HSBC OCC 8874703. 

Subcommittee interview of Michael Geoghegan (5/24/2012). 

9/22/2004 email from HBEU Nigel White to HSBC Iain Stewart and others, “Iranian U Turn 
Payments,” HSBC OCC 8874023-034. 

1 1/30/2004 email from HBUS Denise Reilly to HBUS Sandra Peterson and HBUS Michael 
Gallagher, “U-tums,” HSBC-PSI-PROD-0096166; 11/29/2004 email from HBUS Denise Reilly 
to HBUS Michael Gallagher and others, “U-tums,” HSBC-PSI-PROD-0096167. 
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processing Iranian U.S. dollar transactions for at least three 

A few days after the high level meeting among HBUS officials, 
Ms. Reilly sent Mr. Gallagher a deserlption of “the conditions under 
which HBUS will accept U-Tum transactions.”*^^ Those conditions 
included that transactions would be formatted to be fully transparent 
serial payments; HBEU would agree not to alter payment instructions 
and abide by the U-tum processing requirements; HBUS would not be 
liable for penalties resulting from OF AC sanction violations; a separate 
“HBEU Special Account” would be established at HBUS to handle 
Iranian originated transactions and the aeeount number would be added 
to the HBUS OFAC filter so all transactions could be reviewed and 
approved prior to processing; HBUS would be reimbursed for the 
additional employees needed to handle review of these payments; and 
fees for the transactions would reflect the processes and risk.*^® 

Whereas the 2001 protocol was specific to Bank Melli, this protocol 
applied to all Iranian transactions.®*’ 

On December 15, 2004, Mr. Bagley informed the HSBC Global 
Head of PCM Marilyn Spearing and HBME Deputy Chairman David 
Hodgkinson that he had advised then HSBC Group CEO Stephen Green 
“that a compliant solution had been agreed in principle with HBUS.” 
While this agreement was a significant milestone, Mr. Bagley said Mr. 
Green wanted to consider the issue and possibly discuss it with then 
HSBC Group Chairman John Bond. 

Mr. Bagley asked Ms. Spearing to provide him data on the 
potential commercial value of the Iranian U.S. dollar transactions to the 
Group, considering both existing and future business. He wrote: 

“1 would not suggest that we seek to try and influence the debate at 
this stage. ...but it might be helpful if I was armed with the likely 
value to the Group if we are in effect making a reputational risk 
over possible reward type judgment.”*** 


already 1 
years. *“' 


See, e.g., 1 1/30/2004 email from HBUS Sandra Peterson to HBUS Denise Reilly and HBUS 
Michael Gallagher, “U-turns,” HSBC-PSI-PROD-0096I65 (Ms. Peterson; “Is this proposal for 
Bank Melli only or is the intent to grow this business? When this topic first arose it was to 
support Bank Melli but my understanding is that the business under discussion now is more 
general, with no specific clients named to date.”). 

12/2/2004 email from HBUS Denise Reilly to HBUS Michael Gallagher and others, “U- 
Tums,” HSBC OCC 3407526-527. 
at 527. 

Subcommittee meeting with HSBC legal counsel (4/12/12). 

12/15/2004 email from HSBC David Bagley to HSBC Marilyn Spearing and HBME David 
Hodgkinson, “Iran - OFAC,” HSBC OCC 8874039. 
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Mr, Bagley concluded by writing that it would probably be “sensible” to 
“gently” proceed “assuming that we may get sign-off. 

An internal OCC memorandum indicates that, in early 2005, 

HBUS contacted the OCC about a proposal to process Iranian U- 
tums.*®° In the memorandum, an OCC examiner described how 
legitimate U-tums could be processed and wrote: “[W]e notified Ms. 
Pesce that we believed the transactions to be permissible. However, we 
also informed her that the bank would have to maintain extremely tight 
controls over the transactions as well as a comprehensive system of 
controls for monitoring purposes.”*®' Later in the same memorandum, 
the OCC examiner wrote: “[0]n February 23, 2005 Ms. Pesce informed 
the writer that the decision to process the u-tum transactions was not to 
go forward and that the area business had made the decision not to 
undertake such processing.”*®^ 

The documentation suggests that even after reaching agreement 
with HBUS on how to process Iranian transactions, HBEU and HBME 
continued to send undisclosed Iranian transactions through their HBUS 
accounts. A later analysis performed by an outside auditor at HBUS’ 
request found that HSBC affiliates sent about 7,800 Iranian transactions 
through U.S. dollar accounts in the United States during 2004, of which 
more than 90% continued to be undisclosed.*®^ 

(f) Processing the Iranian Transactions 

The 2004 agreement reached among HSBC affiliates on how to 
process Iranian U-tum transactions did not end the controversies or new 
developments affecting those transfers. 

Considering an Exit. Four months after agreement was reached 
with HBUS on how to process Iranian transactions, on April 8, 2005, 
David Bagley reached out to Mr. Hodgkinson to request an assessment 
of the nature and extent of Iranian business for an analysis Mr. Bagley 
was asked to prepare for the HSBC Group Chairman. It appears that at 
the top levels of HSBC, there was some discussion about exiting the 
Iranian business entirely due to a “specific transaction for NPC” about 
which Mr. Bagley had spoken with Mr. Green.*®'' In the same email, 

Mr. Bagley wrote, “This is needed partly as part of the risk over reward 

Id. at 039. 

See 2/28/2005 OCC memorandum, “Issues Update,” OCC-PSI~00903648-650, at 2. [Sealed 
Exhibit.] 

Id. 

“Id. 

Deloitte presentation, “March 29, 2012,”HSBC-PSI-PROD-0I97919, at HSBC OCC 
8966143. The Deloitte review examined HBEU and HBME Iranian transactions sent through 
U.S. dollar accounts at HBUS and other U.S. banks. 

4/8/2005 email from HSBC David Bagley to HBME David Hodgkinson and HBME Nasser 
Homapour, “Iranian Business — OFAC,” HSBC OCC 8874052. The reference to NPC is unclear. 
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equation, but also because we will need to both analyze each different 
type of business and assess how we will deal with legacy issues.”*^’ He 
continued: “It is not all as bad as it seems as the conversation today 
gave some clear possible alternative approaches to an outright ban.”®*’*’ 

Two days later, on April 10, 2005, HBME official Ajay Bhandoola 
provided Mr, Bagley with a paper discussing payment alternatives for 
Iran.®*’ The paper laid out two proposals for continuing payments from 
Iranian bank accounts with HSBC “to protect our Iranian franchise while 
minimizing any possible legal, regulatory or reputational risk to HBUS.” 
The two alternative solutions provided were to use another U.S. dollar 
correspondent (other than HBUS) for HBME, and to limit U.S. dollar 
accounts for Iranian banks to specific purposes. *** HBME did not 
explain why it was considering using a third party correspondent since 
HBUS had already agreed to process the Iranian transactions using 
transparent procedures.*® 

Stopping Payments. On April 19, 2005, HBUS’ OFAC filter 
stopped a $362,000 payment from Bank Melli because it contained the 
phrase “do not mention our name in New York.”*’'* When asked in 
general about why payments would be stopped in the HBUS filter, Rod 
Moxley told the Subcommittee that messages like the one mentioned 
above should have been deleted in the processing area but was errantly 
left on the outgoing instructions.*” This incident indicated that HBEU’s 
MPD was still altering Iranian payment instructions in April 2005, one 
year after Mr. Moxley had threatened to stop processing all payments if 
forced to continue altering them, and four months after HBEU and 
HBUS reached agreement on using fiilly transparent Iranian U.S. dollar 
transactions. HBEU resubmitted the payment on April 22, 2005, but 
HBUS stopped it again and sent a SWIFT message requesting full 
disclosure of the name and address of the underlying originator and 
ultimate beneficiary. Two follow-up requests were sent by HBUS on 
April 28 and May 4, 2005. As of May 5, 2005, no response had been 
received.*” 

In early May 2005, a $6.9 million wire payment involving Iran was 
also stopped by HBUS because the payment details included the phrase, 


Id, 

Id, 

4/1 0/2005 email from HBME Ajay Bhandoola to HSBC David Bagley and others, “Iranian 
Business - OFAC,” HSBC OCC 8874051-057. 

Undated “Iranian Accounts and USD Payments,” prepared by HBEU, HSBC OCC 8874055- 
057. 

Id. at 056-057. 

5/5/2005 email from HBUS Elizabeth Protomastro to HSBC John Allison and others, 
“Payment rejected re Melli Bank PLC-USD 362,000,” HSBC-PSI-PROD-0096 170-1 71. 
Subcommittee interview of Rod Moxley (6/7/2012). 

5/5/2005 email from HBUS Elizabeth Protomastro to HSBC John Allison and others, 
“Payment rejected re Melli Bank PLC-USD 362,000,” HSBC-PSI-PROD-0096170-171. 
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“Bank Melli Iran.”*^^ HBUS OF AC Compliance officer Elizabeth 
Protomastro sent an email to HBEU, as well as HSBC Group, stating: 

“Though the payment appears to meet the U-tum under the Iranian 
Transactions Regulations, we require that the payments should he 
fully disclosed as to the originator and beneficiary information 
before processing. We know that this policy is in line with the 
stance of other U.S. financial institutions .... You are also aware, 
from past discussions, that this is required hy HBUS. 

Let us know if you have any questions. Please advise on your side 
of the delay in processing.”*^'' 

The email chain regarding the stopped payment was forwarded to 
Mr. Bagley, who then contacted HBUS AML head Teresa Pesce to ask 
whether HBUS’ action “denotes a change of policy and approach within 
HBUS to what I would normally expect to be cover payments.” Mr. 
Bagley wrote: 

“As you are aware, there are no Group standards which require that 
the originator and heneficiary details go in all payments. 
Accordingly, Group Operation globally will not habitually require 
or input this information if the underlying customer instruction is 
received on a basis permitted by the SWIFT format and by local 
regulation.” 

He noted that if the payment were suspended due to a reference to Iran, 
he understood. But if the action taken by HBUS denoted a change of 
policy on what information had to be included in payment instructions, 
that change may not have been communicated across the Group and 
vetted with business colleagues. This email was sent in 2005, by Mr. 
Bagley, after more than two years of negotiations to increase 
transparency with regard to Iranian transactions. 

Ms. Pesce forwarded Mr. Bagley’s email to HBUS OFAC 
Compliance officer Elizabeth Protomastro and senior HBUS 
Compliance official Anne Liddy. Ms. Protomastro responded that “for 
the most part” the U-tums being processed by HBUS for HBEU had 
been fully disclosed in compliance with the conditions specified in 
December 2004.®’® Ms. Protomastro stated that the remitter involved in 


5/3/2005 email from HBUS Etizabelh Protomastro to HSBC John Allison, HSBC Susan 
Wright, HBEU Rod Moxley, and others, “Wire payment suspended re ‘Iran’ - USD 
6,912,607.82,” HSBC OCC 8874710-712, at 71 1. 

Id. at 712. 

5/4/2005 email from HSBC David Bagley to HBUS Teresa Pesce. “Wire Payments 
Suspended,” HSBC OCC 8874710-711. 

5/4/2005 email from HBUS Elizabeth Protomastro to HBUS Teresa Pesce and others, “Wire 
Payments Suspended,” HSBC OCC 8874710. 
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the $6.9 million transfer was Credit Suisse Zurich, which was “well 
aware of the u-tum practices of other U.S. organizations and the 
requirement for full disclosure of the name and address of the originator 
and the beneficiary. 

On June 3, 2005, Ms. Protomastro informed HSBC Group about 
two more HBEU transfers, for $1.9 million and $160,000, that had been 
stopped by HBUS due to the lack of full disclosure of the originator, 
beneficiary, and purpose of the payment.*^* HBEU responded that both 
payments were foreign exchange related, the originators were Bank 
Tejarat and Bank Melli, and the beneficiaries were Persia International 
Bank and Credit Suisse Zurich, respectively.*’’ Ms. Protomastro 
responded by requesting that HBEU follow up with the banks to obtain 
the names and addresses of the initial originators and ultimate 
beneficiaries, as well as confirmation of the underlying purpose of the 
payments, in accordance with the “agreement reached in the pasf ’ 
between HBUS and HBEU requiring full disclosure for U-tum 
payments.**’ According to information provided by Bank Melli through 
HBEU, the $160,000 payment denoted an internal transfer from Bank 
Melli’s account with HBEU to Bank Melli’s account with Credit Suisse 
Zurich. This information allowed the payment to be released. Mr. 
Marsden stated that he was in the process of contacting Bank Tejerat for 
additional information about the $1.9 million transfer. 

On June 6, 2005, Anne Liddy sent HBUS AML head Teresa Pesce 
the email correspondence about the two Iranian payments that had been 
suspended.*** She also informed Ms. Pesce that 44 of the approximately 
60 payments stopped by the HBUS OF AC filter the previous month, 
May 2005, and forwarded for review, referenced Iran. She remarked 
that this was “quite a lot.” The following day, HBUS OFAC 
Compliance officer Grace Santiago-Darvish informed HBUS’ Payment 
Services head Denise Reilly that they would be sending a message to all 


»”id. 

6/3/2005 email between HBUS Elizabeth Protomastro and HSBC John Allison and others, 
“Wire payments from HSBC Bank PLC suspended - USD 1 ,900,000 and USD 1 60,000 (Iran),” 
HSBC OCC 3407547. 

6/6/2005 email from HBEU Rod Moxlcy to HBUS Elizabeth Protomastro and others, “Re: 
Wire payments from HSBC Bank PLC suspended - USD 1,900,000 and USD 1 60,000 (Iran),” 
HSBC OCC 3407546-547. 

6/6/2005 email from HBUS Elizabeth Protomastro to HBEU Stephen Cooper and others, “Re: 
Wire payments from HSBC Bank PLC suspended - USD 1 ,900,000 and USD 1 60,000 (Iran),” 
HSBC OCC 3407544-545. 

6/7/2005 email from HBEU Anthony Marsden to HBUS Grace Santiago-Darvish, “Re: Wire 
payments from HSBC Bank PLC suspended - USD 1,900,000 and USD 160,000 (Iran),” HSBC 
OCC 3407543-544. 

6/7/2005 email from HBEU Anthony Marsden to HBEU Rod Moxley and others, “Re: Wire 
payments from HSBC Bank PLC suspended - USD 1 ,900,000 and USD 1 60,000 (Iran),” HSBC 
OCC 3407544-545. 

6/6/2005 email from HBUS Anne Liddy to HBUS Teresa Pesce and others, “Fw: Wire 
payments from HSBC Bank PLC suspended - USD 1,900,000 and USD 160,000 (Iran),” HSBC 
OCC 3407537. 
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HSBC locations to remind them about the need to fully disclose 
underlying information in U-tum payments. She wrote: “We, in 
Compliance have noticed that, other locations could be more 
forthcoming about disclosing orig[inator], and bene[ficiary] 
information.”**"' 

Switch from HBEU to HBME. On May 20, 2005, HBME 
Deputy Chairman David Hodgkinson sent an email to HSBC business 
heads that, after a meeting with the HSBC Group Chairman and Group 
CEO, a decision had been made to transfer all Iranian bank U.S. dollar 
accounts held by HBEU to HBME, and utilize a “third party 
correspondent in the US for cover and other valid U turn payments.”**^ 
When asked about this decision, David Bagley told the Subcommittee 
that the processing of the payments was moved to HBME because that 
was where the locus of business was located.**^ In addition, HBME set 
up a special team to review the transactions to ensure consistent 
treatment. Mr. Hodgkinson also informed HSBC business heads that 
they should suspend new business and the expansion of current activities 
with Iran until the political situation improved, but that “existing 
business and commitments with Iran” were allowed to continue.**’ 

JP Morgan Chase. On June 20, 2005, David Bagley informed 
David Hodgkinson that Iranian payments had been discussed in a 
meeting he had with HSBC Group CEO Stephen Green and HSBC 
Group legal counsel Richard Bennett.*** He wrote that it was decided 
that all U-tums, whether passing through HBUS or another U.S. 
correspondent, would have to comply with the U-tum requirements in 
OFAC regulations. He wrote that Mr. Green also wanted confirmation 
that the “agreed arrangements in relation to Iranian payments had been 
put in place,” and that payments, including any cover payments, passing 
through the United States would comply with OFAC regulations. Mr. 
Bagley wrote: 

“Although I may have misunderstood our discussions I was not 
previously aware that this was a precondition nor did my original 
paper envisage that if we used a non-Group correspondent we would 
necessarily consider passing only U-turn exempt payments through 
them. In fact in such circumstances there would be no reason to use 


6/7/2005 email from HBUS Grace Santiago-Darvish to HBUS Denise Reilly and others, “Re: 
Wire payments from HSBC Bank PLC suspended - USD 1,900,000 and USD 160,000 (Iran),” 
HSBC OCC 3407536. 

5/20/2005 email from HBME David Hodgkinson to HBME Nasser Homapour and others, 
“Iran,” HSBC OCC 8874714. 

Subcommittee interview of David Bagley (4/12/2012). 

5/20/2005 email from HBME David Hodgkinson to HBME Nasser Homapour and others, 
“Iran,” HSBC OCC 8874714. 

6/20/2005 email from HSBC David Bagley to HBME David Hodgkinson, “Iranian 
Payments,” HSBC OCC 8878027-029. 
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anyone other than HBUS given that HBUS could not be criticized 
were it to carry out exempt payments.”**^ 

Mr. Bagley’s comments suggest that he was under the impression 
that using a non-Group correspondent would have allowed HSBC to 
process Iranian payments that did not meet the U-tum exception. 
However, after his discussion with Mr. Bennett and Mr. Green, he 
requested that Mr. Hodgkinson confirm they would be sending only 
compliant U-tum transactions through the United States, regardless of 
“whether or not through our own correspondent.”*^® 

On June 27, 2005, David Hodgkinson responded that HBME was 
attempting to open a U.S. dollar correspondent account with JPMorgan 
Chase (JPMC) for the purpose of processing Iranian U.S. dollar 
payments. Later in the email he wrote: “we never envisaged anything 
other than U-Tum compliant payments being processed,” and confirmed 
agreement that “there is no reason to use anyone other than HBUS.” He 
clarified that the only reason they had considered another U.S. 
correspondent for these payments was due to HBUS being unwilling to 
process them for reputational risk reasons.*®' When Michael Gallagher, 
the head of HBUS PCM, was asked whether he was aware that HBME 
opened a U.S. dollar account with JPMorgan Chase in 2005, he could 
not recall.*®^ He further explained that HBME must have thought that 
HBUS’ standards were higher if they went to JPMorgan Chase to do the 
same service. 

Despite that email, HBME did open a U.S. correspondent account 
with JPMC. Mr. Bagley alerted HSBC Group CEO Stephen Green to 
the account on September 19, 2005, writing that HBME had opened a 
correspondent account with JPMC “through which the pre-screened 
compliant U-tum Iranian Payments can be made.”*®* A later analysis 
conducted by an outside auditor at HBUS’ request found that HBME 


"Id. 

Id. at 8878028. With regard to cover payments, Mr. Bagley wrote that failing to consider an 
entire transaction (“both the cover payment instruction and any linked bank to bank message”), 
which if considered together “would lead to a different determination in terms of that U-lum 
exemption,” needed to be included in the risk determination. Mr. Bagley also referenced 
heightened concerns about the level of scrutiny from U.S. authorities regarding cover payments 
and OFAC compliance by “US banks offering correspondent banking services,” stemming from 
discussions held at a recent Wolfsberg meeting. The Wolfsberg Group consists of major 
international banks that meet regularly and work together to combat money laundering. See 
http://www.wolfsberg-principles.com/index.html. 

6/27/2005 email from HBME David Hodgkinson to HSBC David Bagley and HSBC Richard 
Bennett, “Iranian Payments,” HSBC OCC 8878026-027. 

Subcommittee interview for Michael Gallagher (6/13/2013). 

9/19/2005 email from HSBC David Bagley to HSBC Stephen Green and HSBC Richard 
Bennett, “GCL050047 “Compliance With Sanctions,” HSBC OCC 8874360-361. 
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sent about 1,800 U-tums to its JPMorgan Chase account in 2005 and 
2006.*“"' 


(g) Establishing Group-wide Policy 

In July 2005, HSBC Group Compliance issued a Group Circular 
Letter (GCL) that for the first time established Group-wide policy on 
processing OF AC sensitive transactions, including U-tums involving 
Iran. GCL 050047 explicitly barred all HSBC affiliates and offices from 
participating in any U.S. dollar transaction, payment, or activity that 
would be prohibited by OF AC regulations.*” The GCL also explicitly 
acknowledged the U-turn transactions permitted under OF AC 
regulations and required all compliant U-tum transactions be routed 
through an HBME “Center of Excellence” in Dubai for processing. 

While the policy directed all HSBC affiliates to use only permissible 
Iranian U-tums, the GCL also allowed HSBC affiliates to continue to 
use cover payments when sending them through U.S. accounts for 
processing, which meant the transactions would continue to circumvent 
the OF AC filter and any individualized review by the recipient U.S. 
bank, including HBUS.*’"’ 

The 2005 GCL also required local U.S. dollar clearing systems, 
located in Hong Kong and the United Arab Emirates, to implement 
WOLF screening for all U.S. dollar payments to ensure that non- 
compliant payments were rejected. The GCL stated: “Any dispensation 
from the terms of this GCL requires GHQ CMP [Group Compliance] 
concurrence.”*^^ Mr. Bagley described the GCL as being “necessary 
and urgent to protect the Group’s reputation.”*’* 

About a month after the GCL was issued, the HSBC Group head of 
Global Institutional Banking, Mark Smith, issued a managerial letter, in 
August 2005, providing guidance on implementing the new policy.*” 

The letter provided a brief summary of Group’s relationship with each of 


^ Subcommittee briefing by Cahill Gordon & Reindel LLP (6/20/2012); Deloitte presentation, 
“March 29, 2012,” HSBC-PSI-PROD-0197919, at HSBC OCC 8966143. The Deloitte review 
examined HBEU and HBME Iranian transactions sent through U.S. dollar accounts at HBUS and 
other U.S. banks. 

See 7/28/2005 GCL 050047, “Compliance with Sanctions,” HSBC OCC 3407560-561. 

896 jd. 

Id. 

7/26/2005 email from HSBC David Bagley to HSBC Mansour Albosaily and others, “OF AC 
GCL,” HSBC OCC 3407550-555. Upon receipt of the GCL, on July 26, 2005, Anne Liddy wrote 
that she would discuss the need for OF AC training with John Allison and Susan Wright at their 
monthly meeting the following day to ensure HBEU and HBME “clearly understand OF AC” and 
“how to identify a true U turn.” 7/26/2005 email from HBUS Anne Liddy to HBUS Grace 
Santiago-Darvish and others, “OF AC GCL,” HSBC OCC 3407549. 

8/25/2005 managerial letter from HSBC Mark Smith to HBUS Aimee Sentmat, HBME Alan 
Kerr, and others, “GCL050047 - Compliance with OFAC sanctions,” HSBC OCC 3407565-569. 
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the OF AC sanctioned countries.^“ With respect to Iran, Mr. Smith 
wrote: “Iran - extensive relationships with a number of Iranian 
institutions. Group Compliance had re-affirmed that OFAC sanctions, 
including the U-tum exception, apply to all transactions.”®'” The 
guidance also clarified that the revised policy applied only to U.S. dollar 
transactions and continued to permit non-U.S. dollar business with 
prohibited countries and persons on the OFAC list.®°^ 

Also in August 2005, HBUS circulated an email identifying 
correspondent relationships affected by the new policy.®®^ The email 
identified the number of open correspondent accounts with financial 
institutions in affected countries, including Iran. It also explained: 

“The revised policy does not represent an automatic exit strategy 
with regards to affected clients. Non-USD business (and for Iran, 
U-tum exempt transactions) may continue to be undertaken. . . . 
Verbal discussions with affected clients would be preferable. Any 
written correspondent seeking to clarify the Group’s revised policy 
should be cleared with local Compliance.”®®"* 

Once the policy was in place, HSBC personnel took a closer look 
at some of the Iranian transactions. On August 10, 2005, HBME sales 
manager Gary Boon sent John Root an email which included an excerpt 
from an email sent by David Bagley to David Hodgkinson.®®^ In it, Mr. 
Bagley noted that Mr. Hodgkinson had conveyed that a “significant 
number” of the trade and other transactions involving HBME would be 
U-tum compliant. In response, Mr. Bagley wrote: “I have to say that a 
number of potential payments resulting from trade transactions from 
other Group offices that John Root and I have looked at since the 
issuance of the GCL are not in our view U-turn compliant.” 

In September 2005, HBEU senior payments official Rod Moxley 
completed an analysis of U.K. transactions over a ten day period that 
were stopped by the HSBC WOLF filter and involved prohibited 
countries, including Iran.®®® He forwarded the results to senior HSBC 


8/25/2005 Managerial Letter from Mark Smith, “GCL050047 - Compliance with OFAC 
sanctions,” HSBC OCC 3407565-569. 

Id. at 568. 

8/25/2005 managerial letter from HSBC Mark Smith to HBUS Aimee Sentmat, HBME Alan 
Kerr, and others, ‘’‘GCL050047 - Compliance with OFAC sanctions,” HSBC OCC 3407565-569. 

See 8/25/2005 email from HBUS Alan Ketley to multiple HSBC colleagues, “GCL050047 - 
Compliance with OFAC Sanctions,” HSBC OCC 3407565-569. 

Id. at 568. 

8/25/2005 email from Gary Boon to John Root, HSBC OCC 8876581 . See also HSBC OCC 
8876580. 

See 9/23/2005 email from HBEU Rod Moxley to HSBC John Allison and HSBC John Root, 
“OFAC sanctions,” HSBC OCC 8877213-214. 
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Group Compliance officials John Root and John Allison, noting that 
over just ten days, 821 of the transactions had involved Iran.’**^ 

In mid-September 2005, David Bagley provided an update to 
HSBC Group CEO Stephen Green on implementation of the July 2005 
GCL. He explained that the “required specialist ‘U-turn’ team” had 
been established at HBME in Dubai, and a correspondent account with 
JP Morgan Chase had been opened to process compliant U-tum 
payments. He indicated that HBME was also using HBUS to process U- 
tums, as was HBEU. Mr. Bagley stated that “a number of Group 
Offices” had opened U.S. dollar accounts with HBME for routing 
Iranian payments, but added that he was not convinced that all HSBC 
affiliates had done so. As a result, he issued a reminder to the Regional 
Compliance Officers to discuss the matter with their business heads and 
requested confirmation by September 23, 2005. 

Despite the issuance of the GCL and the existing arrangement with 
HBUS, an undisclosed Iranian-related transaction was discovered, 
leading an HBUS executive to believe the practice was ongoing. In 
November 2005, another bank stopped a transaction after HBUS had 
already processed it, without knowing the transaction had involved Iran. 
HBUS OFAC Compliance officer Elizabeth Protomastro notified Mr. 
Moxley at HBEU that, on November 7, 2005, a $100,000 transaction 
involving Bank Melli had been processed through HBEU’s account at 
HBUS without transparent documentation. She wrote: 

“We are bringing this to your attention as this situation indicates 
that cover payment involving Iran are still being processed by PLC 
[referring to HBEU]. It was our understanding that Group 
payments involving Iran would be fully disclosed as to the 
originators and beneficiaries.”’”* 

The payment had not been stopped by the HBUS OFAC filter 
because it did not contain any reference to Iran. She explained that four 
days later HBUS received a SWIFT message from HBEU stating that 
after contacting the remitter, the correct SWIFT should have been 
“MelliRTH94.” Since a U.S. bank cannot directly credit an Iranian 
bank, the payment was stopped and rejected by an unrelated bank. 
However, HBUS did not have the funds because Credit Suisse had 
already been paid through another correspondent bank owned by Credit 
Suisse. Ms. Protomastro explained that if the payment did involve Bank 
Melli, it met the U-tum exception. However, she wanted to know why 


9/23/2005 email from HBEU Rod Moxley to HSBC .tohn Allison and others, “OFAC 
sanctions,” USDC OCC 8877213-214. 

1 1/23/2005 email from HBUS Elizabeth Protomastro to HBEU Rod Moxley and others, 
“Cover payment processed to Credit Suisse re ‘Bank Melli’ - USD 1 00,000,” HSBC OCC 
8876886-887. 
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HBEU continued to submit cover payments involving Iran which ran 
afoul of the new HBUS agreement.’’” Mr. Moxley responded that the 
transaction had uncovered a transparency issue with their payment 
system, which HBEU would work to address.”® 

A later review performed by an outside auditor at HBUS’ request 
found that, even after the 2004 HBUS agreement, HSBC afTdiates 
continued to send thousands of undisclosed Iranian U-tum transactions 
through their U.S. dollar accounts at HBUS and elsewhere. The 
auditor’s review found that, from July 2002 to June 2005, HBEU and 
HBME together sent about 1 8,000 Iranian U-turn transactions through 
their U.S. dollar accounts of which about 90% did not disclose any 
connection to Iran.” ’ The review found that, from July 2005 to June 
2006, HBME sent about 3,000 Iranian U-turns through its U.S. dollar 
accounts of which about 95% were undisclosed. The comparable figures 
for HBEU were 1,700 U-turns of which 75% were undisclosed.”^ 

(h) Shifting Iranian Transactions from HBUS to 
JPMorgan Chase and Back Again 

In 2006, HBME sent a number of Iranian U-tum transactions 
through its new U.S. dollar account at JPMorgan Chase. When 
JPMorgan Chase decided to exit the business later in the year, HBME 
turned to HBUS to process them. Again, most of the U-tums HBME 
sent to HBUS were undisclosed. 

GCL 060011 Barring Cover Payments. On April 6, 2006, less 
than a year after GCL 050047 was issued, HSBC Group issued another 
Group Circular Letter, entitled “U.S. Dollar Payments,” essentially 
barring non-transparent cover payments for most OFAC sensitive 
transactions. It followed an enforcement action by the Federal Reserve 
Board on December 19, 2005, charging ABN AMRO Bank with OFAC 
violations for modifying payment instructions on wire transfers used to 
make OFAC sensitive transactions and using special procedures to 
circumvent compliance systems used to ensure the bank was in 


909 

id. Mr. Moxley explained that when a customer directly inputs a transaction through an 
approved electronic channel, such as Hexagon, and the transaction achieves straight through 
processing, the cover MT202s are automatically generated by the HBEU payments system by the 
lime the transactions hit the HBEU WOLF queue. He explained that the WOLF team was 
reviewing these payments to ensure the U-tuni requirements were met, but acknowledged the 
lack of transparency for HBUS and indicated that a paper had already been submitted to the 
Head of Payment Services, Malcolm Eastwood, regarding the matter. Id, 

Deloitte Review of OFAC transactions, “March 29, 2012,” HSBC OCC 8966113-150, at 143. 

Id. at 143. The figures for 2005 alone, were that HBEU and HBME together sent about 
6,300 Iranian payments through U.S. dollar accounts in the United States, of which more than 
90% were undisclosed. Id. 
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compliance with U.S. laws.**'^ About two weeks after the enforcement 
action, an email exchange among HBEU, HBME, HBUS, and HSBC 
Group Compliance officials revealed; 

“Group compliance is having a closer look at the [2005] GCL, with 
more specific reference to the recently published details of the 
ABN AMRO Enforcement Action. They are consider[ing] 
whether it is appropriate, for us to move to use of serial payment 
methodology. Group compliance needs to give opinion to Group 
CEO by next friday 

That same day, an HBUS Global Payments and Cash Management 
employee sent an email suggesting that commercial U.S. dollar 
payments be executed as “serial payments in which all payment party 
details are advised through HSBC Bank USA, your USD 
correspondent.” The HBUS employee also wrote: “This will allow our 
automated transaction monitoring system to appropriately analyze all 
group transactions for suspicious activity that would otherwise be hidden 
with the cover payment method. This system goes beyond simple 
OFAC checking to detect repetitive transaction trends indicative of 
money laundering or terrorist financing. This will assure regulators we 
are doing everything possible to comply with their requirements. 


See 12/19/2005 Federal Reserve Board, Financial Crimes Enforcement Network, Office of 
Foreign Assets Control, New York State Banking Department, and Illinois Department of 
Financial and Professional Regulation press release and Order of assessment of a civil money 
penalty, 

http://www.federalreserve.gOv/boarddocs/prcss/enforcement/2005/20051219/l21905attachmeni2 
.pdf. Five years later, in May 2010, the Justice Department imposed a $500 million file on ABN 
Amro for removing information from wire transfers involving prohibited countries. See 
5/10/2010 U.S. Department of Justice press release, hHp://www'.justice.gov/opa/pr/2010/May/10- 
crm-548.html (“According to court documents, from approximately 1995 and continuing 
through December 2005, certain offices, branches, affiliates and subsidiaries of ABN AMRO 
removed or altered names and references to sanctioned countries from payment messages. ABN 
AMRO implemented procedures and a special manual queue to flag payments involving 
sanctioned countries so that ABN AMRO could amend any problematic text and it added 
instructions to payment manuals on how to process transactions with these countries in order to 
circumvent the laws of the United Slates. Despite the institution of improved controls by ABN 
and its subsidiaries and affiliates after 2005, a limited number of additional transactions 
involving sanctioned countries occurred from 2006 through 2007.”). 

1/6/2006 email from HBEU Michele Cros to HBUS Bob Shetty and other HSBC, HBUS, 
HBEU, and HBME colleagues, “OFAC - Compliance with Sanctions GCL,” HSBC OCC 
7688873. 

1/6/2006 email from HBUS Richard Boyle to HBEU Michele Cros and HBUS Bob Shetty, 
“OFAC ~ Compliance with Sanctions GCL,” HSBC OCC 7688871-873. The email explained 
that ABN AMRO used their “USD nostro [account] with ABN AMRO New York to process 
USD payments originated through ‘special procedures’,” and that cover payments were used “as 
a method of masking Iranian and Libyan financial institutions as the originators of USD wire 
transfers.” It also discussed the recent regulatory actions as establishing “a precedent that the U 
S entity of a global group will be held responsible for the transactions in USD that may take 
place any where in the Group,” and mentioned other banks where regulatory action had been 
taken, including one that led to a cease and desist order prohibiting cover payments. 
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The new GCL 060011 required all HSBC Group affiliates to use 
fully transparent “serial” payments when sending U.S. dollar 
transactions through HBUS or any other U.S. correspondent, with full 
disclosure of all originators and beneficiaries.^'^ Essentially, it required 
all HSBC affiliates to use the same procedure already established at 
HBUS. The GCL made an exception, however, for Iranian U-tums. 
Instead of requiring full disclosure in the transaction documents sent to a 
U.S. bank, the GCL allowed U-turns to “continue to be made as cover 
payments.” HSBC affiliates were required, however, to obtain the 
underlying payment details to ensure the transaction was permissible 
under OFAC regulations.’” In addition, the GCL required all U-turn 
transactions to continue to be directed through HBME, which had 
established a dedicated team in Dubai for processing Iranian 
transactions. Because the GCL created an exception for Iranian U-tums, 
it did not stop the use of undisclosed transactions being sent by HBME 
and HBEU to HBUS.”* 

The policy’s effective date was April 30, 2006, and directed HBUS 
to require all third-party banks for which it provided U.S. dollar 
correspondent banking services to utilize the same fully transparent 
payment procedures by December 3 1 , 2006.”’ The GCL also stated that 
dispensations from the deadlines could be obtained only from HSBC 
Group Compliance, with the concurrence of HBUS Compliance. 

Soon after the GCL was announced, several HSBC affiliates 
requested and received dispensation from the April 2006 deadline, the 
most notable of which ended up giving HBEU more than a year to come 
into compliance with the new GCL.’“ HBEU obtained an initial 


See “GCL 06001 1 - US Dollar Payments (06/Apr/2006),” HSBC OCC 3407587. 

The GCL stated that “serial payments cannot qualify as U-lum payments,” but OFAC 
confirmed To the Subcommittee that U-tum payments could, in fact, be processed as serial 
payments. Subcommittee briefing by OFAC (5/8/2012). 

From April through June 2006, about 90% of the Iranian payments sent by HBME to U.S. 
dollar accounts at HBUS and elsewhere did not disclose their connection to Iran. In July 2006, 
an internal HSBC policy was issued that required HBME to send Iranian payments received from 
Group affiliates to HBUS on a serial basis. After July 2006, nearly 100% of the Iranian 
payments sent by HBME to the U.S. disclosed their connection to Iran. This internal policy did 
not apply to HBEU until late in 2007. From April 2006 through December 2007, about 50% of 
the 700 Iranian payments sent by HBEU to U.S. dollar accounts at HBUS and elsewhere did not 
disclose their connection to Iran. Deloitte Review of OFAC transactions, “March 29, 2012,” 
HSBC OCC 89661 13-150, at 143. 

™ 4/6/2006 GCL 06001 1, “US Dollar Payments,” HSBC OCC 3407587. 

See 4/25/2006 - 5/5/2006 email exchanges among HSBC David Bagley, Group offices, and 
HBEU Rod Moxley, “Serial Paymenis - USD - GCL,” HSBC OCC 8877231-239. The emails 
indicate HSBC Asia Pacific requested dispensation for 19 specific countries until August 31, 
2006, to allow time to change its payment systems. HBEU requested a dispensation until the end 
of October 2006 for MPS, citing a reconfiguration of the new GPP system that was expected by 
December 3 1 , 2006. Michael Grainger in GTB - PCM, in conjunction with Operations and IT, 
requested a dispensation for HBEU sites through HUB until the end of 2006 to allow system 
changes to be implemented and piloted. David Bagley forwarded this email correspondence to 
John Allison with a request for consideration. He also noted that the serial methodology would 
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dispensation until October 31, 2006. On November 21, 2006, HBEU 
MPD head Malcolm Eastwood requested a second extension until after 
installation of a new GPS system scheduled for July 1, 2007. In July, 
due to “the huge volume of HBEU traffic and the potential resolution of 
the problem by an impending global system change,” HBEU received a 
third extension until November 2007.'*^’ Since HBEU was one of the 
top processors of payments for HSBC affiliates, its year and a half 
dispensation delayed full implementation of the new GCL until 
November 2007.”^ 

The month after the new GCL was issued, HBUS Compliance 
official Anne Liddy sent an email to HSBC Group AML head Susan 
Wright indicating she had heard that David Bagley had “issued a 
dispensation” in relation to the new GCL. Ms. Liddy said that while she 
recalled discussions about how HSBC Group was “having a difficult 
time getting our Group offices to switch (mainly due to systems issues),” 
and the need to provide more time for clients to convert, she did not 
recall any dispensations being issued. She asked Ms. Wright for more 
information. Ms. Wright responded: “There have been a limited 
number of dispensations granted re HSBC’s own customers - John is the 
keeper of the dispensations and so will provide you with more detail. 
Based on Ms. Liddy’s email, it appears that Group Compliance may 
have granted dispensations, which then allowed cover payments to 
continue, without obtaining HBUS Compliance’s agreement, as the GCL 
required. 

JPMC Pulls Out. In May 2006, about six months after HBME 
opened an account with JPMorgan Chase to process Iranian U-tums, 
JPMorgan Chase decided to stop processing them. On May 25, 2006, a 
JPMC representative informed HBME official Gary Boon that they 
would continue to process HBME’s dollar payment transactions, with 
the exception of Iranian transactions that reference details in the 
payment narrative.’^'' On May 26, 2006, Mr. Bagley wrote to HSBC 
Group CEO Stephen Green that “JMPC have indicated that they are not 
willing to process these payments, I assume for reputational rather than 
regulatory reasons (given that they are within the U-tum exemption).” 


put HBEU at a competitive disadvantage with regard to fees charged and the volume of customer 
complaints. Id. 

7/4/2007 email from HBEU Rod Moxley to HBEU Tony Wcrby and Andy Newman, 
“[redacted] - HSBC arrangements for payment of the consideration,” HSBC OCC 8876901 . 

A Deloitte review later determined that HBEU continued to send U-tums without any 
reference to Iran through the end of 2007, reflective of the dispensation granted to HBEU until 
November 2007. Deloitte Review of OF AC transactions, “March 29, 2012,” HSBC OCC 
8966113, at 8966143. See also 1 1/21/2006 memorandum from HBEU Malcolm Eastwood to 
HSBC David Bagley and others, “GCL 06001 1 Dispensation,” HSBC OCC 8876896-899. 

See 7/16/2007 - 7/25/2007 email exchanges among HBUS Anne Liddy, HSBC Susan Wright, 
and HSBC John Allison, “Conversion of Clients to Serial Payment Method,” HSBC OCC 
8875256. 

5/25/2006 email from JPMC AH Moosa to HBME Gary Boon and others, “US Dollar 
Transactional Activities via DDA at JPM,” HSBC OCC 3243782-787, at 786. 
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He continued that HBME would have to “pass these payments through 
HBUS.” He noted that they had previously received concurrence from 
HBUS to process the transactions, confirmed by HBUS CEO Martin 
Glynn.^^^ That same day Mr. Bagley alerted HBUS AML head Teresa 
Pesce that “HBME have no choice but to now pass” U-tum exempt 
payments through HBUS.^^^ 

Iranian Transactions Shift to HBUS. HBUS was already 
processing Iranian U-tum transactions for HBEU, but HBME’s decision 
to route its Iranian U-tums through HBUS as well represented an 
increase in the volume of transactions that HBUS would have to identify 
and review. 

On May 26, 2006, the same day he learned HBME would begin 
routing U-tums through its U.S. dollar account at HBUS, HBUS AML 
officer Alan Ketley emailed HBME’s Alan Kerr to clarify how HBUS 
would process the new volume of payments.’^^ On May 30, 2006, Mr. 
Ketley wrote to HBME Gary Boon, copying HBUS AML head Teresa 
Pesce: “I’m unclear why you would be seeking to have HBUS handle 
this activity at no notice and am uncomfortable making arrangements for 
such sensitive activity in this fashion.” He requested examples of 
payment orders for routing through HBUS and asked for confirmation 
that HBME would not begin routing U-tums through HBUS until they 
had the “appropriate controls in place.” He was also concerned from a 
resource perspective, and stated that HBME intended to pass as many U- 
tums in a day as HBUS would normally handle in a busy month.’^* That 
same day, in response to his email to Mr. Boon, Ms. Pesce wrote: “Alan 
- we have no choice. JPMC won’t take them.”^^^ 

HBUS’ effort to ensure it had adequate staffing to review OF AC- 
related alerts from the HBME U-tums was made more difficult by 
varying information from HBME on the number of transactions to 
expect. On June 22, 2006, HBUS Compliance officials Anne Liddy and 
Alan Ketley reacted to an email exchange involving HBME’s Gary 
Boon discussing U-tum payment volumes being processed through 
HBUS as between 10 and 25 per day. Ms. Liddy wrote: 


5/26/2006 email from HSBC David Bagley to HSBC Stephen Green, “US Dollar 
Transactional Activities via DDA at JPM,” HSBC OCC 3243782-787, at 784. 

5/26/2006 email from HSBC David Bagley to HBUS Teresa Pesce and others, HSBC OCC 
3243782-783. 

5/26/2006 email from HBUS Alan Ketley to HBME Alan Kerr and HBME Gary Boon, “U- 
Tums,” OCC-PSI-00179654 

5/30/2006 email from HBUS Alan Ketley to HBME Gary Boon and HBME Alan Kerr, “U- 
Tums,” OCC-PSl-00179654. 

5/30/2006 email from HBUS Teresa Pesce to HBUS Alan Ketley, “U-Turns,” HSBC OCC 
3243965. 


S 
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“[B]efore it was about 40, Yesterday 10. Now 25ish. BTW 1 am 

going to set up a m[ee]t[in]g with Terry and Denise (as our 

financier) to discuss resourcing for OF AC. It is out of hand.””” 

In July 2006, HBME made a policy decision to go beyond the 
requirements of the Group-wide 2006 GCL and require all of its Iranian 
transactions to provide fully transparent payment information to its U.S. 
correspondents.’^' 

In addition to the HBME transactions moving to HBUS, one other 
notable transaction involving Iran in 2006, pertained to 32,000 ounces of 
gold bullion valued at $20 million. In May 2006, the HBUS London 
branch cleared the sale of the gold bullion between two foreign banks 
for the ultimate benefit of Bank Markazi, Iran’s Central Bank. HSBC 
indicated that it had been aware that Bank Markazi was the beneficiary, 
but had viewed the transaction as a permissible U-tum.’^^ OF AC later 
told HBUS that it considered the transaction to be a “non-egregious” 
violation of law, and provided HBUS with an opportunity to explain 
why it should not be penalized for it; HBUS is still awaiting a final 
determination as to whether it will be penalized.’” 

(i) Getting Out 

In October 2006, HSBC Group reversed course and decided to stop 
handling Iranian U-tums. In 2007, it went further and exited all business 
with Iran, subject to winding down its existing obligations. 

Increasing Risks. In October 2006, Mr. Bagley provided a 
warning to his superiors that HSBC might want to reconsider processing 
U-tums. In an email on October 9, 2006, Mr. Bagley informed Stephen 
Green, who had become HSBC Group Chairman, Michael Geoghegan, 
who had become HSBC Group CEO, and David Hodgkinson, who used 
to head HBME but had become HSBC Group COO, that the risks 
associated with U-turas had increased due to “actions taken by the US 
government in withdrawing the U-Tum exemption from Bank 
Saderat.”’"'' The prior month, in September 2006, HBUS had stopped an 
undisclosed transaction that involved Bank Saderat in Iran, which was 
added to the OF AC SDN list that same month.’^’ 


6/22/2006 email from HBUS Anne Liddy to HBUS Alan Kelley, “You Turn Payments,’' 
HSBC OCC 3250730-732. 

Subcommittee briefing by Cahill Gordon & Reindel LLP (6/20/2012) 

1/8/2010 Compliance Certificate from HSBC Christopher O’Donnell to HSBC David Bagley, 
OCC-PSl-00783419, 

See draft HSBC response to pre-penalty notice, OCC-PSI-00299323. 

10/9/2006 email from HSBC David Bagley to HSBC Stephen Green, HSBC Michael 
Geoghegan, and HBME David Hodgkinson, “Iran - U-Tum Payments,’’ HSBC OCC 8874731- 
732. 

See 9/1 1/2006 email from HBUS Anne Liddy to HBUS Teresa Pesce, “HBME Wire payment 
USD 586.00 (Iran-Bank Saderat) - Reject & Report to OFAC,” HSBC OCC 4844209 and 
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Mr. Bagley wrote: 

“During my recent visit to the US to attend a Wolfsberg meeting I 
was discretely advised of the following by a reliable source: 

[U.S. Treasury] Under Secretary [Stuart] Levey ... and the more 
hawkish elements within the Bush administration were in favour of 
withdrawing the U-Tum exemption from all Iranian banks. This 
on the basis that, whilst having direct evidence against Bank 
Saderat particularly in relation to the alleged funding of Hezbollah, 
they suspected all major Iranian State owned banks of involvement 
in terrorist funding and WMD [weapons of mass destruction] 
procurement. ... 

Certain US Government bodies have however made it known to a 
number of US banks that, as WMD related transactions are 
impossible to detect they would run an unacceptable reputational 
and regulatory risk were they to continue to process U-Turn 
transactions. The essence of the statement appears to be that as 
WMD related transactions would be heavily disguised (where even 
as a trade transaction documents would in effect be falsified) there 
is no safe way for a US bank to be involved in even a U-tum 
exempt transaction however stringent the scrutiny or monitoring. 
The clear implication made was that being found to be involved in 
a WMD related transaction, even if wholly innocently, would 
result in significant and severe action being taken against such a 
bank. 

There were very strong indications that a number of US banks 
were therefore considering withdrawing from all U-tum related 
activity. If this happens those continuing in this market are likely 
to have an increased concentration. 

Although I am satisfied that we have put appropriate controls in 
place to manage the U-Tum transactions, 1 am concerned that there 
are now increased risks in continuing to be involved in U-Tum 
USD payments which would justify our reconsidering our 
approach. I do recognize that the significance that tightening our 
policy to withdraw from U-Turn permitted transactions would have 
in terms of our Middle Eastern and Iranian business. 


12/14/2006 email from EUzabelh Protomaslro to John Allison and others, “OF AC - Wire 
payments blocked from HSBC offshore entities - USD 32,000 (re SDGT) and USD 
2,538,939.33 (re Sudan),” HSBC OCC 3407608-^09. 

1 0/9/2006 email from HSBC David Bagley to HSBC Stephen Green, HSBC Michael 
Geoghegan, and HBME David Hodgkinson,“Iran-U-Tum Payments,” HSBC OCC 8874731- 
732, at 732. 
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GCL 060041 Ending U-turns. Shortly after Mr. Bagley’s email, 
HSBC decided to stop processing U-tums entirely. On October 25, 
2006, HSBC Group Compliance issued Group Circular Letter 060041 
which directed all Group offices to immediately stop processing U-tum 
payments.”’ An exception was made for permissible U-tum payments 
in connection with legally binding contractual commitments. HSBC 
decided to stop utilizing the U-tum exception two years before OF AC 
actually revoked the exception in November 2008. 

Despite this decision, HSBC maintained a number of existing 
Iranian relationships.”* On March 13, 2007, as a result of a “letter 
recently filed with the SEC “relating to the extent of our exposure to 
business in the so-called named countries (Sudan, Syria, and Iran),””^ 
HSBC Group Compliance head David Bagley updated HSBC Group 
CEO Michael Geoghegan on HSBC’s relationships with Iranian banks. 
He wrote: 

“The existing levels of business, much of which is historic and 
subject to ongoing commitments, has been reviewed by CMP 
[Compliance] as against the requirements of Group policy, 
particularly where transactions are denominated in USD. Some of 
this activity related to pre-existing committed obligations which 
are binding on an ongoing basis. Group policy recognizes that we 
will have to allow such arrangements to run off. Relevant business 
colleagues are however aware of the Group’s stance in terms of 
having no appetite for new or extended business activity involving 
Iranian counterparties. Where transactions appear to potentially 
conflict with Group policy those transactions are referred to GHQ 
CMP for determination and sign-off. 

The subject of Iran arose again a few months later, in June 2007, 
when Mr. Bagley informed HSBC Group CEO Michael Geoghegan that 
he had a private meeting with U.S. Treasury Under Secretary for 
Counter Terrorist Financing and Sanctions, Stuart Levey, during a recent 
Wolfsberg Group conference. Mr. Bagley indicated that Mr. Levey had 
questioned him about a HSBC client who, according to Mr. Levey, “had 
clearly been identified as having acted as a conduit for Iranian funding 
of’ an entity whose name was redacted from the document by HSBC.”' 
Mr. Bagley wrote; “Levey essentially threatened that if HSBC did not 

1 0/25/2006 GCL 06004 1 , “US OFAC Sanctions against Iran - U-Tum Exemption,” HSBC 
OCC 3407606. 

See 2/6/2006 Project and Export Finance presentation, “Iranian portfolio,” HSBC OCC 
8876050-057. This presentation indicated that Project and Export Finance had not taken on any 
new Iranian business since 2005. 

3/13/2007 email from HSBC David Bagley to HSBC Michael Geoghegan and others, “Iran,” 
HSBC OCC 8878037-038. 

Id. 

See 6/8/2007 email exchanges among HSBC David Bagley, HSBC Michael Geoghegan and 
others, “Iran ” HSBC OCC 8878214-216, at 215. 
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withdraw from relationships with [redacted] we may well make 
ourselves a target for action in the US.” Mr. Geoghegan responded: 
“This is not clear to me because some time ago I said to close this 
relationship other than for previously contractually committed export 
finance commitments.”®'*^ Mr. Bagley replied that the bank had only 
“limited relationships with [redacted] and in fact overall with Iranian 
banks.” 

Mr. Bagley also wrote that he had discussed the matter with David 
Hodgkinson, and they agreed that HSBC “should immediately withdraw 
from [redacted] and also withdraw from ail Iranian bank relationships in 
a coordinated manner.” He noted that the bank would have to honor 
“legally binding commitments” such as Project and Export Finance 
facilities.®'*^ These communications indicate that FISBC officials had 
previously known about problems with one particular Iranian client but 
that it did not end the relationship until after a warning from the U.S. 
Government. 

GCL 070049 on Exiting Iran. On September 24, 2007, HSBC 
Group Compliance issued another Group Circular Letter, this one 
announcing the bank’s decision to exit Iran. GCL 070049 directed all 
account relationships with Iranian banks to be “closed as soon as 
possible” with sufficient notice as required by local law and to “allow an 
orderly run down of activity” and the “run-off of any outstanding 
exposures.” The GCL allowed ongoing payments involving 
existing facilities and transactions “where there are legally binding 
commitments,” such as Project and Export Finance facilities, to continue 
to be made as serial payments.®'*'* The deadline for closure of all Iranian 
accounts was November 30, 2007. 

2008 and 2009 Iranian Transactions. After the GCLs terminating 
most business with Iran, internal bank documents show that hundreds of 
Iranian transactions per month continued to surface at HBUS during 
2008 and 2009. These transactions were not, however, the type of 
undisclosed U-tum transactions that HSBC affiliates had been routinely 
sending through HBUS accounts prior to HSBC’s decision to exit Iran, 
but represented other types of transactions. 

In 2008 and 2009, for example, HBUS’ London Banknotes office 
conducted a series of apparently prohibited transactions benefitting the 
Iranian Embassy in London. From July 22, 2008 to February 12, 2009, 
in more than 30 transactions, HBUS sold over €455,000 to HBEU 
which, in turn, sold them to the Embassy of Iran in the United 


942 

943 


Id. at 215. 
Id. at 214. 


9/24/2007 GCL 070049, “Sanctions Against Iran,” OCC-PSI-00141 530-53 1 and HSBC OCC 
8876013-015. 
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Kingdom.^'*^ According to HBUS, “the funds were used to meet salary 
obligations” of the Iranian Embassy In addition, from December 5, 

2008 to February 5, 2009, HBEU purehased over $2,500 from the 
Embassy of Iran and resold the U.S. dollars to HBUS.^'*’ In 2009, after 
HBUS discovered that the London Banknotes office was engaging in 
currency transactions with the Iranian Embassy, it reported the 
transactions to OFAC and ended the activity.^ * 

Other transactions involving Iran processed through HBUS’ 
correspondent accounts from 2008 to 2009, included a March 2009 wire 
transfer for $300,000, which was mistakenly processed because a HBUS 
compliance officer did not realize a transaction reference to “Persia” 
implied a connection to Iran; and two wire transfers totaling over 
$55,000 which involved a vessel owned by “NITC” which, until it was 
updated, HBUS’ OFAC filter did not recognize as the National Iranian 
Tanker Company. 

(j) Looking Back 

According to an ongoing outside audit requested by HSBC, from 
2001 to 2007, HBEU and HBME sent through their U.S. dollar accounts 
at HBUS and elsewhere nearly 25,000 OFAC sensitive transactions 
involving Iran totaling $19.4 billion.’^® While some of those 
transactions were fully disclosed, most were not. According to the 
review conducted by Deloitte, from April 2002 to December 2007, more 
than 85% of those payments were undisclosed.’^' 

Despite HBUS pleas for transparency and a 2004 internal 
agreement to use fully transparent procedures, HSBC affiliates HBEU 
and HBME often took action, including by deleting references to Iran or 
using cover payments, to prevent the Iranian transactions sent through 
their U.S. dollar correspondent accounts at HBUS from being caught in 

3/20/2009 letter from HBUS Elizabeth Prolomastro to OFAC, HSBC OCC 0630892. See 
also 1/25/2012 OCC Supervisory Letter HSBC-2012-03, “OFAC Compliance Program,” OCC- 
PSI-01 768561, at Attachment (describing the transactions as involving over $606,000 in U.S. 
dollars). [Sealed Exhibit.] 

Id. 

Id. 

See 3/24/2009 “Compliance Report for 1Q09-HUSI Businesses,” sent by HBUS Lesley 
Midzain, to HNAH Janet Burak, HSBC David Bagley, and HBUS Paul Lawrence, HSBC OCC 
3406981-3406996 at 982; 1/25/2012 OCC Supervisory Letter HSBC-2012-03, “OFAC 
Compliance Program,” OCC-PSI-01768561-566, at Attachment. [Sealed Exhibit.]. 

See 1/25/2012 OCC Supervisory Letter HSBC-2012-03, “OFAC Compliance Program,” 
OCC-PSI-01768561-566, at Attachment. [Sealed Exhibit.] 

See Deloitte Review of OFAC transactions, “Results of the Transactions Review - UK 
Gateway, March 29, 2012,” HSBC-PSi-PROD-0i979l9, at 930. 

Subcommittee briefing by Cahill Gordon & Reindel LLP (6/20/2012); Deloitte presentation, 
“March 29, 2012,” at HSBC OCC 89661 13. These payments were sent to the U.S. bank as 
cover payments, serial payments, or payments that were cancelled and then re-submitted by 
cither an HSBC affiliate or the client without disclosing the connection to Iran in the payment 
message. Id. at 89661 18 and 8966143. 
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the OFAC filter. Despite the fact that they viewed most of the 
transactions as permissible under U.S. law, concealing their Iranian 
origins helped avoid delays caused when HBUS’ OFAC filter stopped 
the transactions for individualized review. HBME, in particular, 
requested that HBUS allow the use of cover payments to conceal Iranian 
transactions and circumvent the OFAC filter. When HBUS insisted on 
fully transparent transactions, the HSBC affiliates sent undisclosed 
transactions through their HBUS accounts anyway. HSBC Group 
leadership, including the heads of Compliance and AML, were aware in 
varying degrees of what the affiliates were doing, but for years, took no 
steps to insure HBUS was fully informed about the risks it was incurring 
or to stop the conduct that even some within the bank viewed as 
deceptive. The HSBC Group Compliance head took no decisive action 
even after noting that the practices “may constitute a breach” of U.S. 
sanctions. At HBUS, senior executives in the Compliance and payments 
areas knew about the actions being taken by HSBC affiliates to send 
concealed Iranian transactions through their U.S. dollar correspondent 
accounts, but were unable or unwilling to obtain information on the full 
scope of the problem, bring the issue to a head, and demand its 
resolution at the highest levels of the bank to ensure all U-tums were 
reviewed for compliance with the law. 

(2) Transactions Involving Other Countries 

Iranian transactions were not the only potentially prohibited 
transactions sent through HBUS. Transactions involving Burma, Cuba, 
North Korea, and Sudan, as well as persons named on the SDN list, were 
also sent through HBUS accounts, although to a much lesser extent than 
those related to Iran. HSBC affiliates were one major source of the 
transactions, due to poor compliance with HSBC Group policy barring 
U.S. dollar transactions with prohibited countries or persons, and 
requiring transparent transactions, but the majority of these transactions 
appear to have been sent through HBUS by unrelated financial 
institutions. The transactions sent by HSBC affiliates also do not appear 
to be the product of the same kind of systematic effort to avoid the 
OFAC filter as was the case with the Iranian U-turns. Some of the 
transactions sent through HBUS had references to a prohibited person or 
country deleted or used cover payments, and passed undetected through 
the OFAC filter. Others openly referenced a prohibited country or 
person, but escaped detection by HBUS’ OFAC filter or HSBC’s WOLF 
filter due to poor programming. Still others were caught by a filter, but 
then released by HBUS personnel, apparently through human error. An 
ongoing review by an outside auditor, examining HBUS transactions 
over a seven-year period from 2001 to 2007, has so far identified about 
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2,500 potentially prohibited transactions involving countries other than 
Iran, involving assets totaling about $322 million.’^^ 

(a) 2005 and 2006 GCLs 

The documents examined by the Subcommittee show that HBUS’ 
OFAC fdter blocked a transaction involving a prohibited country other 
than Iran as early as 2002,®^^ Internal bank documents indicate, 
however, that transactions involving prohibited persons or countries 
other than Iran did not receive the same level of attention as the Iranian 
transactions, until issuance of the July 28, 2005 Group Circular Letter 
050047 which barred HSBC affdiates from executing U.S, dollar 
transactions involving any person or country prohibited by OFAC.^^"* 

Shortly after the GCL was issued, the HSBC Group head of Global 
Institutional Banking, Mark Smith, issued a managerial letter, in August 
2005, providing guidance on implementing the new policy His letter 
summarized the Group’s relationships with Burma, Cuba, Iran, North 
Korea, Sudan, and Zimbabwe. He explained that most of HSBC 
Group’s business with Sudan and Cuba was conducted in U.S. dollars 
and “discussions already initiated with the affected banks will dictate the 
extent of our ongoing relationship.” The guidance also clarified that the 
revised policy applied only to U.S. dollar transactions.’^^ 

In addition, the managerial letter identified correspondent 
relationships affected by the new policy.’*’ It provided the number of 
open correspondent accounts with financial institutions in Cuba, Burma, 
Iran, North Korea, and Sudan. It also explained: 

“The revised policy does not represent an automatic exit strategy 
with regards to affected clients. Non-USD business (and for Iran, 
U-turn exempt transactions) may continue to be undertaken. 
However, for a number of reasons eg. operational simplicity, 
where the remaining non-USD business is uneconomic or where 


Deioitle presentation, “Results of the Transactions Review - UK Gateway, March 29, 2012," 
HSBC-PSI-PROD-0197919-989, at 930. Since the Deioitle review has yet to examine an 
additional set of U.S. dollar transactions and does not include any transactions during the period 
2008 to 2010, its figures represent a conservative analysis of the potentially prohibited 
transactions transmitted through UBUS. 

On May 21, 2002, a $3 million payment from HBEU was blocked by HDUS’ OFAC filter 
due to a reference in the payment details to Cuba. See 4/24/2006 email from HDUS Charles 
Delbusto to HDUS Michael Gallagher, “ING Writeup,” HSBC OCC 1933599-601. See also 
1 1/14/2002 memorandum from HBEU Malcolm Eastwood to HBUS Denise Reilly and HBEU 
Geoff Armstrong, “Compliance - OFAC Issues in General and Specific to Iran,” HSBC OCC 
7688824. 

7/28/2005 GCL 050047, “Compliance with Sanctions,” HSBC OCC 3407560-56 1 . 

8/25/2005 managerial letter from HSBC Mark Smith to HBUS Aimec Sentmat, HBME Alan 
Kerr, and others, “GCL050047 - Compliance with OFAC sanctions,” HSBC OCC 3407565-569. 

Id at 566. 
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the client concludes they will have to conduct their business with 
an alternative provider, the ultimate outcome may be the closure of 
certain relationships. Verbal discussions with affected clients 
would be preferable. Any written correspondent seeking to clarify 
the Group’s revised policy should be cleared with local 
Compliance.”^^* 

The letter noted that “any dispensation from the terms of the GCL 
require[d] Group Compliance concurrence.”^^’ 

In September 2005, senior HBEU payments official Rod Moxley 
completed an analysis of U.K. transactions over a 10-day period that 
were stepped by HSBC’s WOLF filter and involved Burma, Cuba, or 
Sudan.’ He forwarded the results to senior HSBC Group Compliance 
officials John Root and John Allison, noting that there were “a 
considerable number of USD denominated transactions” for Sudan, and 
“also to a lesser extend’ Cuba and Burma. He also noted that prior to the 
effective date of the new GCL, these payments would have been stopped 
by the WOLF filter but then allowed to proceed, “providing they did not 
infringe on UN/EU sanctions or terrorist parameters,” since HBEU was 
“not affected directly by OF AC sanctions,” but the new GCL would 
require these payments to be blocked due to OFAC prohibitions. 

Mr. Moxley also wrote; 

“Since the issuance of the GCL, it has been made clear that US 
interests are of paramount importance and we should do nothing, 
when processing payment transactions, which would leave HBUS 
in a vulnerable position. The issues surrounding Iran have 
overshadowed other OFAC payments recently, however, I can 
advise that we have not so far physically returned any USD 
payments involving Sudan, Cuba or Burma. I feel we now need to 
look far more closely at these payments to ensure compliance with 
the GCL.”’^’' 

Mr. Moxley asked about two alternative responses to transactions 
stopped by the WOLF filter and barred by the new GCL. One was to 
continue processing the transactions but ensure that the payment was 
routed in such a way “that they are not frozen in the US.” He explained: 
“This will involve intelligent usage of the routing system but may 
perpetuate similar scenarios to those encountered with Iran (customer 
instructions saying Do not mention Sudan or routing which does not 


Id. at 568. 

*Ud. 

See 9/23/2005 email from HBEU Rod Moxley to HSBC John Allison and HSBC John Root, 
“OFAC sanctions,” HSBC OCC 8877213-214. 
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make it apparent that these are Sudanese payments).” This alternative 
seems to suggest that HSBC would engage in Iran-style transactions in 
which transaction details are stripped out to avoid triggering the OF AC 
or WOLF filters. His second alternative was to “strictly” apply the GCL 
“and return the payments unprocessed.” He wrote that his “instincf ’ was 
to “return all such USD payments ... so that our US colleagues’ position 
is not compromised,” but wanted confirmation from HSBC Group 
Compliance before taking that action.’^^ The documents reviewed by 
the Subcommittee do not indicate what response he received. When 
asked about his email, Mr. Moxley told the Subcommittee that he could 
not recall how his inquiry was resolved.^*^ 

About a year later, on April 6, 2006, HSBC Group issued another 
Group Circular Letter, GCL 060011, which required all HSBC affiliates, 
when sending U.S. dollar transactions through a correspondent account 
at HBUS or another U.S. financial institution to use so-called “serial 
payments” specifying the transaction’s chain of originators and 
beneficiaries.^*'' This policy change was intended to stop HSBC 
affiliates from using cover payments, which provide less information for 
banks when processing payments and which can mask potentially 
prohibited transactions sent through HBUS or other U.S. banks. Its 
effective date for HSBC affiliates was April 30, 2006; HBUS was 
required to impose the policy on all third-party banks for which it 
provided U.S. dollar correspondent banking services by December 31, 

2006. ^** At the same time, HSBC Group Compliance granted a year- 
long extension to HBEU, giving it until November 2007, before it was 
required to use serial payment instructions.’** 

Internal bank documents indicate that OFAC sensitive transactions 
involving countries other than Iran took place both before and after the 
2005 and 2006 GCLs. 

(b) Transactions Involving Cuba 

Internal bank documents indicate that, from at least 2002 through 

2007, HBUS processed potentially prohibited U.S. dollar transactions 
involving Cuba. HSBC affiliates in Latin America, in particular, had 
many Cuban clients and sought to execute transactions on their behalf in 


’“id. at 2 14. 

Subcommittee Interview of Rod Moxley (6/7/2012). 

4/6/2006 GCL 06001 1, “US Dollar Payments," HSBC OCC 3407587. 

Id. 

See 4/25/2006 - 5/5/2006 email exchanges among HSBC David Bagiey, Group offices, and 
HBEU Rod Moxley, “Serial Payments - USD - GCL,” HSBC OCC 8877231-239. 
Subcommittee briefing by OFAC (5/8/2012). 
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U.S. dollars, despite the longstanding, comprehensive U.S. sanctions 
program and the OFAC filter blocking such transactions.®*^ 

In August 2005, a month after HSBC Group issued its new GCL 
policy barring HSBC affiliates from engaging in U.S. dollar transactions 
in violation of OFAC prohibitions, HBUS circulated an email 
identifying correspondent relationships that would be affected.®** The 
email stated: “An overriding observation is that the revised policy will 
most significantly impact the Cuban and Sudan correspondent bank 
relationships.” It also observed: “For Sudan and Cuba, most of our 
business is conducted in USD and the discussions already initiated with 
the affected banks will dictate the extent of our ongoing 
relationships.”®*® 

In September 2005, HSBC Group Compliance head David Bagley 
told HSBC Group CEO Stephen Green that they had closed “a number 
of USD correspondent relationships with Cuban ... banks.”®™ On 
October 3, 2005, Mr. Bagley sent an email to Matthew King, then head 
of HSBC Group Audit, that Mr. Green was “particularly concerned” 
about ensuring the 2005 GCL was “properly and fully implemented 
across the Group.”®®' Mr. Bagley asked Mr. King to use HSBC’s 
internal audits to help gauge compliance with the new GCL. Mr. King 
relayed the request to various HSBC auditors and, in response, learned 
from HSBC Mexico (HBMX) Compliance that the OFAC list had not 
been fully integrated into HBMX’s monitoring system and would not be 
for another six months, until April 2006.®®^ HBMX reported that, 
pending the systems integration, it had set up “manual controls” in 
several divisions to implement the new GCL, but “no automated means 
exists to ensure that these controls are properly being carried out.”®®* 
HBMX explained further that its “greatest exposure” was “the volume of 
business historically carried out by HBMX customers with Cuba in US 
dollars.”®®'' 

Mr. King responded that the HBMX transactions raised two sets of 
concerns, one with respect to the U.S. dollar transactions involving Cuba 
being run through HBMX’s correspondent account at HBUS, and the 


See OFAC “Sanctions Programs and Country Information,” Cuba sanctions (last updated 
5/1 1/2012), http://www.treasury.gov/resource-center/sanctions/Prograras/pages/cuba.aspx. 

See 8/25/2005 email from HBUS Alan Ketley to multiple HSBC colleagues, “GCL050047 - 
Compliance with OFAC Sanctions,” HSBC OCC 3407565-569. 

Id. at 3407568. 

970 9/19/2005 email from HSBC David Bagley to HSBC Stephen Green and HSBC Richard 
Bennett, ‘‘GCL050047 “Compliance With Sanctions,” HSBC OCC 8874360-362. 

10/3/2005 email from HSBC David Bagley to HSBC Matthew King, “GCL 050047 ~ 
Compliance with Sanctions,” HSBC OCC 8874359-360. 

1 0/14/2005 email from HBMX Graham Thomson to HSBC Matthew King, “GCL 050047 - 
Compliance with Sanctions,” HSBC OCC 8874358-359. 

Id. 

^’Md. 


4 
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second with respect to non-U.S. dollar transactions being “transmitted 
through the HBUS TP gateway,” referring to a U.S.-based server that 
handled transfers from Mexico and South America."*^’ Since the United 
States prohibited transactions involving Cuba, both types of transactions 
raised questions about whether they ran afoul of the OF AC list and the 
2005 GCL. Mr. King responded: 

“I note HBMX continues to process USD payments involving 
Cuba. It is very important that is stopped immediately as the 
regulators are getting very tough and the cost to the Group could 
be considerable if a breach occurs, both in terms of the fine and the 
rectification work which is likely to be a pre-requisite to any 
settlement. 

With regard to non-USD payments as described above, GHQ CMP 
[Group Headquarters Compliance] are urging HBUS to screen out 
these transactions to avoid any risk, and HBMX would have to put 
measures in place to p[re]-empt customer dismay.”™ 

HSBC affiliates from outside of Latin America also occasionally 
sent potentially prohibited transactions involving Cuba through their 
HBUS accounts. For example, in December 2006, a payment for 
$15,350 that had been sent by an HSBC affiliate in the Asia-Pacific 
region was blocked by HBUS, because the transaction documents 
referred to “Air Tickets Moscow Havana Moscow 3Pax.”^^’ 

In 2007, an internal HSBC document entitled, “Information 
Requested in Connection With: (North Korea, Cuba, and Myanmar),” 
revealed that, as of May 2007, HSBC affiliates in Mexico and Latin 
America were still providing U.S. dollar accounts to Cuban clients, in 
apparent violation of HSBC Group GCL policy and OFAC 
regulations.’^* The document indicated that HBMX had 23 Cuban 
customers with U.S. dollar accounts containing assets in excess of 
$348,000, and 61 Cuban customers holding both U.S. dollar and 
Mexican peso accounts with assets totaling more than $966,000.”’ In 
addition, the report disclosed that HSBC affiliates in Colombia, Costa 
Rica, El Salvador, Honduras, and Panama were also providing U.S. 
dollar accounts to Cuban nationals or the Cuban Embassy. The 
document also indicated that arrangements had been made to “cancel all 


10/17/2005 email from HSBC Matthew King to HBMX Graham Thomson, HSBC David 
Bagley, and others, “GCL 050047 “Compiiance With Sanctions.” HSBC OCC 8874357-358. 
Id. 

12/17/2006 email from HBAP Donna Chan to HBUS Alan Ketley and others, ‘TT 
NSC770937 Dated 13Dec06 For USD15,350.21,” HSBC OCC 3287261-262. 

5/18/2007 HSBC document, “Information Requested in Connection With: (North Korea, 
Cuba, and Myanmar)," HSBC OCC 8876088-095, at 8876093-095. 

Id. In addition, 1, 284 Cuban clients had nearly 2250 HBMX accounts holding solely 
Mexican pesos, with assets exceeding atotai of $8.9 million. Id, at 8876093. 
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business relationships with” Cuban clients, in relation to U.S. dollar 
accounts or commercial relationships for the entire region.’*® These 
steps were being taken almost two years after the July 2005 GCL had 
prohibited HSBC affiliates from executing U.S, dollar transactions 
involving OF AC sensitive persons. 

(c) Transactions Involving Sudan 

A second set of OF AC sensitive transactions involved Sudan, a 
country which is also subject to a comprehensive sanction program in 
the United States.’*' Internal bank documents indicate that, from at least 
2005 to 2008, HBUS processed a considerable volume of U.S. dollar 
transactions involving Sudan that, once the new GCL took effect, should 
have decreased. The reasons they continued include a wide range of 
factors, from inadequate bank staffing reviewing OF AC transactions, to 
deceptive wire transfer documentation, to ongoing actions by HSBC 
affiliates to send these potentially prohibited transactions through 
HBUS. 

In August 2005, a month after HSBC Group issued the GCL policy 
barring HSBC affiliates from engaging in U.S. dollar transactions in 
violation of OFAC prohibitions, HSBC Group head of Global 
Institutional Banking, Mark Smith, circulated a managerial letter 
identifying correspondent relationships that would be affected. ’*^ The 
letter stated: “An overriding observation is that the revised policy will 
most significantly impact the Cuban and Sudan correspondent bank 
relationships.” It also observed: “For Sudan and Cuba, most of our 
business is conducted in USD and the discussions already initiated with 
the affected banks will dictate the extent of our ongoing 
relationships.”’*^ In September 2005, a senior HBEU payments official 
Rod Moxley completed an analysis of U.K. transactions over a 10-day 
period that were stopped by the WOLF filter and noted “a considerable 
number of USD denominated transactions” for Sudan.’*'' 

A year after the GCL took effect, however, one affiliate attempted 
to clear a Sudan-related transaction through HBUS in violation of 
company policy. On December 6, 2006, HBUS blocked a $2.5 million 
payment originating from an HSBC branch in Johannesburg because the 

5/18/2007 HSBC report, “Information Requested in Connection With: (North Korea, Cuba, 
and Myanmar),” HSBC OCC 8876088-095 at 8876093-095. 

See OFAC “Sanctions Program.s and Country Information,” Sudan sanctions (last updated 
2/1/2012), http://www.treasury.gov/resource-center/sanctions/Programs/pages/sudan.aspx. 

8/25/2005 managerial letter from HSBC Mark Smith to HBUS Aimee Sentmat, HBME Alan 
Kerr, and others, “GCL050047 - Compliance with OFAC sanctions,” HSBC OCC 3407565-569; 
8/25/2005 email from HBUS Alan Kelley to multiple HSBC colleagues, “GCL050047 - 
Compliance with OFAC Sanctions,” HSBC OCC 3407565-569. 

Id. at 568. 

See 9/23/2005 email from HBEU Rod Moxley to HSBC John Allison and HSBC John Root, 
“OFAC sanctions,” HSBC OCC 8877213-214. 
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payment details referenced the “Sudanese Petroleum Corporation.”®** 
Although the payment had also been stopped hy the WOLF filter in 
HSBC Johannesburg, an employee there had approved its release and 
sent the transaction through their correspondent account at HBUS. An 
internal email from HSBC Johannesburg explained that the release of 
the funds was: 

“a genuine error in an attempt to push the day[’]s work through 
before the cut-off time. I believe the loss of three staff in the 
department leaving only two permanent staff remaining is causing 
the[m] to work towards clearing their queues rather than slow 
down to read the warnings such as these. . . . Having said that I 
also feel it is a matter of training where seeing the word ‘Sudan’ 
alone should have been warning enough.”®*^ 

The email also noted that the transaction had been sent by Commercial 
Bank of Ethiopia, which was “aware that this payment may not go 
through as they have attempted to make this payment via their other 
correspondent banks and failed.”®*® 

In July 2007, HBUS discovered that another client, Arab 
Investment Company, had been sending “multiple Sudan-related 
payments” through its U.S. dollar account at HBUS, that other banks 
later blocked for specifying a Sudanese originator or beneficiary, 
“suggesting that HBUS has been processing cover payments for this 
client.”®** An email identified seven wire transfers over a one-year 
period, collectively involving more than $1.1 million, in which the 
documentation provided to HBUS made no reference to Sudan, 
preventing the transfers from being stopped by HBUS’ OFAC filter.®*® 
The email noted that two of the wire transfers later blocked by other 
banks had resulted in letters from OFAC seeking an explanation for 
HBUS’ allowing the transfers to take place, and suggested closing the 
client account to prevent more such incidents.®®® On another occasion, 
HBUS identified five wire transfer payments between January and 
November 2007, totaling more than $94,000, that turned out to be 
intended for a Sudanese company, but had been processed as straight 


^ See 12/14/2006 email from HBUS Elizabeth Protomastro to HBUS John Allison and others, 
“OFAC - Wire payments blocked from HSBC offshore entities - USD 32,000 (re SDGT) and 
USD 2,538,939.33 (re Sudan),” HSBC OCC 3407608-609. 

12/15/2006 email from HSBC Gimhani Talwatte to HSBC Krishna Patel, “PCM Operational 
error. Funds frozen in USA - payment on behalf of Commercial Bank of Ethiopia,” OCC-PSl- 
00610597, at 8. 

*id. 

7/8/2007 email from HBEU Joe Brovvniee to HBEU Giovanni Fenocchi, forwarded by HBEU 
Peter May to HBUS Anne Liddy and HBUS Alan Ketley, “Arab Investment Company 
Reportable Event #3948 Notification Entity,” OCC-PSI-00620281, at 2. 

990 id_ 
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through payments at HBUS, because “there was no beneficiary address 
and no mention of ‘Sudan’.”’’' 

In still other cases, wire transfers clearly referencing Sudan were 
stopped by HBUS’ OFAC filter for further review, but then allowed by 
HBUS staff to proceed. An HBUS internal report on OFAC compliance 
noted, for example, two blocked wire transfers involving Sudan, one for 
over $44,000 and the other for over $29,000, blocked on November 5 
and December 7, 2007, respectively, by HBUS’ OFAC filter, but 
subsequently “released due to human error.””^ 

In August 2008, HBUS noted that it was then holding over $3.2 
million in Sudan-related payments sent to the bank from other HSBC 
affiliates.”^ The bulk of the funds came from blocking a $2.5 million 
payment from HSBC Johannesburg destined for the Sudanese Petroleum 
Corporation, but three other Sudan-related payments from HSBC 
affiliates were also identified, a $300,000 payment sent by HSBC Hong 
Kong; a payment for more than $367,000 payment from HSBC Dubai, 
and a payment for more than $58,000 from British Arab Commercial 
Bank Ltd. The email listing these blocked funds noted that a court order 
was seeking transfer of the funds to a Federal court in the United States 
in connection with a lawsuit seeking compensation for the families of 17 
U.S. sailors killed in a 2000 terrorist attack on the USS Cole in 
Yemen.”'* 

In August 2010, in connection with an effort to exit correspondent 
relationships with 121 international banks that HBUS determined it 
could no longer support, HBUS CEO Irene Domer sent an email noting 
references to 16 banks in Sudan. Ms. Domer wrote: 

“In Phase 2 there will be Trade names the exit for which may be 
more complicated but to give you a flavo[u]r of the problem we 
seem to have 16 correspondent banks in Sudan which cannot be 
right.””^ 


(d) Transactions Involving Burma 

Another set of OFAC sensitive transactions involved Burma, also 
referred to as Myanmar, a country which, like Cuba and Sudan, was 


“OFAC Compliance Team Monthly Update Date - January 2008,” OCC-PSI-0063 1007. 
4/2/2008 HBUS memorandum, “Management Report for IQ2008 for OFAC Compliance,” 
OCC-PSI-00633713. 

8/8/2008 email from HBUS Anne Liddy to HSBC Susan Wright and others. “USS Cole 
Case ” OCC-PSI-00304783, at 2-3. 

994 

8/20/2010 email from HBUS Irene Domer to HSBC Andrew Long and others, “Project Topaz 
US Urgent Requirements,” HSBC OCC 8876105-106. 
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subject to a comprehensive sanctions program in the United States. 

This program, first imposed in 1997, remains in effect today, although 
certain aspects of the program were suspended in May 2012.*’’’ Internal 
hank documents indicate HBUS processed potentially prohibited 
transactions involving Burma from at least 2005 to 2010. 

One of the earliest references to transactions with Burma in the 
documents reviewed by the Subcommittee is a January 2005 email 
involving HBUS’ Global Banknotes business, which involves the buying 
and selling of large quantities of physical U.S. dollars to non-U.S. 
banks.”* The email, written by HSBC Group Compliance head David 
Bagley, described a transaction in which HBUS purchased $2.9 million 
in U.S. dollars from a client, determined that the dollars had come from 
a certain party whose name was redacted by HBUS, and noted: 
“Myanmar is currently subject to OF AC regulations prohibiting any 
transactions by US persons relating to Myanmar counterparties.” Mr. 
Bagley wrote: 

“There appears little doubt that the transaction is a breach of the 
relevant OF AC sanction on the part of HBUS, that it will need to 
be reported to OF AC and as a consequence there is a significant 
risk of financial penalty. It does not appear that there is a systemic 
issue, rather we are dealing with an individual incident, although 
given the potential seriousness of the breach external lawyers have 
been instructed to assist with the process of resolving matters with 
OFAC.””’ 

In July 2005, HSBC Group issued its new GCL policy barring all 
HSBC affiliates from engaging in U.S. dollar transactions in violation of 
OFAC prohibitions. A few days later, on August 25, 2005, HSBC 
Group head of Global Institutional Banking, Mark Smith, circulated a 
managerial letter, referenced previously, identifying correspondent 
relationships that would be affected.'”° The letter noted that the “Group 
has 2 account relationships with Myanmar entities,” and stated that the 


See OFAC “Sanctions Programs and Country Information," Burma sanctions (last updated 
4/17/2012), hltp://www.treasury.gov/resouTce-center/sanclions/Programs/pages/burma.aspx. 

Id. The U.S. Government suspended certain aspects of the Burma sanctions on May 1 7, 

2012. See “U.S. Eases Myanmar Financial Sanctions,” Wall Street Journal. Jay Solomon 
(5/17/2012), 

http://online.wsj.coni/article/SB100014240527023038796045774I0634291016706.htm! (“[T]he 
U.S. Treasury Department is maintaining and updating its list of sanctioned Myanmar military 
companies, business tycoons and generals who allegedly engaged in human-rights violations and 
corruption.”). 

See 1/21/2005 email from HSBC David Bagley to HSBC Stephen Green and Richard 
Bennett, “Compliance Exception,” HSBC OCC 8873671. 
id. 

8/25/2005 managerial letter from HSBC Mark Smith to HBUS Aimee Sentmat, HBME Alan 
Ken, and others, “GCL050047 - Compliance with OFAC sanctions,” HSBC OCC 3407565-569; 
8/25/2005 email from HBUS Alan Ketley to multiple HSBC colleagues, “GCL050047 - 
Compliance with OFAC Sanctions,” HSBC OCC 3407565-569, 
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“GCL applies in full,” implying both relationships would have to be 
terminated. In September 2005, a senior HBEU payments official, Rod 
Moxley, who analyzed U.K. transactions stopped by the WOLF filter 
over a 10-day period noted that a number of the U.S. dollar transactions 
involved Burma.'°°' 

After the GCL’s 2005 effective date, Burma-related transactions 
appear to have been reduced, but continued to occur. One example is a 
$15,000 payment that originated in Burma on January 18, 2008, was 
processed as a straight-through payment at HBUS, and blocked by the 
OFAC filter at another bank involved with the transaction. An 
HBUS email explained that the payment had not been blocked at HBUS, 
because its OFAC filter didn’t recognize “Yangon,” the former capital of 
Burma, also called “Rangoon,” as a Burma-related term. According to 
the email, it was the second payment involving “Yangon” that was 
missed by the HBUS filter. HBUS Compliance head Carolyn Wind 
requested that the filter be fixed immediately; “We are running too 
much risk that these misses will cause OFAC to start questioning the 
effectiveness of our controls.”"*'’^ 

Four months later, HBUS blocked an April 2008 wire transfer for 
$12,060 headed for the account of an SDN-listed entity at Myanmar 
Foreign Trade Bank. An internal bank document noted that the payment 
had been blocked by HBUS due to “references to Yangon and Myanmar, 
rather than blocking it due to the sanctioned entity[’]s involvement.” 

The document noted that the bank code “for the sanctioned entity was 
not included in the payments filter, as per agreed upon procedure with 
the UK WOLF team,” and a systems fix was implemented in October 
2008.'““'' 


In May 2010, two additional Burma-related U.S. dollar 
transactions were processed by FIBUS, due to limitations in the WOLF 
filter. In one instance, a payment was not blocked, because “the filter 
did not list ‘Burmese’ as an a.k.a. [also known as] for Burma.” In the 
other instance, the “filter did not identify ‘Mynmar’ as a possible 
reference to Myanmar.”'““* 


See 9/23/2005 email from HBEU Rod Moxley to HSBC John Ai!i.son and HSBC John Root, 
“OFAC sanctions,” HSBC OCC 8877213-214. 

See 1/25/2008 email exchanges among HBUS Carolyn Wind, HBUS Mike Ebbs, and others, 
'‘Myanmar-related payment - Missed by filter (‘Yangon’),” HSBC OCC 0616168-178, at 169. 
Id. at 168. 

Undated Global Transaction Banking report, “All Open Reportable Events,” OCC-PSI- 
00823408, at 4. 

1005 1/1/2010 - 5/31/2010 Compliance Certificate from HSBC David Bagley to HNAH Brendan 
McDonagh and HNAH Niall Booker, OCC-PSl-01754176, at 4. 
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(e) Transactions Involving North Korea 

Still another set of OF AC sensitive transactions involved North 
Korea which, unlike Burma, Cuba and Sudan, is not subject to a 
comprehensive U.S. sanctions program, but has particular persons and 
entities included in the OFAC SDN list.'“ 

In August 2005, a month after HSBC Group issued the GCL policy 
barring HSBC affiliates from engaging in U.S. dollar transactions in 
violation of OFAC prohibitions, HSBC Group head of Global 
Institutional Banking, Mark Smith, circulated a managerial letter 
identifying correspondent relationship that would be affected. The 
letter stated: “The Group has 3 account relationships with North Korean 
entities. These are all inhibited. We have been seeking to close the 
accounts, and will continue to do so, for some time but have not been 
able to elicit a response from the banks concerned. 

Nearly two years later, in 2007, an internal HSBC document 
entitled, “Information Requested in Connection With: (North Korea, 
Cuba, and Myanmar),” revealed that, as of May 2007, HSBC affiliates in 
Mexico and Latin America were providing U.S. dollar accounts to North 
Korean clients.'™’ The document indicated that HSBC Mexico 
(HBMX) had nine North Korean customers with nine U.S. dollar 
accounts holding assets exceeding $46,000, and seven North Korean 
customers with both U.S. dollar and Mexican peso accounts whose 
assets totaled more than $2.3 million."”'’ The document indicated that 
arrangements had been made to “cancel all business relationships with” 
North Korea, in relation to U.S. dollar accounts or commercial 
relationships for the entire region. 

In addition, HBUS did not close a U.S. dollar account with the 
Foreign Trade Bank of the Democratic People’s Republic of Korea until 


See OFAC “Sanctions Programs and Country Information,” North Korea sanctions (last 
updated 6/20/2011), hUp;//www.treasury.gov/resource- 
center/sanctions/Programs/pages/nkorea.aspx. 

8/25/2005 managerial letter from HSBC Mark Smith to HBUS Aimee Sentmat, HBME Alan 
Kerr, and others, “GCL050047 - Compliance with OFAC sanctions,” HSBC OCC 3407565-569; 
8/25/2005 email from HBUS Alan Ketley to multiple HSBC colleagues, “GCL050047 - 
Compliance with OFAC Sanctions,” HSBC OCC 3407565-569. 

8/25/2005 managerial letter from HSBC Mark Smith to HBUS Aimee Sentmat, HBME Alan 
Kerr, and others, “GCL050047 - Compliance with OFAC sanctions,” HSBC OCC 3407565-569, 
at 567. 

5/18/2007 HSBC document, ‘information Requested in Connection With: (North Korea, 
Cuba, and Myanmar),” HSBC OCC 8876088-095, at 093-095. 

Id. In addition, 92 North Korean clients had 137 HBMX accounts holding solely Mexican 
pesos, with assets exceeding a total of $697,000. Id. at 093. 
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April 28, 2010, although a review of the account indicated that no U.S. 
dollar activity had taken place in it since 2007.’*"' 

(f) Other Prohibited Transactions 

In addition to transactions involving jurisdictions subject to U.S, 
sanctions programs, some transactions sent to HBUS involved 
prohibited individuals or entities named on the OFAC SDN list. While 
many of these transactions were not sent by HSBC affiliates, some were. 
HBUS did not allow such transactions to proceed, showing the 
effectiveness of the OFAC filter when all appropriate transactions are 
run through it. 

On November 9, 2006, for example, “at the direction of OFAC,” 
HBUS blocked for further review a $32,000 payment that had been 
originated by HBME, because the underlying payment details indicated 
the funds were to be credited to A1 Aqsa Islamic Bank.'°'^ This bank 
had been designated as a “specially designated global terrorisf’ by 
OFAC in December 2001, because it was a “direct arm of Hamas, 
established and used to do Hamas business.”'**’^ On November 20, 2006, 
HBME asked HBUS to cancel the payment, because “it was sent in 
error.” On December 7, 2006, however, OFAC instructed HBUS to 
continue to block the funds. HBUS AML Compliance head Teresa 
Pesce wrote: “How is it that these payments continue to be processed by 
our affiliates in light of the GCLs?”'**''' 

A report prepared by Deloitte at HBUS’ request, examining the 
period 2001 to 2007, also disclosed that one U.S. dollar correspondent 
account located in the United Kingdom had been opened for a bank 
located in Syria, while two U.S. dollar correspondent accounts in the 
United Kingdom had been established for the “Taliban.”'“'^ When 
asked about the correspondent account for a bank established for the 
Taliban, HSBC legal counsel told the Subcommittee that HBEU had 
maintained an account for Afghan National Credit and Finance Limited, 
the London subsidiary of an Afghan bank that, from October 22, 1999 to 


See 2007 Deloitte OFAC review, “Results of the Transactions Revicw-UK Gateway, March 
29, 2012,” HSBC-PSl-PROD-0197919-989, at 988; Subcommittee briefing provided by Deloitte 
representatives (5/5/2012). 

^ 12/14/2006 email from HBUS Elizabeth Protomastro to HBUS John Allison and others, 
“OFAC - Wire payments blocked from HSBC offshore entities - USD 32,000 (re SDGT) and 
USD 2,538,939.33 (re Sudan),” HSBC OCC 3407608-609. 

1/9/2007 email from HBUS Elizabeth Protomastro to HSBC John Allison, HBUS Teresa 
Pesce, Anne Liddy, and others, “OFAC - ^ire payments blocked from HSBC offshore entities - 
USD 32,000 (re SDGT) and USD 2,538,939.33 (re Sudan) ” OCC-PSI-00610498, at 2. 

See 12/15/2006 email from HBUS Teresa Pesce to HBUS Elizabeth Protomastro and others, 
“OFAC - Wire payments blocked from HSBC offshore entities - USD 32,000 (re SDGT) and 
USD 2,538,939.33 (re Sudan),” HSBC OCC 3407608. 

10/18-10/19/2011 “Transaction Review Progress and Results Reporting,” prepared by 
Deloitte LLP, HSBC-PSI-PROD-0096628-672, at 649. 
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February 2, 2002, was designated under OF AC’s Taliban sanctions.'®'* 
An HBUS representative told the Subcommittee that HBUS was unable 
to go back far enough in its records to uncover whether or not the 
Afghan account at HBEU sent transactions through HBUS during that 
time.'®'^ The fact that HBEU had this account after the 9/1 1 terrorist 
attack on the United States again demonstrates how HSBC affdiates 
took on high risk accounts that exposed the U.S. financial system to 
money laundering and terrorist financing risks. These U.S. dollar 
accounts may also have contravened the 2005 GCL and OF AC 
regulations by enabling banks in Syria and Afghanistan when it was 
controlled by the Taliban to engage in U.S. dollar transactions through 
HBUS. 

Another account involving an individual on the OF AC list was 
housed at HSBC Cayman Islands. On February 21, 2008, a Syrian 
businessman by the name of Rami Makhlouf was placed on the SDN list 
by OF AC.'®'* One week later, HSBC Cayman Compliance personnel 
contacted HBUS to report that HSBC Cayman Islands currently held a 
trust relationship with Mr. Makhlouf and to inquire as to “what actions if 
any HSBC Group has taken in relation to the above mentioned 
individual.”'®'® An HBUS Compliance officer asked the Cayman 
Compliance officer for more information about the Makhlouf accounts, 
and the head of HSBC Cayman Compliance responded; “The Trust is 
administered by HSBC Geneva. We raised concerns with this client in 
August 2007 however we were assured by David Ford that the 
relationship had been reviewed at a Group level and a decision had been 
taken to continue with the relationship.”'®'® Ultimately, HBUS 
determined that it did not have any connection to Mr. Makhlouf and did 
not need to report any information to OF AC. 

(3) HBUS’ OFAC Compliance Program 

Internal bank documentation related to HBUS’ OFAC compliance 
efforts regarding OFAC sensitive transactions portrays a variety of 
specific problems over the period reviewed by the Subcommittee. One 
problem was that some HSBC affiliates continued to offer U.S. dollar 

Subcommittee briefing by HSBC legal counsel (7/9/2012). See also “UK Observer Reports 
Taliban Banks Still Operating in Tvondon,’’ London The Observer, Sunday edition of The 
Guardian (10/1/2007); “Schwerer Schlag": Ein kleines Geldhaus in London diente offenbar als 
Hausbank der Taliban,” [Serious Blow: A small Financial Institution in London apparently 
served as Taliban’s main bank”]. Per Spiegel. Christoph Von Pauly (10/8/2001). 

Id. 

See 2/21/2008 U.S. Department of Treasury Press Release No. HP-834, “Rami Makhluf 
Designated For Benefiting from Syrian Corruption,” hUp://w'W'w.ireasury.gov/press-center/press- 
releases/Pages/hp834.aspx (“The U.S. Department of the Treasury today designated Rami 
Makhluf, a powerful Syrian businessman and regime insider whom improperly benefits from and 
aids the public corruption of Syrian regime officials.”). 

1019 2/28/2008 email exchange among HBUS Andy im and HSBC Cayman Islands Patricia 
Dacosta and Michelle Williams, HSBC OCC 8878838-840. 

=“'ld. 
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accounts to prohibited persons despite HSBC Group policy and OF AC 
regulations, and continued to send transactions involving those accounts 
through their U.S. dollar accounts at HBUS. A second problem was the 
ongoing practice by some HSBC affiliates and others to use methods of 
processing transactions which did not disclose the participation of a 
prohibited person or country when sending a transaction through an 
account at HBUS. Even some within HSBC worried that such methods 
would look deceptive to its U.S. regulators. In other cases, prohibited 
transactions were not detected by HSBC’s WOLF filter or HBUS’ 

OF AC filter due to programming deficiencies that did not identify 
certain terms or names as suspicious. In still other cases, transactions 
that had been properly blocked by the WOLF or OF AC filter were 
released by HSBC or FIBUS employees in error, due to rushed 
procedures, inadequate training, or outright mistakes. Beginning in 
2008, spurred in part by an upcoming OCC examination of its OF AC 
compliance program, HBUS took a closer look at its program as a 
whole. 

On September 28, 2008, HBUS received a cautionary letter from 
OF AC regarding “12 payments processed from September 4, 2003 
through February 1, 2008 which represent possible violations against 
U.S. economic sanctions.”'*’^' That same month, HBUS learned that the 
OCC planned to review its OF AC operations as part of a November 
2008 examination of HBUS’ Payments and Cash Management (PCM) 
division. In response, HBUS undertook a detailed analysis of not 
only the 12 transactions highlighted by OF AC, but also other prohibited 
transactions that had been processed through the bank since issuance of 
the 2005 GCL policy. 

On October 3, 2008, a member of HBUS’ OFAC Compliance team 
Elizabeth Protoraastro forwarded the OFAC letter to HBUS Compliance 
head Leslie Midzain.’'*^^ Ms. Midzain, in turn, forwarded it to HSBC 
Group Compliance head David Bagley and HNAH’s regional 
Compliance head Janet Burak.’®'* Ms. Midzain wrote that she was 
giving them an “immediate heads up’’ because of tbe “additional 
[OFAC] failures since February 2008,” the upcoming OCC examination 
in November, and the “continued sensitivity” surrounding OFAC 
compliance. She stated that the matter would “receive high priority 


9/29/2009 OFAC Cautionary Letter, HSBC-PSI-PROD-0096180-181, 

See 10/3/2008 email from HBUS Lesley Midzain to HBUS Janet Burak, HSBC David 
Bagley, and HBUS Anne Liddy, “OFAC ‘Cautionary Letter’ received today,” HSBC OCC 
3406951-952. 

Emails between HBUS Elizabeth Protomastro, HBUS Lesley Midzain, and others on 
October 3, 2008, “OFAC ‘Cautionary Letter’ received today,” HSBC OCC 3406952-953. 

! 0/3/2008 email from HBUS Lesley Midzain to HBUS Janet Burak, HSBC David Bagley, 
and HBUS Anne Liddy, “OFAC ‘Cautionary Letter’ received today,” HSBC OCC 3406951-952. 
,025 jd. 
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On November 6, 2008, Ms. Midzain provided Mr. Bagley and 
Ms. Burak with detailed charts on the 12 prohibited transactions as well 
as a larger number of prohibited transactions that had been mistakenly 
processed by the bank.’°^* To provide context to the figures, she noted 
that HBUS processed approximately 600,000 wire transfers per week, of 
which about 5%, or 30,000 transactions, generated “possible [OF AC] 
matches which require review prior to releasing.”'®^' She wrote that, 
over a five-year period from 2003 to 2008, HBUS had “rejected and 
reported 1,212 transactions valued at $100 million” to OFAC.'®^* She 
explained that, in addition, HBUS had self-reported 79 missed 
transactions to OFAC that should have been blocked, but weren’t. Of 
those, she wrote that HBUS had identified “approx[imately] 57” that 
were issued subsequent to the 2005 GCL that were “contrary to sanction 
requirements and for which HSBC was the originating bank.”'°^’ She 
noted that some of the issues had arisen after HBUS replaced its OFAC 
filter in July 2007, and may have been due to gaps in the filter that were 
closed “as the system [was] refined.”'”^® 

Ms. Midzain reported that the 79 missed transactions primarily 
involved Iran and Sudan.'®’* Other transactions involved Cuba, Iraq, 
Syria, Zimbabwe, and persons on the SDN list. Ms. Midzain explained 
that of the 57 missed transactions that occurred since issuance of the 
July 2005 GCL policy barring HSBC affiliates from processing U.S. 
dollar transactions for OFAC sensitive persons, 21 or about one-third 
had nevertheless originated with an HSBC affiliate."*” Of those 21, her 
analysis noted that about five did not contain a reference to a prohibited 
person. Her analysis suggests that an HSBC affiliate may have been 
using a cover payment which would mask the nature of the transaction 
from HBUS.'®’ Ms. Midzain wrote: “Regarding Group members, since 
Group policy was issued JUL05, we have nonetheless received a fairly 
notable number of payments that suggest HSBC banks have not been 
consistently applying the policy.”'®'* She also noted that the analysis 
had not examined the population of payments that HBUS stopped over 
the years to see how many of them also came from HSBC affiliates. Her 
figures also did not reflect the larger universe of potentially prohibited 
transactions that were processed by the bank without either HBUS or 
OFAC detecting them. 


1 i/6/2008 email exchanges among HBUS Leslie Midzain, HSBC David Bagley, HBUS 
Janet Burak, and others, “OFAC analysis,” HSBC OCC 0616010-026. 


1027 

Id. 

at 

012. 

1028 

Id. 



1029 

Id. 

at 

016. 

1030 

Id. 

at 

014. 

1031 

Id. 

at 

016-017. 

1032 

Id. 

at 

017. 

1033 

Id. 

at 

016. 

1034 

Id. 




14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00403 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



390 


VerDate Nov 24 2008 


216 

David Bagley, HSBC Group Compliance head, thanked Ms. 
Midzain for her analysis. He also wrote: 

“As you know, we have just completed and are currently collating 
the results of a Group wide Compliance review of compliance with 
our USD/OF AC policy. 

Whilst some of these apparent breaches of Group policy may be 
rather historic nevertheless 1 am determined that we should enforce 
our policy on a consistent and Groupwide basis. 

Given this, what I would like to do is at Group level track back 
relevant and apparently offending payments and establish root 
causes so as to satisfy ourselves that there can be no, or at the very 
least, far less repetition. It is of course unrealistic to expect that no 
payments will pass through to HBUS, and at least our move to 
transparency in form of serial payments should allow these to be 
caught nevertheless 1 would prefer that payments were rejected at 
point of entry 

The OCC examination took place near the end of 2008. It tested 
the bank’s OFAC systems to determine if OFAC screening was being 
properly applied to new accounts, wire transfers, and other 
transactions. An internal OCC memorandum stated that, as of June 
30, 2008, “HBUS reported 370 items on the OFAC blocked report, 
valuing approximately $20 million.” It reported that, from September 
2003 to September 2008, HUBS had “rejected and reported to OFAC 
over 1 ,200 transactions valuing $100 million.”'*’^’ The memorandum 
also stated that HBUS was then processing about 600,000 wire transfers 
per week, of which 6%, or about 30,000, were manually reviewed each 
week by four-person OFAC Compliance teams in Delaware and New 
York. The OCC wrote that, of the wire transfers that underwent manual 
review, 20 to 30 per day were “escalated” and required a “disposition 
decision from compliance management.”''*^* The OCC memorandum 
reported: 

“Although, according to management, within the past five years 
(9/03-9/08) there ha[ve] been only 80 missed payments, the bank’s 
Compliance teams are under rigorous pressure to process alerts and 
determin[e] a disposition in a timely maner. ... [Tjhis strain can 
and will inhibit their mental capacity leaving gaps for errors even 


1 1/1 1/2008 email from HSBC David Bagley to HBUS Leslie Midzain and HSBC Susan 
Wright, “OFAC,” HSBC OCC 0616010-011. 

!036 7/28/2008 OCC memorandum, “OFAC Examination - Payment and Ca.sh Management 
(PCM),” OCC-PSI-01274962. [Sealed Exhibit.] 

Id. at 3. 
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though permanent current staff members are well trained and 
qualified to complete the OF AC responsibilities.” 

On January 20, 2009, the OCC sent HBUS a Supervisory Letter 
with generally positive examination findings regarding its OF AC 
compliance efforts. The Supervisory Letter stated: 

“• OFAC Compliance is High and Increasing. The quality of 
risk management systems is satisfactory. 

• Compliance with legal and regulatory requirements is 
satisfactory and no violations of law or regulation were cited at this 
examination. 

• One recommendation is made related to staffing.”'°'’° 

The Supervisory Letter stated that the OFAC risk was high and 
increasing due to “almost a zero tolerance for error” under OFAC 
regulations and increasing growth in HBUS’ PCM and retail banking 
businesses. The staffing recommendation, which did not require 
corrective action, stated; “Management should consider a review of 
current staffing requirements to ensure that there is an adequate number 
of permanent qualified staff to prolong the timely operations associated 
with OFAC related matters and to ensure adherence with regulatory 
requirements ... as your business grows.”'“‘‘' Despite the OCC’s 
generally positive examination, internal bank documents indicate that 
HBUS itself had a much more negative view of its OFAC compliance 
program. In June 2009, HBUS initiated an “OFAC Program Review 
Project.” Four months later, in October 2009, Debra Bonosconi, the 
HBUS Director for Specialized Compliance overseeing the Embassy 
Banking business, sent an email to Anthony Gibbs, the COO of HSBC 
North America Legal and Compliance, commenting on a number of 
compliance issues, including OFAC compliance.’®''^ Ms. Bonosconi, 
who had begun working at HBUS in March 2008, wrote that she had 
only recently become aware of the negative findings of the OFAC 
Program Review Project. She explained; 

“This project has been underway since June and the findings that 
have surfaced are no different than those already identified 
previously. So, we have a project that has taken far longer than it 
should have and findings that do not vary significantly from 
previous reviews. 


See OCC Supervisory Letter HSBC-2008-41, “Office of Foreign Asset Control 
Examination,” OCC-PSI-00000434-436. [Sealed Exhibit.] 


See 10/23/2009 email from HBUS Debra Bonosconi to HBUS Anthony Gibbs, “comments,” 
HSBC OCC 3405534-537. 

Id. 
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The bottom line is, our OF AC process is in disarray and in great 
risk of being noncompliant. We have multiple systems, 
inconsistent practices, limited communication between the various 
functions, and no oversight function.”'*’'*'’ 

This candid description of the bank’s OF AC compliance program, as 
having “inconsistent practices,” “limited communication,” and “no 
oversight function,” stands in marked contrast to the OCC findings less 
than a year earlier. 

Another sign of the stresses in the OFAC compliance program 
surfaced in December 2009, when the four-person OFAC Compliance 
team in New York faced an accumulated backlog of greater than 700 
OFAC alerts that had yet to be reviewed. The OFAC Compliance 
team requested five or six people from the Payments and Cash 
Management (PCM) department for ten days to help clear the 
backlog.'®'’® PCM responded that it had no resources to loan, and 
suggested asking Compliance personnel in Delaware for help. The 
OFAC Compliance team in New York responded that the Delaware 
Compliance staff was already “fully deployed” dealing with general 
alerts from the CAMP monitoring system: 

“We have considered all options at this point[;] the Compliance 
team in DE is already fully deployed dealing with wire camp alerts 
and bank examiner requests for the current exam. There is no 
bandwidth there at all[;] they are behind on the current alert 
clearing process which we are also dealing with.”'®''’ 

In late 2011, the OCC conducted a second examination of HBUS’ 
OFAC compliance program and, on January 25, 2012, issued a 
Supervisory Letter with a more negative assessment. '®‘’* The 
Supervisory Letter stated that the OCC was “concerned about the 
number and severity of the deficiencies in the enterprise-wide OFAC 
compliance program” at HBUS and at two other HSBC affiliates in the 
United States, HSBC Nevada, N.A. and HSBC Trust Company 
(Delaware), N.A. It stated that the OCC had reviewed reports prepared 
by HBUS’ own auditors and by an outside consultant that “identified 
significant deficiencies in the program.” ft noted that bank management 
had taken “significant steps” to address deficiencies, but concluded the 


S 045 12 /j 1/2009 email exchange among HBUS Camillus Hughes and HBUS Michael Gallagher, 
Charles DelBusto, Sandra Peterson, Thomas Halpin, Chris Davies, and Lesley Midzain, “OFAC 

Payments,” HSBC OCC 7688668-670, at 670. 

10.6 

Id. at 668. 

See 1/25/2012 OCC Supervisory Letter HSBC-2012-03, “OFAC Compliance Program,” 
OCC-PSI-01768561-566, [Sealed Exhibit.] 
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“three banks lack a robust OF AC risk assessment that ensures the OFAC 
risks have been adequately identified so they can be managed 
appropriately.” The Supervisory Letter contained two Matters Requiring 
Attention (MRAs) by the bank: (1) development of a “comprehensive 
OFAC risk assessment;” and (2) an independent review of certain real 
estate loans through a California branch between 2009 and 2011, 
involving Iran, that raised OFAC concerns.’®'’^ The Supervisory Letter 
also included a three-page attachment identifying OFAC violations cited 
in seven OFAC cautionary letters since June 2009. The OCC required 
HBUS to modify the AML action plan it was developing in response to a 
September 2010 Supervisory Letter necessitating broad improvements in 
its AML program to include the MRAs on its OFAC compliance 
program. 


Since the OCC examination, OFAC has issued one more 
cautionary letter to HBUS. Altogether, six of the pending OFAC letters 
warned that the violations might result in a civil monetary penalty, but 
no penalty has been imposed as of June 2012. 


(4) Server Issues 

One additional issue involving OF AC-sensitive transactions 
involves payment messages associated with non-U. S. dollar transactions 
that were sent through servers physically located in the United States, 
but which were not processed by HBUS and were not screened by an 
OFAC filter. The key issue is whether the electronic presence of those 
payment messages in the United States, utilizing U.S. facilities on their 
way elsewhere, required application of the OFAC filter.'®^' Despite 
concern expressed by HBUS, the bank decided not to turn on the HBUS 
OFAC filter to screen these payment messages. 

WHIRL Server. In the documents reviewed by the 
Subcommittee, server issues appear to have first arisen in 2003, when 
the HSBC Group Executive Committee discussed establishing a new 
server in the United Kingdom to process credit card transactions, instead 
of continuing to route those transactions through a server in the United 
States, for the express purpose of “avoidfing] contravening the OFAC 
restrictions.”'®^^ In January 2004, the HSBC Group Board of Directors 
approved installing a separate, so-called “WHIRL system” in the United 
Kingdom at an estimated cost of $20 million.'®’® When asked about the 


When asked, OFAC declined to provide a definitive answer to the Subcommittee in the 
abstract, indicating that its analysis would have to examine specific facts. Subcommittee 
briefing by OFAC (5/8/2012). 

See 1/30/2004 Board of Directors minutes for HSBC Holdings pic, HSBC-PSI-PROD- 
0198571-572. The HSBC Group Executive Committee consisted of senior executives in HSBC. 

See 1/30/2004 Board of Directors minutes for HSBC Holdings pic, HSBC-PSI-PROD- 
0198571-572. 
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WHIRL server, Mr. Bagley told the Subcommittee that the bank had 
moved the payment processing outside of the United States to protect 
HBUS, that he viewed it as a broad reading of OFAC rules at the time, 
and that he saw it as a conservative decision.'®^"* 

By 2005, the WHIRL server was active. In November 2005, Mr. 
Bagley asked Mr. Root to follow up on certain HBMX compliance 
issues identified by Mexican regulators, including the processing of 
credit card transactions. Mr. Bagley wrote that even through the credit 
card transactions “are, or will be processed on the UK Whirl server the 
routing of the relevant messages may pass through the U.S. first.”'®’^ 

He also wrote: “If this is the case then we may still have an issue 
dependent on how much intervention is theoretically possible on the part 
of the US leg.” The following day, the head of HBMX Compliance 
Ramon Garcia informed Mr. Root and Mr. Bagley that WHIRL 
transaction messages were still being routed through a U.S. server “for a 
fraction of a second for later transfer to the UK,” which could be long 
enough for a “log file” to exist in the United States identifying the 
transactions. 

HSBC Affiliates in the Americas. Six months later, in April 
2006, Mr. Bagley proposed that “countries in the Americas outside USA 
disconnect their payment routing link to the USA TP Gateway and 
reconnect to the UK TP.” He indicated doing so would provide two 
main benefits: “firstly the ability to make payments in currencies other 
than USD to countries/names/entities sanctioned by USA OFAC (as 
permitted by GCL 050047), and secondly to take data records outside 
USA His email raised the issue of whether electronic payment 
messages routed through a U.S. server could be subject to HBUS’ 

OFAC filter and the obligation to block all potentially prohibited 
transactions. 

In November 2006, at a meeting of the HBUS Compliance Risk 
Management Committee, then HBUS Compliance head Teresa Pesce 
advised: “Plans are underway to implement OFAC screening for 
messages sent by the Americas through the global messaging gateway in 
the US in 2007.”'®^^ Her decision to inform the committee of that 
development indicates that payment messages already being routed 
through the U.S. server were not being scanned against the OFAC filter. 
If the OFAC filter was not being used, all of the payment messages 
being sent through the United States by HSBC affiliates in Latin 


Subcommittee interview of David Bagley (5/10/2012). 

See 1 1/15-22/2005 email exchanges among HSBC David Bagley, HSBC John Root, and 
HBMX Ramon Garcia, “HBMX ~ Compliance Issues,” HSBC OCC 8873261-266. 

4/1 0/2006 email from HSBC David Bagley to HBBR Luis Eduardo, HBMX David Leighton, 
and others, “TP Gateways,” HSBC OCC 7687437-438. 

!057 1 1/] 3/2006 Compliance Risk Management Committee minutes for HBUS, HSBC OCC 
3407449-451. 
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America were not being screened for terrorists, drug traffickers, or other 
wrongdoers. 

Four months later, in March 2007, Mr. Bagley contacted 
Alexander Fiockhart, then HSBC Latin America CEO, about Latin 
America payment messages being routed through the U.S. server, in 
light of the increased focus on OFAC compliance “on the part of both 
OFAC” and “our banking regulators.”'®^* Mr. Bagley noted that HBUS 
was required to screen all transactions for compliance with OFAC 
requirements, including all non-U.S. dollar transactions, which “would 
clearly be disadvantageous from Latin America’s perspective,” since the 
logistics of screening all those transactions “would be commercially and 
operationally challenging” for Latin American affiliates. Mr. Bagley 
informed Mr. Fiockhart that they were developing a stand-alone WHIRL 
server in the United Kingdom that Latin America could use and which 
would avoid OFAC screening. He commented that if Mr. Fiockhart 
“want[ed] to carry out as many transactions permitted by Group policy 
as possible,” he should relocate Latin America’s payment processing “to 
a different Group Messaging Gateway” than the one in the United 
States. 

Mr. Bagley also noted that HSBC Group had already “informally 
explored” the possible relocation of Latin America payment processing 
to the U.K. server, but realized that gateway was already experiencing 
capacity issues. Mr. Bagley commented further that the existing 
situation in which “the filtering” was not turned on was making HSBC’s 
U.S. colleagues “extremely uncomfortable”: 

“Whilst we have lived with the current position for some time, it is 
fair to say that now that our US colleagues arc on notice they feel 
extremely uncomfortable in allowing the position to continue 
indefinitely. In essence, we will either have to have a pass and 
timeline for a relocation of the payment messages or will need to 
turn the filtering on.”'®*® 

Mr. Bagley does not make it clear how' his U.S. colleagues were 
put “on notice,” and when asked, he told the Subcommittee that he did 
not recall who he talked with at HBUS about the issue, but he did 
indicate clearly that the OFAC filter was not turned on for the U.S. 
server being used to forward payment messaging traffic from HSBC 
affiliates in Latin America.'® ® Five months earlier, HBUS Compliance 
head Teresa Pesce told the HBUS Compliance Risk Management 
Committee that payment messages sent by the Americas through the 


1058 3/j 3/2007 email from HSBC David Bagley to HBMX Sandy Fiockhart, “Group Messaging,” 
HSBC OCC 8874354-355. 

Id. at 355. 

Subcommittee interview of David Bagley (5/10/2012). 
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U.S. gateway would be scanned for OF AC beginning in 2007; Mr. 
Bagley’s email indicates that, as of March 2007, the OF AC filter had 
still not been turned on, and his U.S. colleagues were “extremely 
uncomfortable in allowing the position to continue indefinitely.” 

The following day Mr. Flockhart asked for a contact to discuss re- 
routing Latin American payment messaging traffic through the U.K. 
server. A few days after that, Mr. Bagiey provided the contact 
information and also notified Mr. Flockhart that HSBC Brazil was 
considering “giving up certain payments activity given the challenges of 
passing that activity through the US.”'”*’' Mr. Bagiey wrote that the 
HSBC Group had asked HSBC Brazil to postpone that decision until it 
was determined whether payment messaging could be “migrated 
elsewhere.” Mr. Bagiey also wrote: “There may also need to be a 
conversation at some stage with Paul Lawrence [then HBUS CEO] if it 
is necessary to persuade HBUS to continue with payment messaging 
pending any migration.”'®^^ In this email, the head of HSBC Group 
Compliance seems to be advocating sending non-U. S. dollar payments 
through the U.S. gateway without monitoring the transactions for OF AC 
compliance, pending migration of the Latin American traffic to another 
server. When Paul Thurston, former head of HBMX, was asked about 
Mr. Bagley’s comments, he expressed surprise that the HSBC Group 
Compliance head took that position.'®®^ In June 2007, Mr. Flockhart 
approved switching Latin America’s non-U. S. based SWIFT traffic to 
the U.K. gateway citing it as the most cost effective solution. ’®®'‘ 

Around the same time, HSBC Brazil (HBBR) also sought to move 
its transactions from the U.S. to the U.K. server to avoid the OF AC 
filter. In December 2006, HBBR contacted Malcolm Eastwood at 
HBEU, asking for assistance in obtaining a second SWIFT address to be 
used for HBBR payments going to Iran, Cuba, and other sanctioned 
countries. HBBR explained that these transactions - about 50 per year - 
were compliant with Group policy, but ran the risk of being blocked by 
the U.S. server they currently utilized, which was why it wanted to 
switch the transactions to the U.K. server and execute them in Euros. 
HBBR wrote: “To enable it, we have been informed that we have to 
create a second SWIFT address (BIC) to be used exclusively for this 


m6i 3/22/2007 email from HSBC David Bagiey to HBMX Saady Flockhart, “Group Messaging,” 
HSBC OCC 8875066-067. 

'"“Id. 

Subcommittee interview of Paul Thurston (5/1/2012). Mr. Bagiey said that the reason he 
suggested to Mr. Flockhart that the messages be moved to the U.K. gateway was because he had 
received a legal opinion, which he considered “extreme,” that non-U.S. dollar messages going 
through a U.S. messaging center could he impacted by OFAC. He was, thus, acting in a 
conservative manner to avoid violating OFAC requirements. Subcommittee interview of David 
Bagiey (5/10/2012). 

6/1/2007 email from HBMX Sandy Flockhart to HBMXNeelesh Heredia and others, “Group 
Messaging Gateway for LAM - Clear Choice Report,” HSBC OCC 8874349-350. 
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purpose, which should also not be published by SWIFT in their 
books.”'®'’^ 

In response, Mr. Eastwood reached out to HSBC Group 
Compliance and HBEU operational staff to discuss practical issues with 
Brazil’s routing “US sanctioned items” via the U.K. server. He wrote: 

“1 have concerns that we might be breaching at least the spirit of the US 
Serial Routing GCL if not the letter of it.”'®** HSBC Group Money 
Laundering Control Officer John Allison responded that, by using the 
U.S. server, Brazil was subject to an “all currency prohibition for all 
OFAC entries,” but HSBC Group policy allowed Brazil to make 
payments in non-U. S. dollar currencies to entities on the OFAC list, so 
long as they were not linked to terrorism or weapons of mass 
destruction. At the same time, he expressed concern about the 
perception of HSBC’s obtaining an additional SWIFT address dedicated 
to payments intended for OFAC sanctioned countries. 

Mr. Eastwood forwarded this email correspondence to HBEU 
colleagues with the comment: “Just fyi. This all makes me very 
nervous!” HBEU’s Rod Moxley responded that trying to identify and 
process transactions “which have so many conditions attached to them” 
was a predicament for them. He wrote: “Slightly irritating too that 
GHQ CMP [Group Headquarters Compliance] seem to have bent over 
backwards to accommodate a system which looks very dodgy to me. 
How about no you can’t do this?”'®*’ On January 2, 2007, Mr. Moxley 
sarcastically described setting up a second SWIFT address an 
“interesting concept,” forwarded the idea to a colleague, and wrote; 
“let’s set up a completely different Swift address to help avoid any 
problems with Cuba and Iran. Wish I’d thought of it.”'®** 

On January 26, 2007, Mr. Eastwood responded to Brazil’s 
request.'®*® He indicated in a memorandum that, after conferring with 
HSBC Group Compliance and operational personnel, they were not 
favorable to segregating certain transactions through separate SWIFT 
addresses, even though the transactions were permissible under Group 
policy, due to the possible perception of “taking action to avoid certain 
transactions being examined by the US authorities.” Instead, Mr. 
Eastwood noted that HBBR could re-route all of its SWIFT traffic via 


1065 J2/18/2006 email from HBBR Morgana Casagrande to HBEU Malcolm Eastwood and 
Others, “Transactions with Iran/Cuba, etc.,” HSBC OCC 8876927-928. 

1066 {2/21/2006 email from HBEU Malcolm Eastwood to Bill Rice and others, “Fw: Transactions 
with iran/Cuba, etc.,” HSBC OCC 8876927. 

See 12/28/2006 - 1/4/2007 email exchanges among HBEU Malcolm Eastwood, HSBC John 
Allison, HBEU Rod Moxley, and others, “Transactions with Iran/Cuba, etc.,” HSBC OCC 
8876925-927. 

1068 1/2/2007 email from HBEU Rod Moxley to HBEU Andy Newman, “Transactions with 
Iran/Cuba, etc.,” HSBC OCC 8876921. 

1069 1/26/2007 memorandum from HBEU Malcolm Eastwood to HBBR Lucas Fragoso and 
others, “Trade Transaction with Iran/Cuba etc.,” HSBC OCC 8876930-93 1 . 
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the U.K. server, listing several logistical issues that would have to be 
resolved if Brazil wanted to move forward. 

These documents raise the question of whether non-U. S. dollar 
payment messages referencing transactions routed through a U.S. server 
by HSBC affiliates were required to be screened by an OFAC filter, or 
whether they could move across U.S. boundaries and use U.S. facilities 
without triggering any OFAC prohibitions. On the one hand, HSBC 
Group Compliance urged Latin America to switch their messaging 
traffic from a U.S. to a U.K. server to avoid the delays that come with 
OFAC screening, while on the other hand indicating that for at least a 
five-month period from November 2006 to March 2007, the OFAC filter 
had not been turned on to screen the Latin American payment messages 
going through the U.S. server even though HBUS apparently had 
expressed concerns about not screening the messages for prohibited 
activity. HSBC Group knowingly put its U.S. affiliate at regulatory and 
reputational risk by moving payment messages through a U.S. server 
without scanning them against the OFAC filter. 

Turning Off OFAC Verification. A very different server issue 
arose in July 2007, when HBUS introduced a new product called 
Fircosoft to help monitor OFAC sensitive transactions. The product 
caused a huge increase in the number of OFAC alerts, creating a backlog 
that began to overwhelm HBUS OFAC compliance personnel. 

According to a fourth quarter 2007 Compliance Report by HBUS, the 
introduction of the new product caused “serious performance issues” 
that would “not support HBUS volumes.”'®™ On July 17, 2007, “a risk 
based decision was made to eliminate the verification step of all OFAC 
filter alerts on a temporary basis to accelerate the process of clearing the 
OFAC queue.”'®^' The more limited review process for OFAC sensitive 
transactions remained in effect for about three weeks, from July 17 to 
August 6. On August 1 , 2007, HBUS Chief Operating Officer David 
Dew wrote: “I think that we simply must now agree on a definitive 
timetable for reintroduction of full OFAC controls.”' ®^^ When asked 
about this matter, Mr. Dew told the Subcommittee that he thought the 
limitation on the “verification step” in the OFAC filter was only stopped 
for about a day.'”’^ Anne Liddy told Subcommittee that she recalled that 
the verification step was turned off for about a month, but didn’t view it 
as a risk to the bank.'®™ 


•0™ 4Q07 Compliance Report from HBUS Carolyn Wind to HNAH Janet Burak and others, 
HSBC-PSI-PROD-0000508-0I6, at 509. 

Global Payments System (GPS) Implementation Issues, 6 Aug 07 HUSl Audit Committee 
Update, HSBC OCC 1105891. 

^ 8/01/2007 email from HBUS David Dew to Bandula Wijesinghe and others, OCC-PSl- 
00188404. 

Subcommittee interview of David Dew (3/05/2012). 

Subcommittee interview of Anne Liddy (2/22/2012). 
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In 2009, the same verification step in the OF AC filter was again 
turned off hy HBUS for a few weeks. In November 2009, due to an 
industry-wide switch to SWIFT202 cover payments, OF AC alerts 
increased dramatically at HBUS. HBUS was so concerned about the 
large number of false OFAC hits being generated that it stopped the 
verification step, as was done in 2007. Turning off the verification step 
concerned one HBUS employee enough that the employee quietly 
reported the action to the Federal Reserve. The Federal Reserve 
examiner who spoke with the employee wrote in an email to colleagues 
the following: 

“On Monday Lesley Midzain, former head of BS A/AML turned 
off the second level filter on Chips activity without consulting 
anyone and with no supporting documentation. The rational given 
for turning the second level filter off was to reduce the daily 
backlog in lieu of additional resources. The individual who spoke 
to me knew this was not appropriate action and decided to call the 
[regulator].”''*” 

HSBC’s legal counsel told the Subcommittee that the verification 
step was turned off for 13 days, from November 25, 2009 to December 
7, 2009.''*” The issue raised by both incidents in 2007 and 2009, is 
whether HBUS’ decision to turn off part of the OFAC filtering system 
reduced its effectiveness in screening for prohibited transactions and 
increased U.S. vulnerabilities to money laundering and terrorist 
financing. 

C. Analysis 

OFAC enforces U.S. programs aimed at exposing and disabling the 
financial dealings and resources of some of the most dangerous persons 
and jurisdictions threatening the world today, including terrorists, 
persons involved with weapons of mass destruction, drug traffickers, and 
rogue jurisdictions. The OFAC filter is the central mechanism used to 
identify, stop, and block suspect transactions speeding through financial 
systems. Global financial institutions have a special responsibility to 
respect OFAC prohibitions and comply with OFAC restrictions. 

Actions taken to circumvent the OFAC filter or endanger the 
effectiveness of a critical safeguard may facilitate transactions 
undertaken by some of the worst wrongdoers among us. 

The evidence reviewed by the Subcommittee indicates that, from 
2001 to 2007, HSBC affiliates, with the knowledge and tacit approval of 
HSBC Group executives, engaged in alarming conduct sending 
undisclosed Iranian U-tum transactions through their HBUS 


12/16/2009 interna! Federal Reserve memorandum, BOG-A-207130. [Sealed Exhibit.] 
Subcommittee briefing by HSBC legal counsel (6/27/2012). 
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correspondent accounts, without information that would otherwise have 
triggered OF AC reviews. When asked, HBUS insisted on HSBC 
affiliates using transparent payment instructions so that all U-tum 
transactions would be stopped by the OF AC filter and reviewed, but 
when faced with evidence that some HSBC affiliates were acting to 
circumvent the OF AC filter, HBUS failed to take decisive action to stop 
the conduct some in its own organization viewed as deceptive. In 
addition, from at least 2009 to early 2012, the bank’s OF AC compliance 
program suffered from multiple deficiencies. Still another issue is that 
some HSBC affiliates sent non-U.S. dollar messaging traffic through 
U.S. servers in which the OF AC screening was not turned on or was 
restricted. 

The aim in many of the instances in which HSBC affiliates acted to 
circumvent the OFAC filter may have been to avoid the time-consuming 
individualized reviews that followed, rather than execute prohibited 
transactions. But expediency in the face of the threats posed by the 
targets of OFAC prohibitions does not justify potentially violating or 
undermining OFAC requirements. HBUS likewise failed to obtain 
information about the full scope of undisclosed OFAC sensitive 
transactions going through its correspondent accounts, bring to a head 
the issue of HSBC affiliates circumventing OFAC safeguards, and 
ensure all transactions were reviewed for OFAC compliance. 
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V. AL RAJHI BANK: DISREGARDING LINKS TO 
TERRORIST FINANCING 

For decades, HSBC has been one of the most active global banks 
in Saudi Arabia, despite AML and terrorist financing risks involved with 
doing business in that country. Among other activities, for more than 25 
years, HSBC has provided a wide range of banking services to A1 Rajhi 
Bank, Saudi Arabia’s largest private bank.’'’” Those services included 
providing large amounts of physical U.S. dollars to the bank as part of 
HSBC’s U.S. banknotes business. After the 9/1 1 terrorist attack on the 
United States in 2001 , evidence began to emerge that A1 Rajhi Bank and 
some of its owners had links to organizations associated with financing 
terrorism, including that one of the bank’s founders was an early 
financial benefactor of al Qaeda. In January 2005, despite the fact that 
A1 Rajhi Bank had not been indicted, designated a terrorist financier, or 
sanctioned by any country, HSBC Group Compliance recommended 
internally that, due to terrorist financing concerns, HSBC affiliates 
should sever ties with the bank. 

In response, some HSBC affiliates disregarded the 
recommendation and continued to do business with the bank, while 
others terminated their relationships but protested HSBC’s decision and 
urged HSBC to reverse it. The protests continued despite a U.S. 
indictment the next month, in February 2005, of two individuals 
accused, among other matters, of cashing $130,000 in U.S. travelers 
cheques at Al Rajhi Bank in Saudi Arabia and smuggling the money to 
violent extremists in Chechnya. In May 2005, four months after its 
initial decision, HSBC Group Compliance reversed itself and announced 
that all HSBC affiliates could do business with Al Rajhi Bank, thus 
allowing HBUS to decide for itself whether to resume the relationship. 
For nearly two years, HSBC Banknotes repeatedly asked HBUS AML 
Compliance personnel to allow reinstatement of the Al Rajhi Bank 
relationship, despite ongoing concerns at HBUS about the bank’s 
possible links to terrorist financing. 

On December 1, 2006, despite concern that there is “no smoke 
without fire,” HBUS AML Compliance agreed to allow HBUS to 
reinstate the relationship and resume supplying U.S. dollars to Al Rajhi 
Bank. Earlier, Al Rajhi Bank had threatened to pull all of its business 
from HSBC if the U.S. banknotes business were not restored, while 
HSBC personnel estimated that restoring the U.S. banknotes business 
would produce annual revenues of at least $100,000. In 2007, additional 
information surfaced about Al Rajhi Bank’s possible links to terrorism. 


HSBC also operates an affiliate, HSBC Bank Middle East, with branches in Saudi Arabia; 
owns Saudi British Bank; and provides correspondent banking services to other Saudi financial 
institutions. 
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including articles on a 2003 report by the U.S. Central Intelligence 
Agency (CIA) entitled, “A1 Rajhi Bank: Conduit for Extremist Finance,” 
which found that “[sjenior al-Rajhi family members have long supported 
Islamic extremists and probably know that terrorists use their bank.” 
Despite that and other troubling information, HBUS continued to supply 
U.S. dollars to the bank, and even expanded its business, until 2010, 
when HSBC decided, on a global basis, to exit the U.S. banknotes 
business. 

A1 Rajhi Bank was not the only bank with links to terrorism 
serviced by HBUS. Two additional examples are Islami Bank 
Bangladesh Ltd. and Social Islami Bank Ltd. which is also located in 
Bangladesh. In each case, in anticipation of revenues of $75,000 to 
$100,000 per year, HBUS Banknotes personnel disregarded troubling 
evidence of possible links to terrorist financing, opened accounts for the 
banks, and provided them with U.S. dollars and access to the U.S. 
financial system. 

A. Al Rajhi Bank 

Founded in 1957, Al Rajhi Bank is one of the largest banks in 
Saudi Arabia, with over 8,400 employees and assets totaling $59 
billion.'°^* Headquartered in Riyadh, the bank has over 500 branches, 
mostly in Saudi Arabia, but also in Malaysia, Kuwait, and Jordan. 

The bank was founded by four brothers, Sulaiman, Saleh, Abdullah, and 
Mohamed, of the Al Rajhi family, one of the wealthiest in Saudi Arabia. 

The bank began as a collection of banking and commercial 
ventures which, in 1978, joined together as the Al Rajhi Trading and 
Exchange Company. In 1987, the company converted to a joint stock 
company, and two years later renamed itself the Al Rajhi Banking and 
Investment Corporation.'®*' In 2006, the bank rebranded itself as Al 
Rajhi Bank.'®*'^ It is traded on the Saudi Arabian Stock Exchange 
(Tadawul), and about 45% of its shares are publicly owned.'®*^ Al Rajhi 
family members remain the bank’s largest shareholders.'®*'’ 


'*A1 Rajhi Bank website, ‘"About Us,” http://www.alrajhibank.com.sa/en/about- 
us/jiages/default.aspx. 

Id.; Al Rajhi Bank website, “Our History,” http://www.alrajhibank.com.sa/our- 


history/indcx.html. 

Ai Rajhi Bank website, “Our History,” http://www.alrajhibank. com. sa/our- 
history/index.html. 

1082 bank also has various subsidiaries, including Al Rajhi Capital. See Ai Rajhi Capital 

website, http://www.alrajhi-capital.coin/en/Welcome+to+ARFS/Overview/. 

HBUS “Know Your Customer Profile” of Al Rajhi Banking & Investment Corp. 


(10/15/2010), HSBC-PSI-PROD-0102310, (hereinafter “20 10 HBUS KYC Profile on Al Rajhi 


Bank”), at 2. About 45% of the bank’s shares are publicly traded; the remainder is held 


primarily by members of the Al Rajhi family. Id. at 3. 
2010 HBUS KYC Profile on Al Rajhi Bank, at 3. 
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A1 Rajhi Bank offers a wide range of banking services including 
deposits, loans, investment adviee, seeurities trading, remittances, credit 
cards, and consumer financing."’*^ All services are offered in 
conformance with Islamic requirements, including the set aside of funds 
for “zakat,” which is used for charitable donations. The bank has won a 
number of awards for its operations in the Middle East. 

The bank’s most senior official is Sulaiman bin Abdul Aziz A1 
Rajhi, who at various times has held the posts of Chief Executive 
Officer, Managing Director, and Chairman of the Board of Directors.'”*'’ 
The bank’s General Manager is Abdullah bin Abdul Aziz A1 Rajhi. The 
board of directors consists of eleven directors, six of whom are A1 Rajhi 
family members: Sulaiman bin Abdul Aziz A! Rajhi, Chairman of the 
Board; Abdullah bin Abdul Aziz Al Rajhi; Sulaiman bin Saleh A1 Rajhi; 
Mohamed bin Abdullah AI Rajhi; Abdullah bin Sulaiman Al Rajhi; and 
Bader bin Mohammed Al Rajhi.'”*’ 

The bank is part of an extensive group of Al Rajhi business and 
nonprofit ventures, which include companies engaged in money 
exchange services, commodity trading, real estate, poultry, construction, 
and pharmaceuticals.'”** One business which also had an HBUS 
account was the Al Rajhi Trading Establishment, a money exchange 
business owned by Abdulrahman Saleh Al Rajhi.'”*’ Its HBUS account 
was closed in 2005, when it merged with seven other businesses to form 
a new Saudi bank. The largest nonprofit venture in the Al Rajhi group is 
the SAAR Foundation, which is named after Sulaiman bin Abdul Azis 
Al Rajhi, and supports nonprofit and business ventures around the 
world.'”’” Sulaiman Al Rajhi and his family today have an estimated net 
worth of nearly $6 billion.'”’' 

The Subcommittee contacted Al Rajhi Bank regarding its 
relationship to HSBC and the matters addressed in this section, but the 


See Al Rajhi Bank website, http://www,alrajhibank.com.sa.aspx. 

See Al Rajhi Bank website, “About Us,” http://www.alrajhibank.com.sa/enyabout- 
us/pages/board-of-directors.aspx. See also 2010 HBUS KYC Profile on Al Rajhi Bank, at 3 
(describing Sulaiman Abdul Aziz Al Rajhi as Chairman of the Board and Managing Director; 
Abdullah Sulaiman AI Rajhi as CEO; and Mohammed Lookman Samsudeen as General Manager 
and Chief Financial Officer). 

Rajhi Bank website, “About Us,” http://www.alrajhibank.com.sa/en/about-us/pagc 5 /board- 
of-directors.aspx. 

See, e.g., Sulimin Abdul Aziz Al Rajhi Holding Company website, 
http;//www.alrajhihoiding.com/. 

See, e.g., March 2002 email chain among HBUS personnel, “Al Rajhi Trading 
establishment,” OCC-PS1-0038I727, al 3; 9/8/2008 HSBC Finaneial Investigations Group (FIG) 
report on Al Rajhi Bank, HSBC-PSI-PROD-0102813. 

” See “Sulaiman Ai-Rajhi’s life a rags to riches story,” Arab News (5/29/2012), 
http://www.arabnews.com/?q=economy/sulaiman-al-rajhi%E2%80%99s-life-rags-riches-story. 

See Profile of Sulaiman Al Rajhi & family (March 2012), Forbes . 
http;//www.forbes.com/profile/sulaiman-al-rajhi/. See also 2010 HBUS KYC Profile on Al 
Rajhi Bank at 3 (estimating family worth at $22.5 billion). 
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bank has not provided any information in response to the 
Subcommittee’s inquiry. 

B. Saudi Arabia and Terrorist Financing 

The majority of A1 Rajhi Bank’s operations take place in Saudi 
Arabia, which the United States has long identified as a country of 
concern in the area of terrorist financing. Following the terrorist 
attack on the United States on September 1 1, 2001, the U.S. Government 
began a decade-long intensive investigation into where and how 
terrorists obtain funding, repeatedly returning to Saudi Arabia, its banks, 
and its nationals as a suspected source. 

In 2004, the 9/1 1 Commission charged with investigating the 
terrorist attack issued a report which found that Osama Bin Laden and al 
Qaeda had relied on a “financial support network that came to be known 
as the ‘Golden Chain,’ put together mainly by financiers in Saudi Arabia 
and the Persian Gulf states.”' ” The Commission’s report explained: 

“Al Qaeda appears to have relied on a core group of financial 
facilitators who raised money from a variety of donors and other 
fiind-raisers, primarily in the Gulf countries and particularly in 
Saudi Arabia. Some individual donors surely knew, and others did 
not, the ultimate destination of their donations.”'®^”' 

The Commission report stated: “Saudi Arabia’s society was a place 
where al Qaeda raised money directly from individuals and through 
charities. It was the society that produced 1 5 of the 19 hijackers.”'"^^ 

The report also stated that it “found no evidence that the Saudi 
government as an institution or senior Saudi officials individually 
funded [Al Qaeda], and that after terrorist attacks began occurring in 
Saudi Arabia, a “Saudi crackdown . . . ha[d] apparently reduced the funds 
available to al Qaeda - perhaps drastically - but it is too soon to know if 
this reduction will last.”"'’^ 

After several major terrorist attacks within its borders in 2003 and 
2004, Saudi Arabia took a number of steps to combat terrorist financing. 
One report to Congress by the Congressional Research Service 
summarized those actions as follows: 


^ See, e.g.. International Narcotics Control Strategy Reports prepared by the U.S. Department 
of State, 2003-2012 (identifying Saudi Arabia as a country '‘of concern” with respect to money 
laundering and terrorist financing). 

The 9/1 1 Commission Report: Final Report of the National Commission on Terrorist Attacks 
upon the United States . (7/22/2004), at 55. 

Id. at 170. 

Id. at 370. 

'“Id. at 171. 

Id. at 383. 
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“Since mid-2003, the Saudi government has: set up a joint task 
force with the United States to investigate terrorist financing in 
Saudi Arabia; shuttered charitable organizations suspected of 
terrorist ties; passed anti-money laundering legislation; banned 
cash collections at mosques; centralized control over some 
charities; closed unlicensed money exchanges; and scrutinized 
clerics involved in charitable eo I lections.”'”* 

Saudi Arabia also reported seizing illicit cash from terrorist 
organizations, shutting suspeet bank accounts, designating several 
individuals as terrorist financiers, and killing two of them."”’ In 
addition, Saudi Arabia established a Permanent Committee on 
Combating the Financing of Terrorism and a Financial Investigation 
Unit which began operations in September 2005."” 

Despite those advances, U.S. Government testimony and reports 
indicate that Saudi Arabia continued to be a focus of concern with 
respect to terrorist financing. In 2005, for example, U.S. Treasury 
Under Secretary for Terrorism and Financial Intelligence Stuart Levey 
testified before Congress: “[Wjealthy donors in Saudi Arabia are still 
funding violent extremists around the world, from Europe to North 
Africa, from Iraq to Southeast Asia.”"'" He also testified that Saudi 
individuals may be “a significant source” of financing for the Iraq 
insurgency.'"*^ 

In 2007, in its annual International Narcotics Control Strategy 
Report, the U.S. Department of State wrote: “Saudi donors and 
unregulated charities have been a major source of financing to extremist 
and terrorist groups over the past 25 years.”'"’'* A 2007 report to 
Congress by the Congressional Research Service stated: “U.S. officials 
remain concerned that Saudis continue to fund A1 Qaeda and other 
terrorist organizations.”'"” That same year. Congress enacted 
legislation which found that “Saudi Arabia has an uneven record in the 
fight against terrorism, especially with respect to terrorist financing,” 


1098 Terrorist Financing issues,” Congressional Research Service Report for 

Congress, RL32499 (9/14/2007), http://www.fa5.org/sgp/crs/terror/RL32499.pdf (hereinafter 
“2007 CRS Report on Saudi Arabia Terrorist Financing Fssues”), in the summary. See also 2007 
International Narcotics Control Strategy Report, U.S. Department of State, at 355-357. 

2007 CRS Report on Saudi Arabia Terrorist Financing Issues, at 25. 

Id. at 24. 

* Stuart Levey testimony before the House Financial Services Subcommittee on Oversight and 
Investigations and House International Relations Subcommittee on International Terrorism and 
Nonproliferation (5/4/2005). 

Stuart Levey testimony before the Senate Committee on Banking, Housing, and Urban 
Affairs (7/13/2005) (“Wealthy Saudi financiers and charities have funded terrorist organizations 
and causes that support terrorism and the ideology that fuels the terrorists’ agenda. Even today, 
we believe that Saudi donors may still be a significant source of terrorist financing, including for 
the insurgency in Iraq.”). 

' 2007 International Narcotics Control Strategy Report, U.S. Department of State, at 355. 

’ 2007 CRS Report on Saudi Arabia Terrorist Financing Issues, in the summary. 
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and required the U.S. Government to develop a long-term strategy for 
working with Saudi Arabia to combat terrorist financing. On the 
sixth anniversary of the 9/1 1 attack. Treasury Under Secretary Levey 
said in a televised interview on terrorist financing: “[I]f I could 
somehow snap my fingers and cut off the funding from one country, it 
would be Saudi Arabia.”"“ 

In 2008, the U.S. State Department issued the long-term strategy 
required by the 2007 law.'"'’ The strategy identified goals and 
“performance targets” to track progress in strengthening collaboration 
with Saudi Arabia to clamp down on terrorist financing. In April 2008, 
when questioned during a Senate hearing. Treasury Under Secretary 
Levey testified that, while Saudi Arabia had taken strong action against 
terrorists operating within its borders and was cooperating with the 
United States on an operational level, it was not working as hard to 
prevent funds from flowing to terrorists outside of its borders: “Saudi 
Arabia today remains the location from which more money is going to 
terror groups and the Taliban - Sunni terror groups and the Taliban - 
than from any other place in the world.”' 

In 2009, a report prepared for Congress by the U.S. Government 
Accountability Office (GAO) reviewed both the State Department’s 
long-term strategy and Saudi anti-terrorism efforts since 2005. GAO 
concluded: “U.S. and Saudi officials report progress on countering 
terrorism and its financing within Saudi Arabia, but noted challenges, 
particularly in preventing alleged funding for terrorism and violent 
extremism outside of Saudi Arabia.”'"'’ GAO wrote: 

“U.S. officials remain concerned about the ability of Saudi 
individuals and multilateral charitable organizations, as well as 
other individuals visiting Saudi Arabia, to support terrorism and 
violent extremism outside of Saudi Arabia. U.S. officials also 
noted that limited Saudi enforcement capacity and terrorist 
financiers’ use of cash couriers pose challenges to Saudi efforts to 
prevent financial support to extremists.”'"'' 


’ See Section 2043(c), Impiementing Recommendations of the 9/1 1 Commission Act, P.L. 
110-53 (8/3/2007). 

U 06 g . Saudjs Slijl Pilling A1 Qaeda’s Coffers,” Brian Ross, ABC News (9/t 1/ 2007). 

1107 uy g Strategy Toward Saudi Arabia, Report Pursuant to Section 2043(c) of the 
Implementing Recommendations of the 9/11 Commission Act,” U.S. Department of State 
(1/30/2008). 

^ Stuart Levey testimony before Senate Committee on Finance, “Anti-Terrorism Financing: 
Progress Made and Challenges Ahead,” (4/1/2008). 

' “Combating Terrorism: U.S. Agencies Report Progress Countering Terrorism and Its 
Financing in Saudi Arabia, but Continued Focus on Counter Terrorism Financing Efforts 
Needed.” U.S, Government Accountability Office, GAO-09-883 (Sept. 2009), 
http://www.gao.gov/new.items/d09883.pdf, at 1, 

"'°ld.at29. 
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GAO also noted that certain performance targets set by the State 
Department had been dropped in 2009, such as the establishment of a 
Saudi Commission on Charities to oversee actions taken by Saudi 
charities abroad as well as certain regulations of cash couriers. " " GAO 
recommended that the United States reinstate the dropped performance 
targets to prevent the flow of funds from Saudi Arabia “through 
mechanisms such as cash couriers, to terrorists and extremists outside 
Saudi Arabia.”'"^ 

Recently, Saudi Arabia won praise for its role in foiling a terrorist 
plan to smuggle a bomb onto an airline flight to the United States." " 
The State Department’s most recent annual International Narcotics 
Control Strategy Report contains no information about Saudi Arabia’s 
anti-money laundering or terrorist financing efforts."'"* 

C. Alleged Al Rajhi Links to Terrorism 

In the ten years after the 9/1 1 attack in 2001, U.S. Government 
reports, criminal and civil legal proceedings, and media reports have 
alleged links between Al Rajhi family members and the Al Rajhi Bank 
to terrorist financing. The alleged links include that some Al Rajhi 
family members were major donors to al Qaeda or Islamic charities 
suspected of funding terrorism, established their own nonprofit 
organizations in the United States that sent funds to terrorist 
organizations, or used Al Rajhi Bank itself to facilitate financial 
transactions for individuals or nonprofit organizations associated with 
terrorism. 

Many of the suspicions regarding Al Rajhi Bank stem from 2002, 
when the name of its most senior official, Sulaiman bin Abdul Azis Al 
Rajhi, appeared on an internal al Qaeda list of financial benefactors, and 
when a network of Al Rajhi-related nonprofit and business ventures 
located in Virginia was subjected to search by U.S. law enforcement 
seeking to disrupt terrorist financing activities in the United States. 

Al Qaeda List of Financial Benefactors. The al Qaeda list of 
financial benefactors came to light in March 2002, after a search of the 
Bosnian offices of the Benevolence International Foundation, a Saudi 
based nonprofit organization which was also designated a terrorist 
organization by the Treasury Department, led to seizure of a CD-ROM 


"" Id. at 15,33. 

"'Ud. at3. 

' See, e.g., “International sting operation brought down underwear bomb plot,” Los Angeles 
Times . Brian Bennett and Ken Dilanian (5/8/2012), 

htlp://latimesblogs.latimes.com/world_now/2012/05/underwear-bomb-plot.html. 

‘”^2012 International Narcotics Control Strategy Report, Volume II Country Database, U.S. 
Department of State, at 287-289. 
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and computer hard drive with numerous al Qaeda documents.’"^ One 
computer file contained scanned images of several hundred documents 
chronicling the formation of al Qaeda.'"*’ One of the scanned 
documents contained a handwritten list of 20 individuals identified as 
key financial contributors to al Qaeda." Osama bin Laden apparently 
referred to that group of individuals as the “Golden Chain.”"'* In a 
report prepared for Congress, the Congressional Research Service 
explained: 


“According to the Commission’s report, Saudi individuals and 
other financiers associated with the Golden Chain enabled bin 
Laden and Al Qaeda to replace lost financial assets and establish a 
base in Afghanistan following their abrupt departure from Sudan in 

1996 ”' "5 


One of the 20 handwritten names in the Golden Chain document 
identifying al Qaeda’s early key financial benefactors is Sulaiman bin 
Abdul Aziz Al Rajhi, one of Al Rajhi Bank’s key founders and most 
senior officials."^" 

The Golden Chain document has been discussed in the 9/1 1 
Commission’s report, in Federal court filings, and civil lawsuits."^' 
Media reports as early as 2004 noted that the al Qaeda list included the 


'"’See United States v. Enaam Amaout . Case No. 02-CR-892 (USDC NDIL), “Government’s 
Evidentiary Proffer Supporting the Admissibility of Coconspiralor Statements,” (1/6/2003), 
http://fll.findlaw.com/news.fmdlaw. com/wsj/docs/bif/usamaoutl0603prof.pdf (hereinafter 
“Arnaout Evidentiary Proffer”), at 29. See also 2007 CRS Report on Saudi Arabia Terrorist 
Financing Issues, at 3; “Terrorism, 2002-2005,” FBI report, al 12, http://www.fbi.gov/stats- 
services/pub!ications/terrorism-2002-2005/teiTor02_05.pdf (“On August 1 8, 2003, Enaam 
Amaout, the director of Benevolence International Foundation, was sentenced to 1 1 years in 
federal prison after pleading guilty on February 10, 2003, to terrorism-related racketeering 
conspiracy charges. Amaout had been indicted on October 9, 2002, for conspiracy to 
fraudulently obtain charitable donations in order to provide financial assistance to al-Qa’ida and 
other organizations engaged in violence and terrorism.”). 

‘ "‘’Amaout Evidentiary Proffer, at 29. 

"'^Id. at 30. 

' Id. at 30. See also 2007 CRS Report on Saudi Arabia Terrorist Financing Issues,” at footnote 
6. But see “Tangled Paths: A Sprawling Probe Of Tenor Funding Centers in Virginia,” Wall 
Street Journal Glenn Simpson (6/21/2004)(“Soon thereafter, a senior al Qaeda leader held by the 
Justice Department in New York confirmed the document's authenticity in an interview with the 
FBI, referring to it as the Golden Chain, U.S. government court filings say.”). 

‘ 2007 CRS Report on Saudi Arabia Tenorist Financing Issues,” at 3 . 

’ A copy of the Golden Chain document was provided as Exhibit 5 to the Amaout Evidentiary 
Proffer. Copies have also appeared on the Internet with English translations, See, e.g.,“The 
Golden Chain,” Wikipedia, http;//en.wikipedia.org/wiki/The_Golden_Chain. 

See The 9/1 1 Commission Report: Final Report of the National Commission on Terrorist 
Attacks upon the United States . (7/22/2004), at 55. See also, e.g., Amaout Evidentiary Proffer at 
29-30; The Underwriting Members of Lloyd’s Syndicate 3500 v. Saudi Arabia . Case 3:11 -cv- 
00202-KRG (USDC WDPA), Civil Complaint (9/8/11), 
http://www.investigativeproject.org/documents/case_docs/1680.pdf, at 20. 
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A! Rajhi name."^^ HSBC was clearly on notice about both the al Qaeda 
list and its inclusion of Sulaiman bin Abdul Aziz Al Rajhi.' 

2002 Search Warrant. Also in March 2002, as part of Operation 
Green Quest, a U.S. Treasury effort to disrupt terrorist financing 
activities in the United States,"^"' U.S. law enforcement agents 
conducted a search of 14 interlocking business and nonprofit entities in 
Virginia associated with the SAAR Foundation, an Al Rajhi-related 
entity, and the Al Rajhi family. Over 150 law enforcement officers 
participated in the search, generating widespread media coverage."^" A 
law enforcement affidavit supporting the search warrant detailed 
numerous connections between the targeted entities and Al Rajhi family 
members and related ventures."^’ The affidavit stated that over 100 
active and defunct nonprofit and business ventures in Virginia were part 
of what it described as the “Safa Group,”"'^* which the United States had 
reasonable cause to believe was “engaged in the money laundering 
tactic of ‘layering’ to hide from law enforcement authorities the trail of 
its support for terrorists.”"^’ 

The SAAR Foundation is a Saudi-based nonprofit organization, 
founded by Sulaiman bin Abdul Aziz Al Rajhi in the 1970s, named after 
him, and used by him to support a variety of nonprofit endeavors, 
academic efforts, and businesses around the world. In 1983, the SAAR 
Foundation formed a Virginia corporation, SAAR Foundation, Inc., and 
operated it in the United States as a tax-exempt nonprofit organization 
under Section 501(c)(3) of the U.S. tax code."^’ In 1996, another 
nonprofit organization was incorporated in Virginia called Safa Trust 
Inc.' These and other nonprofit and business ventures associated with 


See, e.g., “Tangled Path.s: A Sprawling Probe Of Terror Funding Centers in Virginia,” Wall 
Street Journal . Glenn Simpson (6/21/2004). 

' See, e.g., 7/26/2007 email from OCC Joseph Boss to HBUS Alan Ketiey, “Saudi’s,” HSBC 
OCC 2830874-879 

(transmitting 2007 Wall Street Journal article to HBUS and requesting its response); 

2/3/2010 email from HBUS Jon K. Jones to HBUS Alt S. K.azmy, “Islami Bank 
Bangladesh Ltd. - Poss SCC,” OCC-PSL00453499 (“Al-Rajhi Bank got [its] start as a 
money chaining network and (Chairman Suleiman al-Rajhi appeared on the ‘Golden 
Chain’ of wealthy investors who supported Osama bin Laden.)”). 

' See “Operation Green Quest Overview,” U.S. Customs and Border Protection press release 
(2/26/2002), 

http://www,cbp.gov/xp/cgov/newsroom/news_releases/archives/legacy/2002/22002/02262002.x 

ml. 

' See “Affidavit in Support of Application for Search Warrant,” In Re Searches Involving 555 
Grove Street. Herndon, Virginia and Related Locations , (USDC EDVA), submitted by David 
Kane, Senior Special Agent, U.S. Customs Service (hereinafter “Kane afRdavif ’), at 3-4 
(describing investigation). 

See, e.g., “Raids Seek Evidence of Money Laundering,” New York Times . Judith Miller 
(3/21/2002). 

’ See Kane affidavit throughout, but in particulars^ 178-180. 

’ Kane affidavit at S I (page 6). 

’ Kane affidavit at S 5. 

Kane affidavit at S 132. 

Kane affidavit at SS 135-136. 
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the A1 Rajhi family shared personnel and office space, primarily in 
Herndon, Virginia. In 2000, SAAR Foundation Inc. was dissolved,' 
hut the Safa Trust continued to operate. 

An affidavit filed hy the United States in support of the search 
warrant alleged that the Safa Group appeared to he involved with 
providing material support to terrorism. Among other matters, it alleged 
that members of the Safa Group had transferred “large amounts of funds 
... directly to terrorist-front organizations since the early 1990’s,” 
including a front group for the Palestinian Islamic Jihad-Shikaki Faction, 
a designated terrorist organization.”” It also detailed a $325,000 
donation hy the Safa Trust to a front group for Hamas, another 
designated terrorist organization.”^'' In addition, the affidavit expressed 
suspicion about a transfer of over $26 million from members of the Safa 
Group to two offshore entities in the Isle of Man. The affidavit 
further alleged that “one source of funds flowing through the Safa Group 
[was] from the wealthy Al-Rajhi family in Saudi Arabia.”"'’^ 

The search produced about 200 boxes of information which was 
then analyzed and used in other investigations and prosecutions, 
although neither the SAAR Foundation or Safa Trust has been charged 
with any wrongdoing.”^’ In 2003, Abdurahman Alamoudi, who had 
worked for SAAR Foundation Inc. from 1985 to 1990, as executive 
assistant to its president,”^* pled guilty to plotting with Libya to 
assassinate the Saudi crown prince and was sentenced to 23 years in 
jail.”” He had also openly supported Hamas and Hezbollah, two 
terrorist organizations designated by the United States.”'"' According to 
an affidavit supporting the criminal complaint against him, Mr. 

Alamoudi admitted receiving $340,000 in sequentially numbered $100 
bills from Libya while in London,"'” and planned “to deposit the money 
in banks located in Saudi Arabia, from where he would feed it back in 
smaller sums into accounts in the United States.”" According to the 
affidavit, he also admitted involvement in similar cash transactions 
involving sums in the range of $10,000 to $20,000.”''’ 


' Kane affidavit at T] 132. See also “Raids Seek Evidence of Money Laundering,” New York 
Times . Judith Miller (3/21/2002){stating that, “although officially dissolved,” the SAAR 
Foundation had recently occupied the Virginia offices subject to search). 

Kane affidavit at ^ 3. 

Kane affidavit at TlTi 10(g), 161. Executive Order 12947(1995). 

Kane affidavit at ^ 103-104. 

Kane affidavit at ]] 111 (emphasis in original omitted). 

Sec In re Grand Jury Subpoena (T-1 12) . 597 F.3d 189 (4th Cir. 2/24/2010), at 191-192. 

See United States v. Alamoudi. (USDC EDVA)(9/30/2003), “Affidavit in Support of 
Criminal Complaint,” submitted by Brett Gentrup, Special Agent with U.S. Immigration and 
Customs Enforcement, (hereinafter “Gentrup affidavit”), % 29. 

' See “Abdurahman Alamoudi Sentenced to Jail in Terrorism Financing Case,” press release 
prepared by U.S. Department of Justice (10/15/2004). 

See Gentrup affidavit at | 35. 

' Gentrup affidavit at 39, 43 
' Gentrup affidavit at 1 44. 

Gentrup affidavit at T1 45. 
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The documents seized in the 2002 search were returned after about 
1 8 months, but in 2006, were sought again through subpoenas issued by 
a Federal grand jury in Virginia. The Al-Rajhi related business and 
nonprofit ventures initially refused to re-supply the documents, then 
turned them over after a court imposed civil contempt fines totaling 
$57,000."'*^ The A1 Rajhi group then engaged in a four-year, 
unsuccessful court battle to nullify the fines. In addition, in 2004, A1 
Rajhi Bank filed a defamation lawsuit against the Wall Street Journal for 
a 2002 article describing how Saudi Arabia was monitoring certain 
accounts due to terrorism concerns.”'’^ In 2004, the lawsuit settled; the 
Wall Street Journal did not pay any damages. It also published a letter 
from the bank’s chief executive,”'*® and its own statement that the 
newspaper “did not intend to imply an allegation that [A1 Rajhi Bank] 
supported terrorist activity, or had engaged in the financing of 
terrorism.”* *'’*' 

2003 CIA Report. While the widely publicized 2002 search 
fueled suspicions about A1 Rajhi Bank’s association with terrorist 
financing, a 2003 CIA report, discussed in a news article in 2007, 
provided another basis for concerns about the bank. 

In 2003, the U.S. Central Intelligence Agency (CIA) issued a 
classified report entitled, “A1 Rajhi Bank: Conduit for Extremist 
Finance.”*’’** According to Wall Street Journal reporter, Glenn Simpson, 
this CIA report concluded; “Senior A1 Rajhi family members have long 
supported Islamic extremists and probably know that terrorists use their 
bank.”'*” A later civil lawsuit, filed in 201 1, provided a longer 
quotation from the same CIA report as follows: 

“Islamic extremists have used Al-Rajhi Banking & Investment 
Corporation (ARABIC) since at least the mid-1990s as a conduit 
for terrorist transactions, probably because they find the bank’s 
vast network and adherence to Islamic principles both convenient 
and ideologically sound. Senior al-Rajhi family members have 
long supported Islamic extremists and probably know that 
terrorists use their bank. Reporting indicates that senior al-Rajhi 


See In re Grand Jury Subpoena fT-l 121 . 597 F.3d 1 89 (4th Cir, 2/24/20 1 0). 

Id. 

' Id. See also ‘‘A Court Sheds New Light on Terror Probe,” The New York Sun . Joseph 
Goldstein (3/24/2008). 

' The article was ”Saudis Monitor Key Bank Accounts For Terror Funding at U.S. Request,” 
Wall Street Journ al. James Dorsey (2/6/2002), 
http://online.wsj.eom/article/SB1098i35S7680048521.html. 

”AI Rajhi Bank’s Statement on Journal’s Article.” Wall Street Journal . Abdullah Sulaiman 
Al Rajhi (10/19/2004), http://online.wsj.com/article/SBI098i352i879I48492.htmI. 

' HSBC Financial Intelligence Group Report of Findings on Al Rajhi Bank, HSBC OCC 
7519413 (12/13/2004). 

! Lto Saudi Bank Favored by Extremists,” Wall Street Journal . Glenn Simpson 

(7/26./2007), http://online.wsj.eom/article/SBlI8530038250476405.html. 

Id. 
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family members control the bank’s most important decisions and 
that ARABIC’S princip[al] managers answer directly to Suleiman. 
The al-Rajhis know they are under scrutiny and have moved to 
conceal their activities from financial regulatory authorities.”"^^ 

According to the same Wall Street Journal article by Glenn 
Simpson, the 2003 CIA report alleged that, in 2000, A1 Rajhi Bank 
couriers “delivered money to the Indonesian insurgent group Kompak to 
fund weapons purchases and bomb-making activities.”"” The report 
also allegedly claimed that in 2002, one year after the 9/1 1 attacks, the 
bank’s managing director ordered the Al Rajhi Bank’s board “to explore 
financial instruments that would allow the bank’s charitable 
contributions to avoid official Saudi scrutiny.”"^"' The 2003 CIA report 
allegedly stated further that extremists “ordered operatives in 
Afghanistan, Indonesia, Pakistan, Saudi Arabia, Turkey, and Yemen” to 
use Al Rajhi Bank."” 

2005 Al Haramain Prosecution. A third source of suspicion 
regarding Al Rajhi Bank’s possible links to terrorism arose from a 2005 
Federal indictment of al-Haramain Islamic Foundation Inc. and two of 
its senior officials. Al-Haramain Islamic Foundation is a Saudi-based 
nonprofit organization that, in 2005, operated in more than 50 countries 
around the world."” Beginning in 2002, the United States designated 
multiple branches of the Foundation as terrorist organizations."” After 
freezing the assets of two such branches for “diverting charitable funds 
to terrorism,” a U.S. Treasury Department press release stated: “The 
branch offices of al Haramain in Somalia and Bosnia are clearly linked 
to terrorist financing.”'”* In 2004, a Treasury Department statement 
called al-Haramain Foundation “one of the principal Islamic NGOs 
[Non-Governmental Organizations] providing support for the Al Qaida 
network and promoting militant Islamic doctrine worldwide.”'”^ That 
same year, the United States added the U.S. branch of the organization 


The Underwritiniz Members of Lloyd's Syndicate 3500 v. Saudi Arabia . Case 3:1 1-cv- 
00202-KRG (USDC WDPA), Civil Complaint (9/8/2011), 

http://www.investigativeproject.org/documents/case_docs/1680.pdf (hereinafter “Lloyd’s 
lawsuit”), at f 370. 

i 153 ttyg Tracks Saudi Bank Favored by Extremists,” Wall Street JoumaL Glenn Simpson 
(7/6/2007), http ;//online. wsj.com/article/SBl 18530038250476405.html. 

Id. 

"”ld. 

' United States v. al-Haramain Islamic Foundation Inc. , Case No. 6:05-CR-60008-H0 (USDC 
Oregon) Indictment (2/17/2005), at ^ B. 

' ’ See “Blocking Property and Prohibiting Transactions With Persons Who Commit, Threaten 
To Commit, or Support Terrorism,” 66 FR 49079 (9/23/2001). 

3/1 1/2002 “Designations of Somalia and Bosnia-Herzegovina Branches of Al-Haramain 
Islamic Foundation,” U.S. Treasury DepartmCTt, 
http://vAvw.fas.Org/irp/news/2002/03/dot03U02fact.htraL 

“Treasury Announces Joint Action with Saudi Arabia Against Four Branches of al-Haramain 
In The Fight Against Terrorist Financing,” U.S. Treasury Department press release No. JS-1 108 
(1/22/2004), http://www.treasury.gov/press/releases/jsU08.htm. 
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to the SDN list for acting as an “underwrit[er] of terror.”"®'’ The Saudi 
government issued a similar 2004 designation and ordered the al- 
Haramain Islamic Foundation to be dissolved.' In 2008, however, 
Treasury noted that, despite the Saudi government’s action, the 
organization’s leadership appeared to have reconstituted itself under a 
new name and continued to operate."®’^ 

In the United States, representatives of the al-Haramain Islamic 
Foundation formed, in 1999, an Oregon corporation named al-Haramain 
Islamic Foundation, Inc. which set up offices in Ashland, Oregon."®^ 
The corporation was operated as a nonprofit organization under Section 
501(c)(3) ofthe U.S. tax code."®'* In 2004, the Office ofForeign Assefs 
Control (OFAC) at the Treasury Department deemed al-Haramain 
Islamic Foundation Inc. in Oregon a “Specially Designated Global 
Terrorist Entity.”' '®® In 2005, the United States indicted the Foundation 
and two of its senior officials, Pirouz Sedaghaty and Soliman Al-Buthe, 
who was later designated by the United States as a terrorist financier."®® 
Since both men were out of the country when the indictment was filed, 
the case was dormant for two years."®’ In 2007, Mr. Sedaghaty returned 
to the United States and was arrested at an airport. ' '®® In 20 1 0, he stood 
trial, was convicted of two felonies, and sentenced to nearly three years 
in prison."®*’ In the incident that led to his conviction, he and Mr. Al- 
Buthe used funds from an Egyptian donor to purchase $130,000 in U.S. 
travelers cheques from a bank in Oregon; Mr. Al-Buthe then traveled to 
Saudi Arabia and, in 2000, cashed the travelers cheques at A1 Rajhi 


‘ See Executive Order No. 1 3,224 (2004); “U.S.-Based Branch of A1 Haramain Foundation 
Linked to Terror,” U.S. Treasury Department press release (1 1/9/2004). 

' See, e.g., 2007 CRS Report on Saudi Arabia Terrorist Financing Issues, at 19. 

See “Combating Terrorism: U.S. Agencies Report Progress Countering Terrorism and Its 
Financing in Saudi Arabia, but Continued Focus on Counter Terrorism Financing Efforts 
Needed.” U.S. Govemment Accountability Office, GAO-09'883 (Sept. 2009), 
hitp;//vvww.gao.gov/new.items/d09883.pdf, at 35. 

See United States v. al-Haramain Islamic Foundation Inc, , Case No. 6:05-cr-60008-HO 
(USDC Oregon) Indictment (2/17/2005), at H B. 

1164 

' See Executive Order No. 13224 (2004); “U.S. -Based Branch of Al Haramain Foundation 
Linked to Terror,” U.S. Treasury Department press release (! 1/9/2004); Al Flaramain Islamic 
Foundation Inc, v. U.S. DepT of Treasury . 660 F.3d 1019, 1023 (9th Cir. 201 1). 

' See United States v. al-Haramain Islamic Foundation Inc. . Case No. 6:05-CR-60008-H0 
(USDC Oregon) Indictment (2/17/2005). The case was featured in the U.S. State Department’s 
annual report on money laundering issues. See 2005 International Narcotics Control Strategy 
Report, Volume II, “Money Laundering and Financial Crimes,” U.S. Stale Department, at 16. 
See also “U.S. -Based Branch of Al Haramain Foundation Linked to Terror,” U.S. Treasury 
Department press release No. JS-I895 (9/9/2004); “Tax Case Ends Against Charily,” Les Zaitz, 
The Oregonian (8/5/2005). 

^ Because neither individual was in the United States, the prosecution later dropped the 
Foundation from the case, to prevent the case from proceeding in a piecemeal fashion. See Al 
Rajhi Banking & Investment Corp- v. Holder . Case No. l:10-MC-00055-ESH, Memorandum of 
Points and Authorities In Support of Petitioner’s Motion to Quash USA Patriot Act Subpoena 

(1/19/2010), at 5. 

1168 

“Former U.S. Head of Al-Haramain Islamic Foundation Sentenced to 33 Months in Federal 
Prison,” U.S. Attorney’s Office for the District of Oregon press release (9/27/1 1), at 1. 
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Bank; the money was then smuggled to violent extremists in 
Chechnya."™ 

A1 Rajhi Bank’s role in the events that formed the basis for the 
prosecution attracted media attention in 2005, when the indictment was 
filed; in 2007, when Mr. Sedaghaty was arrested; and in 2010, when the 
trial took place. Over the years, it became public that Mr. Al-Buthe, a 
designated terrorist financier, had been a client of A1 Rajhi Bank in 
Saudi Arabia in 2000,'”' as had the al-Haramain Islamic Foundation, 
later designated a terrorist organization."^^ In 2007, a Wall Street 
Journal article reported that A1 Rajhi Bank had maintained at least 24 
accounts for the al-Haramain Islamic Foundation and handled unusual 
transactions for it."^^ In January 2010, after the United States served an 
administrative subpoena on Al Rajhi Bank to obtain authenticated bank 
documents for use in the al-Haramain Foundation criminal trial, the bank 
refused to produce them and filed a motion in court to quash the 
subpoena,' leading to media reports that it was refusing to cooperate 
with a terrorist financing prosecution.' 

Links to Suspect Banks. In addition to the Golden Chain 
document, the U.S. search of Al-Rajhi related businesses and nonprofits 
in the United States, and the al Haramain Foundation prosecution, still 
another source of concern about Al Rajhi Bank involves its alleged links 
to other banks suspected of financing terrorism. 

In 201 1, a civil lawsuit filed by an insurance syndicate against 
Saudi Arabia and others seeking to recover insurance payments made 
after the 9/1 1 terrorist attack discussed two of those suspect banks, Bank 


"™!d. 

See, e.e.. Al Raihi Banking & Investment Com, v. Holder . Case No. 1;IO-MC-00055-ESH, 
Memorandum of Points and Authorities In Support of Petitioner’s Motion to Quash USA Patriot 
Act Subpoena (filed 1-19-10), at 6. 

' See, e.g., “U.S. Tracks Saudi Bank Favored by Extremists,” Wall Street Journal, Glenn 
Simpson (7/26/2007), http://oniine,wsj.com/article/SBU8530038250476405.html, See also 
7/26/2007 email from OCC Joseph Boss to HBUS Alan Ketley, “Saudi’s,” HSBC OCC 3391185 
(transmitting the article to HBUS); email from HBUS Ketley to HBUS colleagues, Saudi's,” 
HSBC OCC 3391262 (sharing the article within HBUS). 

1173 Tracks Saudi Bank Favored by Extremists,” Wall Street Journal. Glenn Simpson 
(7/26/2007), http;//online.wsj.com/article/SBl 18530038250476405.html. 

See Al Rajhi Banking & Investment Corp. v. Holder . Case No. l:10-MC-00055-ESH, 
Memorandum of Points and Authorities In Support of Petitioner’s Motion to Quash USA Patriot 
Act Subpoena (1/19/2010). This case was later closed as “moot.” See Order Dismissing Action 
As Moot (3/2/2010) (“It is hereby ordered that this action is dismissed as moot in light of the 
ruling issued on February 26, 2010, by Judge Michael R. Hogan of the U.S. District Court for the 
District of Oregon in United States v. Sedaghaty, . .granting the government’s motion to compel 
petitioner Al-Rajhi Banking and Investment Corp.’s compliance with an administrative 
subpoena.”) (emphasis in original omitted). 

See, e.g., “Saudi Bank Refuses to Cooperate in U.S. Investigation into Terrorist Financiers,” 
For The Record - The IPT Blog (1/26/2010), http://www.invesUgativeproject.org/1753/saudi- 
bank-refuses-to-cooperate-in-us. 
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al Taqwa and Akida Bank Private Ltd."’* Both banks have been 
deemed by the United States as Specially Designated Global Terrorist 
Entities."” Regarding Bank al Taqwa, the lawsuit noted that two 
individuals who were former executives at Bank al Taqwa, Ibrahim 
Hassabella and Samir Salah, were also associated with the SAAR 
Foundation."’* Mr. Hassabella was a former secretary of al Taqwa 
Bank and a shareholder of SAAR Foundation Inc. Mr. Saleh was a 
former director and treasurer of the Bahamas branch of al Taqwa Bank, 
and president of the Piedmont Trading Corporation which was part of 
the SAAR network. The U.S. Treasury Department has stated: “The Al 
Taqwa group has long acted as financial advisers to al Qaeda, with 
offices in Switzerland, Lichenstein, Italy and the Caribbean.”"™ 
Regarding Akida Bank, the lawsuit complaint alleged that Sulaiman bin 
Abdul Aziz Al Rajhi was “on the board of directors of Akida Bank in 
the Bahamas” and that “Akida Bank was run by Youssef Nada, a noted 
terrorist financier.”"** 

As explained below, Al Rajhi Bank was also associated with 
Islami Bank Bangladesh Ltd., which was located in a country at high 
risk for money laundering, provided an account to a Bangladeshi 
accused of involvement with a terrorist bombing, and had been fined 
three times for violating AML requirements in connection with 
providing bank services to “militants.”"*' HSBC’s own research 
indicated that the Al Rajhi group held about one-third of the bank’s 
shares. In addition, Al Rajhi Bank provided a correspondent account to 
Social Islami Bank, a Bangladesh-based bank whose largest single 
shareholder for many years was the International Islamic Relief 
Organization, which was designated by the United States in 2006, as a 
terrorist organization."*’ A .second shareholder was the precursor to the 
Benevolence Islamic Foundation, also later designated by the United 
States as a terrorist organization. 


' See Lloyd’s lawsuit at 459-460. This lawsuit was withdrawn 1 1 days after being filed, 
with no prejudice against its re-filing in the future. See Lloyd’s lawsuit. Notice of Voluntary 
Dismissal, Docket document 5, 9/I9/201 1. 

See “The United States Designates Twcnty-P'ive New Financiers of Terror,” U.S. Treasury 
Department press release (8/29/2002), http://www.treasury.gov/press-center/press- 
releases/Pages/po3380.a5px. See also E.O. 13224, “Blocking Property and Prohibiting 
Transactions With Persons Who Commit, Threaten To Commit, or Support Terrorism,” 66 FR 
49079 (9/23/2001); Kane affidavit at ^ 112. 

Lloyd’s lawsuit at 459. 

Statement by Treasury Secretary Paul O’Neill (1 1/7/2001). 

‘ Lloyd’s lawsuit at 459. Youssef Nada was designated as a terrorist financier by the United 
States in November 2001 . See “Recent OFAC Actions,” U.S. Department of the Treasury, 

( i 1/7/200 1 ), http://www.treasury.gov/resource-center/sanctions/OFAC- 
Enforcement/Pages/2001 1 107.aspx. 

See Subsection 1(1), below. 

’ See Subsection 1(2), below. See also “Islamic Charity Charged with Terrorist Financing,” 
U.S. Justice Department, (1/16/2008), 
http://www.justice.gov/usao/mow/neAw2008/iara.ind2.htm. 
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Suspect Bank Clients. A final source of concern about A1 Rajhi 
Bank involves accounts it provided to specific clients linked to 
terrorism. The accounts provided to the al-Haramain Islamic 
Foundation and Soliman Al-Buthe, both designated by the United States 
as linked to terrorism, have already been discussed. Another example is 
the International Islamic Relief Organization (IIRO) which, as 
mentioned earlier, is a Saudi-based nonprofit organization which was 
added to the SDN list by the United States for “facilitating fundraising 
for A1 Qaida and affiliated terrorist groups”."*^ In 2003, HSBC’s 
internal Financial Intelligence Group (FIG) raised questions about the 
IIRO; in 2006 a FIG report noted that the IIRO had been linked to A1 
Qaeda and other terrorist groups, plots to assassinate President Bill 
Clinton and the Pope, attacks on the Brooklyn Bridge and Lincoln 
Tunnel, and the 1993 attack on the World Trade Center."*’' According 
to a CRS report, press reports indicated that, until at least December 
2004, the IIRO had arranged for donors to send donations directly to 
accounts it held at A1 Rajhi Bank, advertizing the accounts in various 
publications."*^ In addition, the Lloyd’s lawsuit alleged that A1 Rajhi 
Bank made or arranged for large donations to the IIRO."** Sulaiman 
bin Abdul Aziz A1 Rajhi, the most senior official at Al Rajhi Bank, is 
also alleged to have been an officer of IIRO."*’ 


See 8/3/2006 press release, “Treasury Designates Director, Branches of Charity Bankrolling 
Al Qaida Network,” U.S. Treasury Department, reprinted in 8/3/2006 email from HBUS Sharyn 
Malone to HBUS Stephanie Napier and others, “Social Investment Bank, Bangladesh,” HSBC 
OCC 3259936. See also 8/3/2006 “Treasury Takes Additional Measures to Combat Iranian 
WMD Proliferation Iranian Nuclear & Missile Firms Targeted,” Treasury press release, 
http://\vww.treasury.gov/press*center/press-rclcases/Pages/hp45.aspx. 

8/4/2006 FIG Report on Findings (Update) for Social investment Bank Limited, OCC-PSI- 
00823818 at 12.; 1 1/2003 FIG Report on Findings for Social Investment Bank, Ltd., OCC-PSl- 
00823818, at 18. See also In Re September 1 1'" Litigation . C.A. 04-7280 (S.D.N.Y. 2010), at H 
371, 

' See, e.g., 2007 CRS Report on Saudi Arabia Terrorist Financing Issues, at 9, footnote 35 
(citing International Islamic News Agency (Jeddah), “IIRO Distributes Aid to Falluja War 
Victims,” (12/21/2004), 

http://www.saudiembassy.net/2003News/News/RelDetail.asp?cIndex=737). See also Lloyd’s 
lawsuit at 445, 447 (alleging IIRO advertised sending donations to its accounts at Ai Rajhi 
Bank, Accounts No. 77700-77709, in its own publications, and Al Rajhi Bank advertised sending 
donations to IIRO accounts at the bank in the Al Igalha Journal in several countries). 

Lloyd’s lawsuit at 55 446-448 (alleging “AI Rajhi Bank collected charitable donations on 
behalf of Sanabel ai Kheer (‘Seeds of Charity’), the financial/investment arm of the IIRO, 
depositing the donations into Sanabel’s Al Rajhi Bank account no. 77707. . . . Under the guise of 
IIRO funds labeled and designated for purposes such as ‘war and disaster’ (Account number for 
Immigrants, Refugees, and Victims of Disasters: 77702) or ‘sponsor a child’ (IIRO Account 
Number of Deprived Children: 77704), charitable organizations such as the IIRO use banks like 
Al Rajhi Bank to gather donations that fund terrorism and terrorist activities. ... Al Rajhi Bank 
also handled IIRO “charitable” contributions intended to benefit suicide bombers by directing Al 
Igatha Journal advertisements ... in Somalia, Sri Lanka, India, and the Philippines under IIRO 
Account number 77709 .... On February 17, 1994, Al Rajhi Bank made a $533,333 donation to 
the Saudi High Commission (‘SHC’) in response to a Cedl for donations for Bosnia and Somalia. 
In August 1 995, Al Rajhi Bank contributed $400,000 to the SHC which was collecting donations 
for Bosnia during a 1 2-hour telethon. The donation was identified by the Arabic newspaper 
Asharq al Awsat.”). 

' See, e.g., Lloyd’s lawsuit at 5[ 9. 
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A1 Rajhi Bank gained notoriety as well for providing banking 
services to several of the hijackers in the 9/1 1 terrorist attack, including 
Abdulaziz al Omari who was aboard American Airlines Flight 1 1 . A 
civil lawsuit described the bank’s involvement with him as follows: 

“[Mjoney was fimneled to the Hamburg, Germany al Qaeda cell 
through the Al Rajhi Bank to businessmen Mahmoud Darkazanli 
and Abdul Fattah Zammar, who in turn provided the al Qaeda cell 
of September ll”' hijackers with financial and logistical support. 
Through Al Rajhi Bank, September 1 1* hijacker Abdulaziz al 
Omari received funds into his Al Rajhi Bank Account Number .... 
Al Omari frequently utilized a credit card drawn on Al Rajhi Bank 
in the planning of the attacks. On September 7, 2001, four days 
before the 9/1 1 attacks, al Omari received a wire transfer from Al 
Rajhi Bank, Buraidah Branch, Jeddah, Saudi Arabia 

Taken together, the information - the Al Qaeda Golden Chain 
document, the 2002 search of Al Rajhi-related entities in Virginia, the 
2003 CIA report, the 2005 al Haramain Foundation indictment and trial, 
the 2007 media reports, the 2010 refusal to provide bank documents in a 
terrorist-financing trial, and the multiple links to suspect banks and 
accountholders - present an unusual array of troubling allegations about 
a particular financial institution. When asked about these matters, Al 
Rajhi Bank has repeatedly condemned terrorism and denied any role in 
financing extremists."*’ In addition, despite all the allegations, neither 
the bank nor its owners have ever been charged in any country with 
financing terrorism or providing material support to terrorists. 

HSBC was fully aware of the suspicions that Al Rajhi Bank and its 
owners were associated with terrorist financing, describing many of the 
alleged links in the Al Rajhi Bank client profile."” On one occasion in 
2008, the head of HSBC Global Banknotes Department told a colleague: 
“In case you don’t know, no other banknotes counterparty has received 
so much attention in the last 8 years than Alrajhi.”"” Despite, in the 
words of the KYC client profile, a “multitude” of allegations, HSBC 
chose to provide Al Rajhi bank with banking services on a global basis. 


' Lloyd’s lawsuit at ^ 449. 

’ See, e.g., “A! Rajhi Bank’s Statement on Joumat’s Article,” Wall Street Jounial . Abdullah 
Sulaiman Al Rajhi (10/19/2004), httn://online.wsi.coin/article/SBl 098 135218791 48492-html : 
“Al Rajhi Bank responds to Wall Street Journal report,” distributed by PR Newswire, 
(10/24/2003), 

http://www.the freeHbrary.com/ Al+Rajhi+Bank+rcspondst-to+Wall+Str eet+Joumal+report.- 
a0109218136. 

See, e.g., 2010 HBUS KYC Profile of Al Rajhi Bank, at 6, 1 1, 

5/2008 email from Christopher Lok to Gary C H Yeung, , “KYC Approval needed for: AL 
RAJHI BANKING & INVESTMENT CORP,” OCC-PSI-00155690. 
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D. HSBC Relationship with A1 Rajhi Bank 

In the United States, A1 Rajhi Bank first became a client of 
Republic Bank of New York during the 1970s; after Republic Bank of 
New York was purchased by HSBC, A1 Rajhi Bank became a client of 
HSBC Bank United States (HBUS).”’^ HSBC also had longstanding 
relationships with A1 Rajhi Bank and other A1 Rajhi-related businesses 
in other parts of the world, including the Middle East, Europe, and the 
Far East, which HSBC had developed separately from the relationship it 
assumed from Republic Bank of New York in the United States."” 
HSBC provided A1 Rajhi Bank with a wide range of banking services, 
including wire transfers, foreign exchange, trade financing, and asset 
management services."” In addition, in 1998, HSBC Group established 
“HSBC Amanah,” a “global Islamic financial services division” 
designed to “serve the particular needs of Muslim communities” in 
compliance with Islamic law, and provided those banking services to A1 
Rajhi Bank and other A1 Rajhi-related businesses."” 

In the United States, a key service was supplying A1 Rajhi Bank 
with large amounts of physical U.S. dollars, through the HBUS U.S. 
Banknotes Department. The physical delivery of U.S. dollars to A1 
Rajhi Bank was carried out primarily through the London branch of 
HBUS, often referred to internally as “London Banknotes.” HBUS 
records indicate that the London Banknotes office had been supplying 
U.S. dollars to A1 Rajhi Bank for “25+ years.”"” In addition to the 
London branch, HBUS headquarters in New York opened a banknotes 
account for A1 Rajhi Bank in January 2001."” The U.S. dollars were 
physically delivered to A1 Rajhi Bank in Saudi Arabia."” 

In January 2005, a little more than three years after the 9/1 1 
terrorist attack on the United States, HBUS decided to end its 
relationship with Al Rajhi Bank due to terrorist financing concerns, as 
explained further below."” Nearly two years later, in December 2006, 
the relationship was reactivated and continued for another four years. 


' See 2010 HBUS KYC Profile of Al Rajhi Bank, at 4. 

'™Id. 

See, e.g., 2010 KYC Profile of Al Rajhi Bank at 8; 5/23/2005 document prepared by CIBM- 
Institutional Banking on Al Rajhi Banking and Investment Corporation, at HSBC OCC 0659988- 

997, at 8. 

' See HSBC website, “About HSBC Amanah,” http://www.hsbcamanah.com/amanah/about- 
amanah. 

' 2010 HBUS KYC Profile of Al Rajhi Bank, at 3, 5. The London Banknotes office supplied 

U.S. dollars to both Al Rajhi Bank and, until its account closed in 2005, Al Rajhi Trading 
Establishment. Another HBUS branch office in Hong Kong also did banknotes business with Al 
Rajhi Bank beginning in 2009 . See HBUS “Know Your Customer Profile - Banknote 

Rajhi Bank (10/29/2010), HSBC-PSI- 


Information,” for the Hong Kong office regarding Al 
PROD-0 102782-784, at 1. 

”^’2010 HBUS KYC Profile of Al Rajhi Bank, at 2, 
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until 2010, when it was ended once more due to a group- wide decision 
by HSBC to exit the U.S. banknotes business. HBUS closed its 
banknotes account with A1 Rajhi Bank in October 2010,'^“ 

From 2000 to 2010, HSBC assigned a series of Global 
Relationship Managers to the A1 Rajhi Bank account. They include 
Shariq Siddiqi'^'" and Shamzani Bin Md Hussain. In 2005, the 
Relationship Manager for KYC approval purposes was Beth Fisher. 
From 2005 to 2010, the head of the HSBC Global Banknotes business 
was Christopher Lok, who was based in New York; the regional 
Banknotes head for the Americas was Gyanen Kumar, who was based in 
New York; and the regional Banknotes head in charge of the London 
Banknotes office was Stephen Allen. 

HSBC classified A1 Rajhi Bank as a “Special Category of Client” 
(SCC), its highest risk designation.'^'*'' This designation was due in part 
to the bank’s location in Saudi Arabia, which HSBC classified as a high 
risk country. In addition, HSBC noted that the bank was owned in part 
by a Politically Exposed Person (PEP), Abdullah Abdul A1 Rajhi, who 
was a major shareholder, a member of the bank’s board of directors, and 
a member of the Northern Borders Provincial Council in Saudi 
Arabia.'^"^ A1 Rajhi Bank was one of only a handful of bank clients that 
HSBC had classified as SCC clients.'^'** 

E. Al Rajhi Trading Establishment 

In addition to Al Rajhi Bank, HSBC provided accounts to Al Rajhi 
Trading Establishment, a money exchange business based in Saudi 
Arabia and owned by Rajhi family members. This account closed in 
2005, when the business, along with seven others, merged into a new 
bank, Al Bilad Bank in Saudi Arabia. 

According to HSBC internal documents, Al Rajhi Trading 
Establishment opened two accounts in 1994, with Republic Bank of 
New York before its purchase by HSBC.'^"^ One account processed 
payments, such as from travelers cheques or money orders, while the 
other handled foreign currency exchange. According to HSBC 


“™ld. 1,15. 

5/23/2005 document prepared by CIBM-Institutionai Banking on Al Rajhi Banking and 
Investment Corporation, HSBC OCC 0659988-997, at 7. 

2010 HBUS KYC Profile of Al Rajhi Bank, at 4. 

1 1/2006 HBUS “Banknotes Trading A Global Reach Organizational Chart As of November 
2006,” OCC-PSI-0000050, at 5. 

2010 HBUS KYC Profile of Al Rajhi Bank, at 1. 

Id. at 1,3. 

Id. at March 2002 email chain among HBUS personnel, “Al Rajhi Trading 
establishment,” OCC-PSI-00381727, at 3. 

March 2002 email chain among HBUS personnel, “A! Rajhi Trading establishment,” OCC- 
PSI-00381727,at3. 
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documents, Republic Bank of New York had a policy of not dealing 
with money exchange businesses, but had made an exception for A1 
Rajhi Trading Establishment due to a “long relationship with the bank, 
their knowledge of the stiff penalties (death) for drug trafficking and 
money laundering within the country and the general good reputation of 
exehange houses in Saudi Arabia.”’^*’* After HSBC purehased Republie 
Bank of New York, the A1 Rajhi Trading Establishment accounts were 
handled by the HSBC International Private Banking Department. 

In 2002, after the 9/1 1 attack on the United States, the International 
Private Banking Department asked to transfer the two aecounts to 
HSBC’s Institutional Banking Department in Delaware which had 
superior ability to monitor account activity.'^'® In connection with the 
transfer, HBUS banker Joseph Harpster wrote: 

“The most recent concern arose when three wire transfers for small 
amounts ($50k, $3k and $1.5k) were transferred through the 
account for names that closely resembled names, not exact 
matches, of the terrorists involved in the 9/1 1 World Trade Center 
attack. ... The profile of the main account reflects a doubling of 
wire transfer volume since 9/01, a large number of travelers checks 
but with relatively low value and some check/cash deposits. 
According to the account officer, traffic increased because they 
have chosen to send us more business due to their relationship with 
Saudi British Bank'^" and the added strength of HBC versus 
Republic. . . . Maintaining our business with this name is strongly 
supported by David Hodghinson of [Saudi British Bank] and 
Andre Dixon, Deputy Chairman of [HSBC Bank Middle East]. 
Niall Booker and Alba Khoury [of HBUS] also support.”'^'^ 

Douglas Stolberg head of Commercial and Institutional Banking 
(CIB) at HBUS forwarded the email to Alexander Flockhart, then a 
senior executive in Retail and Commercial Banking at HBUS, noting: 
“As we discussed previously. Compliance has raised some concerns 
regarding the ongoing maintenance of operating/clearing accounts for A1 
Rajhi group.” He forwarded recommendations on how to handle the 
aeeount: “Retain [International Private Banking] as the relationship 
manager domicile for continuity purposes, and as we understand there is 
interest in further developing private banking business with family 


1208 

1209 

HSBC owned Saudi British Bank. See “Doing Business in Saudi Arabia,” an HSBC 
publication, 

http://www.hsbc.eom/l /contenl/assets/business_bankmg/l 1005 1 l_hsbc_doing_business_in_saud 
i^df. 

‘ March 2002 email chain among HBUS personnel, “Al Rajhi Trading establishment,” OCC- 
PSI-00381727,at3. 
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members. . . . Domicile the actual accounts with Delaware where 
HBUS’s most robust account screening capabilities reside.” His email 
also stated: 

“[T]his has become a fairly high profile situation. Compliance’s 
concerns relate to the possibility that A1 Rajhi’s account may have 
been used by terrorists. If true, this could potentially open HBUS 
up to public scrutiny and /or regulatory criticism. SABB [Saudi 
British Bank] are understandably keen to maintain the 
relationships. As this matter concerns primarily reputational and 
compliance risks, we felt it appropriate for SMC [Senior 
Management Committee] members to be briefed ... so that they 
may opine on the acceptability of the plan. Please advise how you 
would prefer us to proceed.”'"'^ 

Mr. Harpster reported a week later that Mr. Flockhart had decided to 
transfer the accounts to HBUS in the Delaware office. 

Three years later, in 2005, eight Saudi money exchangers, 
including A1 Rajhi Trading Establishment, were merged into a new A1 
Bilad Bank in Saudi Arabia.'^''* The HSBC accounts for A1 Rahji 
Trading Establishment closed in November 2005.'^'^ 

F. 2005: Decision to Sever Ties with A1 Rajhi Bank 

In 2005, despite its longstanding relationship with A1 Rajhi Bank, 
HSBC Group Compliance decided that its U.S.-based businesses should 
sever ties with A1 Rajhi Bank due to terrorist financing concerns. To 
carry out this decision, on January 28, 2005, Teresa Pesce, head of 
HBUS AML Compliance, sent an email to HBUS personnel entitled, 

“Al Rahji Trading/Al Rahji Banking”: 

“As some of you may know, the above named clients have been 
under evaluation by US and Group Compliance based, among 
other things, on relationships maintained with entities/countries on 
the OF AC list. Additionally, US law enforcement has placed these 
entities under scrutiny. After much consideration. Group 
Compliance has recommended that the US businesses sever ties 
with these clients based on the current regulatory environment and 


See April 2005 HBUS Financial Intelligence Group (FIG) Report of Findings (Update) on Al 
Rajhi Trading Establishment, HSBC OCC 2725168-169. Another Al Rajhi-related business, the 
Al Rajhi Commercial Foreign Exchange, was also one of the eight businesses that merged into 
Al Bilad Bank. See 7/13/2005 HBUS Financial Intelligence Group (FIG) Report of Findings 
(Update) on Al Rajhi Commercial Foreign Exchange, HSBC OCC 2725 1 67- 1 68. 

4/12/12 HSBC legal counsel response to Subcommittee inquiry. 

'^^^2010 HBUS KYC Profile of Ai Rajhi Bank, at 2 (“relationship exiled and deactivated on 2 
February 2005 due to TF issues”). 
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the interest of US law enforcement. Accordingly, I will not 

approve customer profiles for or transactions with these entities. 

Please make appropriate arrangements. I am available to answer 

any questions you might have.”'^” 

At the time the email was issued, A1 Rajhi Bank had not been 
indicted, designated as a terrorist financier, or sanctioned by any 
country, including the United States. HSBC Group Compliance based 
its decision on concerns that the bank had relationships “with 
entities/countries on the OFAC list,” the bank was of “interesf’ to U.S. 
law enforcement which had placed it “under scrutiny,” and severing the 
relationship was called for in light of the “current regulatory 
environment.”’^’* 

The 2005 decision was made several years after the 9/1 1 terrorist 
attack, as U.S. law enforcement and bank regulators directed increasing 
scrutiny to terrorist financing issues. As discussed earlier, in 2004, the 
9/1 1 Commission issued its report which included information on the 
role of Saudi Arabia in financing terrorism, described the “Golden 
Chain” of al Qaeda’s financial benefactors, and noted that one of the 
hijackers had an account at Al Rajhi Bank. Congress held hearings on 
that report. The media also disclosed in 2004, that Al Rajhi Bank’s most 
senior official was on the Golden Chain list.'^'^ In addition, 2004 saw 
the United States designate as terrorist organizations several Saudi-based 
nonprofit organizations that were also clients of Al Rajhi Bank, 
including the International Islamic Relief Organization and the al 
Haramain Foundation, adding them to the OFAC list of entities with 
which U.S. persons were prohibited from doing business. U.S. 
prosecutors also intensified their investigation of al Haramain 
Foundation Inc., whose 2005 indictment would disclose that its senior 
officials had cashed $130,000 in U.S. travelers checks at Al Rajhi Bank 
in Saudi Arabia and used the money to support violent extremists in 
Chechnya. 

On the regulatory front, in July 2004, this Subcommittee held 
hearings on how U.S. banks and U.S. bank regulators had failed to fully 


1/28/2005 email from HBUS Teresa Pesce to numerous HSBC colleagues, “Al Ra[jh]l 
Trading/AI RaQhjl Banking,” HSBC OCC 1884218. 

When asked about this decision, David Bagley, the head of HSBC Group 
Compliance, told the Subcommittee that there was no single incident that led to the 
decision. Subcommittee interview of David Bagley (5/10/2012). 

See, e.g., “Tangled Paths: A Sprawling Probe Of Terror Funding Centers in Virginia,” Wail 
Street Journal . Glenn Simpson (6/21/2004). 

“Blocking Property and Prohibiting Transactions With Persons Who Commit, Threaten To 
Commit, or Support Terrorism,” 66 FR 49079 (9/23/2001) (see Annex). 

The U.S. Treasury Department was later quoted as saying Al Rajhi Bank maintained at least 
24 accounts and handled unusual transactions for the al Haramain Foundation. “US Tracks 
Saudi Bank Favored by Extremists,” Wall Street Journal. Glenn Simpson (7/26/2007), 
http;//online.wsj .com/article/SB 11 853003 825 0476405.htmL 
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implement the tougher AML requirements enacted into law as part of the 
USA Patriot Act of 2001,'^^^ highlighting Riggs Bank as an example.'^^^ 
Among other measures, the Patriot Act required U.S. financial 
institutions to establish AML programs, conduct special due diligence 
on correspondent accounts opened for foreign banks, and verify the 
identity of accountholders.'^ The law also deemed money laundering 
through foreign banks and the laundering of terrorism proceeds as 
criminal offenses in the United States.'^^^ These new provisions had 
given rise to new bank regulations, new examination requirements, and a 
new emphasis on the importance of AML controls. 

HBUS’ primary U.S. regulator, the OCC, scheduled an AML 
examination of the HBUS banknotes business to take place in 2005.'^^* 
In December 2004, in anticipation of that examination, the HBUS 
Global Banknotes Department had completed a review of its Know Your 
Customer (KYC) client profiles.’^^^ In October 2004, the HSBC Global 
Relationship Manager for A1 Rajhi Bank, Shariq Siddiqi, visited the 
bank and reviewed its KYC/AML procedures in detail.'^^* Mr. Siddiqi 
praised the procedures and noted: “The management appeared fully 
cognizant of the reputational risks associated with terrorism financing, 
and confirmed A1 Rajhi Bank’s strong commitment to combat it.”'^^^ 

Despite that endorsement of the bank’s AML policies and 
procedures, HBUS AML Compliance did not approve the A1 Rajhi Bank 
KYC profile, an action it took with respect to only a few clients out of 
more than 930 active client profiles reviewed. The failure to approve 
the client profile meant that bank personnel were unable to do business 
with the client. HBUS AML Compliance Officer Alan Ketley circulated 


See Title III of the Uniting and Strengthening America by Providing Appropriate Tools 
Required to Intercept and Obstruct Terrorism (USA Patriot Act) Act of 2001, P.L. 107-56 
(10/26/2001). 

“Money Laundering and Foreign Corruption: Enforcement and Effectiveness of the Patriot 
Act, Case Study Involving Riggs Bank,” S.Hrg. 108-633 (July 15 2004). 

See USA Patriot Act, §§ 312, 326, 352. 

See USA Patriot Act, §§ 318, 376, 377. 

See 3/8/2005 email from Daniel Jack, HBUS, to Denise Reilly and Alan Ketley in HBUS, 
“Re: KYC Deactivation Report for Banknotes in Feb-05,” OCC-PSi-00169771 (“There has been 
a surge in KYC updates in the past few months due to clean-up/prep for OCC.”); 6/20/2005 OCC 
Supervisory Letter on Global Banknote AML examination, OCC-PSI-001 07505-5 10 (containing 
six Matters Requiring Attention by the bank related to AML deficiencies) [sealed exhibit]. 

See 1/4/2005 email from Daniel Jack, HBUS Legal Compliance, to HBUS KYC Account 
Managers. HBUS KYC Banknote Traders, and others, “KYC Status of Profiles for Banknotes by 
Office: December 2004,” HSBC OCC 2405588-589. 

5/23/2005 document prepared by CIBM-Institutional Banking on Al Rajhi Banking and 
Investment Corporation, HSBC OCC 0659988-997, at 3. 

Id. at HSBC OCC 0659991. 

1/4/2005 email from Daniel Jack, HBUS Legal Compliance, to HBUS KYC Account 
Managers, HBUS KYC Banknote Traders, and others, “KYC Status of Profiles for Banknotes by 
Office: December 2004,” at HSBC OCC 2405588-589. See also 3/7/2005 email from Daniel 
Jack to Alan Ketley and others, “Re; KYC Deactivation Report for Banknotes in Feb-05,” OCC- 
PSI-001 6977 1 (noting that Al Rajhi Bank was one of only two client profiles “deactivated for 
AML/KYC/Compliancc Reasons”). 
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instructions on how to handle clients, including A1 Rajhi Bank and A1 
Rajhi Trading Establishment, whose profiles had been “denied” by 
HBUS Compliance. He explained that sueh clients must be given “10 
days notice of trading termination unless a dispensation is obtained from 
the AML Director and an updated profile is approved by the AML 
Director within that 10 day period. For current customers that 10 day 
clock will commence on December 7 (so December 17 will be the final 
day we will transact with them unless a dispensation is obtained.)”’^^' 

On January 4, 2005, HBUS AML Compliance head Ms. Pesce sent 
an email to Daniel Jack, an HBUS AML Compliance Officer who often 
dealt with the London Banknotes office, instructing him to: “[pjlease 
communicate that Group Compliance will be recommending terminating 
the A1 Rahji relationship.”'^^^ Mr. Jack inquired as to when that 
recommendation would be made. She responded: 

“I expect to see an email from Susan Wright today. She tells me 
that HBME [HSBC Bank Middle East] does not agree with 
Compliance and will not be terminating the relationship from the 
Middle East, but she/David B[agley] recommend that in light of 
US scrutiny, climate, and interest by law enforcement, we in the 
US sever the relationship from here.”'^^^ 

Susan Wright was then the Chief Money Laundering Control Officer for 
the entire HSBC Group. She reported to David Bagley, head of the 
HSBC Group’s overall Compliance Department. The documents do not 
explain why HSBC Middle East disagreed with the decision or why it 
was allowed to continue its relationship with A1 Rajhi Bank, when 
HSBC’s Group Compliance had decided to sever the relationship 
between the bank and other HSBC affiliates due to terrorist financing 
concerns. 

The decision to sever ties with A1 Rajhi Bank was announced 
internally within HSBC on January 28, 2005. The decision clearly 
affected some HSBC affiliates, such as HBUS and its London Banknotes 
office which discontinued transactions with A! Rajhi Bank, but not 
others, such as HSBC Bank Middle East which continued doing business 
with A1 Rajhi Bank and other A1 Rajhi entities. The Subcommittee 


12/6/004 email from HBUS Alan Ketley to HSBC Christopher Lok, HBUS Stephen Alien, 
and others, “KYC Profiles - Impact of CO Denial,” HSBC OCC 3185023-025. 

1/4/2005 email from Teresa Pesce to Daniel Jack, “KYC Status of Profiles for Banknotes by 
Office: December 2004,” HSBC OCC 2405588. 

1233 

See, e.g., 1/4/2005 email from Teresa Pesce to Daniel Jack, “K.YC Status of Profiles for 
Banknotes by Office; December 2004,” HSBC OCC 2405588. See also, e.g., 1 1/17/2006 email 
from Salman Hussain to David filing, Gordon Brown, Stephen Allen, and others, “A1 Rajhi Bank 
KYC & AML Policy,” HSBC OCC 3280496-497; 11/17/2006 email from HBUS Stephen Allen 
to HBUS Beth Fisher and Alan Ketley, “A1 Rajhi Banking,” HSBC OCC 3280505 (both emails 
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asked but has received no explanation as to why the decision bound 
HSBC affiliates in the United States and Europe, but appeared to not 
apply to the Middle East. 

Soon after the decision was announced in January 2005, HSBC 
Group Compliance began to narrow its scope. On February 22, 2005, 
Paul Plesser, head of the HBUS Global Foreign Exchange Department, 
sent an email to a colleague asking whether, despite the HSBC Group 
Compliance decision, his office could continue to engage in foreign 
exchange trades with A1 Rajhi Trading Establishment.’"^^ He was told 
by a trader from the Banknotes department; “For us is business as 
usual.”'^^* Mr. Plesser double-checked with HBUS AML Compliance 
officer Alan Ketley, asking in an email; “so 1 guess we are ok to 
continue trading?” On March 16, 2005, Mr. Ketley affirmed that the 
trades could continue, forwarding an email from Ms. Pesce, head of 
HBUS AML Compliance, stating that the earlier HSBC Group decision 
no longer applied to A1 Rajhi Trading; 

“Group has clarified the Ai Ra[jh]i guidance issued last month. 
They have evaluated Al Ra[jh]i Banking and Al Ra[jh]i Trading 
and now believe that the two are separated enough that 
relationships may be maintained with the latter but not with the 
former. To be clear, recommendation is to sever with Banking 
only at this time.”'^^* 

Mr. Ketley commented; “Looks like you’re fine to continue dealing 
with Al Rajhi. You’d better be making lots of money!”'^^^ 

In May 2005, four months after announcing the decision to sever 
ties with Al Rajhi Bank, HSBC Group Compliance backed down still 
further. It announced that HSBC affiliates could re-establish business 
ties with Al Rajhi Bank, though subtly suggested that HBUS might not. 
David Bagley, head of HSBC Group Compliance, announced the 
decision in a May 23 email sent to HSBC personnel; 

“Having now received the updated KYC from Shariq Siddiqi and 
reviewed the previous information received from Group Securities 


indicating that, in late 2006, HSBC business with Al Rajhi Bank was “substantial,” including 
through the “HSBC Amanah business”). 

1235 2/22/2005 email from Paul Plesser to Georges Atallah, “Al Ra[jh]i Trading/Al RaQh]i 
Banking,” HSBC OCC 31 11 888. 

1236 2/22/2005 email from Georges Atallah to Paul Plesser and others, “Al Ra|jh]i Trading/Al 
Rafjhji Banking,” HSBC OCC 3111 888. 

12372/22/2005 email from Paul Plesser to Alan Ketley, “Al Ra[jh]i Trading/Al Ra[jh]i Banking,” 
HSBC OCC 3111888. 

3/16/2005 email from Alan Ketley to Paul Plesser, “Fw: A] Ra[jh]I Guidance Clarified,” 
HSBC OCC 31 14022. 

Id. 
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I am pleased to confirm that we have revised our recommendation 
in relation to the above. 

Accordingly we have lifted our recommendation against the 
commence or expansion of relationships with the above with 
immediate effect. We will communicate this decision to HBEU 
[HSBC Europe] where I believe there are a number of pending 
applications. 

Whilst we will advise HBUS CMP [Compliance] of the revised 
view within GHQ CMP [Group Headquarters Compliance] 
nevertheless I believe it will remain appropriate for HBUS CMP in 
conjunction with HBUS senior management to reach their own 
determination with regard to the expansion of business with A1 
Rajhi within the US. Although the revised view from GHQ CMP 
ought to be a material matter causing them to reconsider their 
position nonetheless, and particularly in the current US 
environment, I do not believe it is appropriate for us to seek to 
influence their determination one way or the other.”'^'" 

The effect of this decision was to allow HSBC affiliates to do business 
with A1 Rajhi Bank if they chose, which meant HBUS Compliance had 
to determine for itself whether or not to re-establish ties with A1 
Rajhi, 

G. 2006: HBUS Banknotes Account Reinstated 

Although HBUS Compliance in the United States held out almost 
two years, after a concerted campaign by HBUS Banknotes personnel, it 
ended up following the lead of HSBC Group Compliance and restoring 
the A1 Rajhi Bank account at HBUS in late 2006. One precipitating 
event appears to have occurred in November 2006, when A1 Rajhi Bank 
threatened to pull all business from HSBC, unless the U.S. banknotes 
services were restored. Within a month, the account was reestablished. 

The two HBUS bankers who spearheaded the effort to restore the 
A1 Rajhi account were Christopher Lok, head of the HSBC Global 
Banknotes Department, working from New York, and Stephen Allen, 


The new decision lifted the ban on relationships with both A1 Rajhi Bank and A1 Rajhi 
Commercial Foreign Exchange, another money exchange business owned by Abdullah Abdul Ai 
Rajhi. The decision on Al Rahhi Commercial Foreign Exchange was in addition to the earlier 
decision allowing relationships with Al Rajhi Trading Establishment. 

5/23/2005 email from HSBC David Bagley to HSBC colleagues, “Al Rajhi Bank,” OCC- 
PSI-00144350, at 2. 

At almost the same time, HSBC CIMB-Institutional Banking, which is part of HSBC 
Amanah, approved additional banking services for Al Rahji Bank, including trade, treasury, 
SWIFT wire transfers, foreign exchange, and asset management services. See 5/23/2005 
document prepared by CIBM-Institutional Banking on Al Rajhi Banking and Investment 
Corporation, HSBC OCC 0659988-997, at 8. 
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head of the HBUS Banknotes branch in London. For more than 20 
years, the London office had supplied physical U.S. dollars to A1 Rajhi 
Bank in Saudi Arabia, until forced to stop by the January 2005 decision. 

When HSBC Group Compliance reversed the decision on A1 Rajhi 
Bank for HSBC affiliates on May 23, 2005, HSBC Banknotes personnel 
expressed a desire to reopen their accounts with A1 Rajhi Bank as well, 
while signaling a willingness to wait until the conclusion of an 
upcoming Global Banknotes examination by the OCC.’^"'^ On May 23, 
2005, Mr. Allen, head of the London Banknotes office, forwarded the 
HSBC Group Compliance email regarding A1 Rajhi Bank to Mr. Lok, 
head of the Global Banknotes D^artment, stating: “We’ll have to see if 
this will make any difference!”'^ " Mr. Lok, in turn, sent an email to 
Ms. Pesce, head of HBUS AML Compliance, stating: “After the OCC 
close out and that chapter hopefully finished, could we re-visit A1 Rajhi 
again. London compliance has taken a more lenient view.”'^"'^ 

The on-site work for the OCC AML examination concluded about 
a month later, and the HBUS London branch shortly thereafter began 
to discuss plans to speak with HBUS AML Compliance to allow it to 
resume ties with A1 Rajhi Bank. In a July 2005 meeting to discuss KYC 
issues, members of the HBUS London Banknotes office discussed both 
the results of the OCC examination and next steps to discuss the future 
of HSBC’s relationship with A1 Rajhi Bank: 

“DJ [Daniel Jack]: We gave the OCC 108 client files. The 
primary focus of their finding[s] boiled down to 18 files 
concentrating on the money service business[es] and high risk 
clients. We obtained a satisfactory rating from the OCC although 
their examiners identified 5 issues considered ‘Matters Requiring 
Attention’ with urgency. ... 

Saudi: We lost A1 Rajhi this year - we discussed this in various 
compliance meetings already. SA [Stephen Allen] - a resumption 
decision was put off because of the OCC audit. CL [Christopher 
Lok] to speak to SA after the OCC. Allen to speak to Terry 
[Pesce] before his holidays. A1 Rajhi threatened to pull any new 


See 5/15/2006 OCC letter to HBUS (“On June 12, 2006 we will begin a 3-week Examination 
of Global Banknotes, London. Wc hope to complete on site work on or before June 30, 2006.”). 

5/23/2005 email from HBUS Stephen Allen to HSBC Christopher Lok, “Al Rajhi,” OCC- 
PSI-00]44350,at 1-2. 

5/23/2005 email from HSBC Christopher Lok to HBUS Teresa Pesce, “Al Rajhi,” OCC-PSI- 
00144350, at 1. 

6/20/2005 OCC Supervisory Letter, Global Banknote examination of HSBC, USA, OCC- 
PSL00i07505. [Sealed Exhibit.] 

The MRAs cited by the OCC required the London Banknotes Office to conduct a client file 
review to improve client information and analysis; review client risk ratings; add expected client 
account activity to the client files; revise written procedures to include the need to obtain 
expected client activity; and improve AML training in these areas. Id. 
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business with HSBC, unless we give them a satisfactory reason 
why we won’t trade banknotes with them.”'^'** 

A1 Rajhi Bank communicated the threat to “pull any new business with 
HSBC” unless given a “satisfactory explanation” why HSBC had 
stopped supplying it with U.S. dollars via its relationship managers.'^''* 
That threat was not mentioned again in the documents provided to the 
Subcommittee. 

The next month, in August 2005, Mr. Allen sent Sally Lomas, 

KYC manager for the London Banknotes office, a copy of the Lok email 
asking HBUS AML Compliance to re-visit the A1 Rajhi issue, together 
with the HSBC Group Compliance email allowing re-establishment of 
the relationship for the rest of HSBC. Ms. Lomas forwarded the emails 
to Lynda Cassell, then a senior Compliance official at HBUS. Ms. 
Lomas wrote; 

“Please find attached an email sent by David Bagley, indicating 
that there is no longer a recommendation against expanding 
relationships with A1 Rajhi Bank. I have asked Fig [FISBC 
Financial Intelligence Group] to check, when they do their 
additional work, whether the same part of the A1 Rajhi fa[m]ily is 
in[vol]ved in both Banks.”'^^° 

On the same day, Ms. Pesce, head of HBUS AML Compliance, 
responded to the Lomas email, warning that re-opening the A1 Rajhi 
Bank account should not be viewed as an easy decision: 

“This is not so simple. David [Bagley] does not object insofar as 
HBEU [HSBC Europe] is concerned, but has left it to us to assess 
the US risk. We’ve gotten push back from the OCC on A1 Rahji 
Trading, which is less controversial than the bank. We can revisit 
this, but I am not inclined to push ahead precipitously, especially 
in light of the regulatory scrutiny 

In January 2006, the Banknotes Department tried again. Minutes 
of a London Banknotes meeting to discuss KYC issues recorded the 
following discussion: 

“Banknotes-London would like to resume business with A1 Rajhi, 
although we have ceased trading (due to rumours in terrorist 
financing, the U.S. Government has now dropped those charges 
...)[.] [T]he rest of the HSBC group still deal with them. LC 

ms 7/12/2005 “HBUS London Banknotes Minutes of KYC Review Meeting," OCC-PSI- 
00835857, at 1, 4 (emphasis in original). 

Subcommittee interview of Christopher Lok (3/29/2012) and Alan Ketley (2/16/2012). 
8/10/2005 email from Sally Lomas to Lynda Cassell with copies to Teresa Pesec, Alan 
Ketley, Stephen Allen, and others, “Al Rajhi,” OCC-PSI-00343527. 

8/10/2005 email from Teresa Pesce to Sally Lomas and others, “Al Rajhi,” OCC-PSI- 
00343527. 


5 
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[Lynda Cassell] advised a conference call with Terry [Pesce] is 
needed but before this takes place LC would like to see a memo 
from SA [Stephen Allen] about the history of this matter, 
subsequently Lynda will take this memo to Terry to arrange the 
conference call.”'^^^ 

The minutes reflect that a rumor was circulating among several HSBC 
officials that the U.S. government had “dropped” charges of terrorist 
financing against the bank, which was not the case since no formal 
charges had ever been filed. The minutes also indicate that all HSBC 
affiliates were then allowed to do business with A1 Rajhi Bank other 
than HBUS, a fact used at one point to try to convince HBUS 
Compliance to allow the account. 

In February 2006, Mr. Allen met with Lynda Cassell, a senior 
AML policy advisor, about A1 Rajhi Bank.'^^ That same month, 
Gordon Brown, who had taken over London Banknotes KYC issues 
from Susan Lomas, provided Ms. Cassell with a copy of A1 Rajhi 
Bank’s AML policies and procedures. Ms. Cassell responded with 
an email to Mr. Brown, Mr. Allen, and others explaining: 

“Gordon, in accordance to our previous conversation, the AML 
compliance decision to do business with A1 Rajhi lies with Terry 
Pesce and as suggested, Stephen [Allen] should speak to Terry 
regarding his desire to enter into a Banknotes relationship. ... In 
regards to A1 Rajhi’s AML Policy and Procedures, I find them 
comprehensive .... Their high risk client base generally mirrors 
our high risk type clients.”'^ ^ 

In March 2006, Mr. Allen and Mr. Brown exchanged emails with 
Mr. Ketley, a senior HBUS AML Compliance officer who worked for 
Ms. Pesce. Mr. Allen wrote: 

“[Ajccording to A1 Rajhi, their senior management had been 
advised by the US State Department that they were no longer 
considered to be under suspicion and 1 was wondering whether 
HBUS Compliance or Security may have a contact at State . . . that 
could be explored to verify this statement?”'^^^ 


1/26/2006 “HBUS London Banknotes Minutes of KYC Review Meeting,” OCC-PSI- 
00835851, at 3. 

See 3/21/2006 email from HSBC Stephen Allen to HBUS Alan Ketley and Gordon Brown, 
“AL RaDh]I," HSBC OCC 0695040. 

2/6/2006 email from HSBC Gordon Brown to HBUS Lynda Cassell, “AML Procedures: Ai 
Rajhi Banking & Investment Corp., Saudi Arabia,” HSBC OCC 3250665-667, at 667. 

2/8/2006 email from HBUS Lynda Cassell to HSBC Gordon Brown and others, “AML 
Procedures: AlRajhi Banking & Investment Corp., Saudi Arabia,” HSBC OCC 3250665-667, at 
666 . 

3/20/2006 email exchange between HBUS Alan Ketley and HSBC Stephen Allen and 
Gordon Brown, “AL Ra[jh]I,” HSBC OCC 0695040. 

Id. It is unclear what his email referred to when it said that the State Department told the 
bank that it was no longer “under suspicion.” 
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Mr, Ketley agreed to try to verify the information, and Mr. Allen 
responded: 

“Thanks Alan, anything that you can do is appreciated as, with the 
summer heat approaching, this client becomes very active and is 
commercially extremely important to us - if we can ever get to re- 
start our business with them that is. You may recall me telling you 
that we dealt with A1 Rajhi for 30 years prior to being obliged to 
desist!”'”* 

Also in March 2006, Beth Fisher, an HBUS employee who used to 
be the corporate relationship manager assigned to A1 Rajhi Bank, 
discovered that HBUS had failed to cancel a $50 million line of credit 
for the bank when the relationship ended. She sent an email to Mr. 
Ketley: “1 thought we exited this name!”'^^’ He responded: “I gather 
tha[t] Banknotes wants to revive the relationship but has not yet done 
so.” The next day, Ms. Fisher explained to a colleague: “FYI, this was 
an HBUS London Banknotes (only) relationship which was exited a year 
ago due to AML Compliance concerns. ... This is NO LONGER an 
HBUS relationship. We must remove this bank from our list.”'^^" 

In April 2006, Susan Wright, head of AML Compliance for the 
entire HSBC Group, weighed in, sending an email to Ms. Pesce and Mr. 
Ketley asking, “what the position is with regard to the possibility of a 
Bank Note relationship in London” with A1 Rajhi?'^*' Ms. Pesce 
responded: “It still makes me nervous. Alan has gone out to Steve 
Allen for more KYC/EDD [Know Your Customer/Enhanced Due 
Diligenee].” Mr. Ketley told the Subcommittee that the A1 Rajhi Bank 
relationship was the only one where he was influenced by HSBC 
Group.'”" 

That same day, April 10, 2006, Lynda Cassell sent an email to Mr. 
Allen at London Banknotes requesting information about whether A1 
Rajhi Bank did business in countries subject to OF AC sanctions and 
how they would use U.S. banknotes, if they were restored.'"''" He 
arranged for an inquiry to be sent to A1 Rajhi Bank which then took five 
months to respond with limited information.'"'’'' For example, in 


3/21/2006 email from HSBC Stephen Allen to HBUS Alan Ketley and Gordon Brown, “AL 
RaHh]!,” HSBC OCC 0695039. 

'“‘*'3/20/2006 email from HBUS Beth Fisher to HBUS Alan Ketley, “A1 Rajhi,” HSBC OCC 
3224893. 

1260 3/21/2006 email from HBUS Beth Fisher to HBUS Dorothy Gulman, Alan Ketley and 
Others, “Re: Updated TSO/TCS2 spreadsheet,” HSBC OCC 3225386. 

4/1 8.^2006 email exchange between HSBC Susan Wright and HBUS Teresa Pesce, “AI 
Rajhi," HSBC OCC 4827027. 

Subcommittee interview of Alan Ketley (2/16/2012), 

>2(>3 4/10/2006 email from HBUS Lynda Cassell to HBUS Stephen Alien, “Al Rajhi Banking & 
Investment Corp., Saudi Arabia,” HSBC OCC 3250665. 

MM 9/17/2006 email from Al Rajhi Bank Mohd Fazal Haque to HSBC Salman Hussain, “HSBC 
Bank Middle East Limited,” HSBC OCC 3280498-499. 
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response to a question asking the bank to “confirm the countries outside 
of Saudi Arabia that you do business with,” A1 Rajhi Bank wrote: “All 
our correspondent banks[’] names are available in the Bankers 
Almanac. When asked how the bank ensures it does not utilize 
HBUS products or services in countries that are “OFAC-sanctioned,” the 
bank’s entire response was: “We apply strict due diligence and KYC 
procedures to high risk countries.”' ^ Both replies did not sufficiently 
answer the questions posed. 

The bank provided a slightly longer answer when asked how it 
would use U.S. banknotes: 

“All USD banknotes we purchase [are] for our own branches[’] 
use. . . . [W]e have a big population of around 7 million foreign 
workers in the kingdom who mostly prefer USD when traveling 
back to their countries on vacation or even when remitting money 
to their families .... Also during summer time we have a high 
demand from tourist[s] traveling for their vacations.”'^^’ 

This response suggested that, if resupplied with U.S. dollars, the bank 
would provide those dollars to a wide group of persons in Saudi Arabia, 
many of whom would be expected to transport the dollars across 
international borders into other countries. 

In June 2006, HSBC Bank Middle East added its voice to that at 
the Banknotes group in pushing for the account to be reopened. Salman 
Hussain, then Payments and Cash Management (PCM) Regional Sales 
Manager for HSBC Bank Middle East, sent an email to Mr. Ketley at 
HBUS AML Compliance highlighting the potential revenue if A1 Rajhi 
Bank were to be reinstated as a banknotes customer: 

“I am sending you this email seeking your assistance to address 
any issues pertaining to A1 Rajhi Bank in order to obtain 
compliance approval. ... As I understand from talking to all 
parties that we had an excellent relationship with A1 Rajhi Bank 
until year 2004, banknote[s] (David Illing) stopped doing business 
while being the largest revenue generator in the Middle East. 
Amanah Finance in London (Emran Ali Reza) still trade[s] with A1 
Rajhi Bank .... From my side, I would like to use the Islamic 
Overnight Investment [product] ... as an intro to this bank. The 
amount of potential business/revenue is quite substantial 


’ Id, at HSBC OCC 3280498. 


Id. 

Id. at HSBC OCC 3280499. 

6/22/2006 email from HBME Salman Hussain to HBUS Alan Ketley with copies to others in 
HSBC. “Al Rajhi Banking & Investment Corp. (A1 Rajhi Bank), Saudi Arabia,” HSBC OCC 
3250655. 
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Mr. Hussain sent copies of his email to six colleagues in various HSBC 
departments. 

Mr. Ketley responded to Mr. Hussain on the same day as follows: 

“This must be the week for A1 Rajhi as yours is the second e-mail 
about the bank that I have received. 

HBUS exited the relationship in 2004 primarily for Compliance 
reasons. Earlier this year, Banknotes London expressed their 
desire to re-establish the relationship and there has been a fair 
amount of discussion about whether or how to do this. ... 

[Cjertain questions ... need to be addressed before any 
Compliance decision can be made about resuming the relationship. 
For your information. Banknotes London has been fully embroiled 
in (preparing for and now in the midst of) an OCC exam so are 
unlikely to have been able to pursue these questions. 

The concerns about this name in the US have been rather long 
standing and we will need to get extremely comfortable with A1 
Rajhi before we would be willing to re-establish a relationship.”'^®^ 

In June 2006, the OCC completed the on-site work for its AML 
examination of the London Banknotes Office and, in September, sent a 
Supervisory Letter to HBUS summarizing the results and directing the 
London office to improve its Know Your Customer information and 
client risk ratings.'^ “ 

Also in June 2006, Emma Lawson, who worked for Susan Wright, 
head of AML Compliance for the HSBC Group, sent an email to Mr. 
Ketley and Ms. Pesce inquiring about progress on the A1 Rajhi Bank 
account."^’’ Mr. Ketley responded that they had yet to receive answers 
to certain AML questions, in part because London Banknotes personnel 
“have been fully engaged on an OCC exam for the past few months. 

The exam will end on June 30 so I expect they will revisit the subject 
then.”'™ 

In July 2006, the London Banknotes office held a meeting to 
discuss its business activities and prospects, and again brought up A1 
Rajhi Bank. A summary of the meeting stated: 


6/22/2006 email from HBUS Alan Kelley to HBME Salman Hussain and others in HSBC, 
'‘Al Rajhi Banking & Investment Corp., Saudi Arabia,” HSBC OCC 3250655. 

See 9/26/2006 OCC Supervisory Letter HSBC-2006-29, “London Global Banknote 
BSA/AML Examination,” OCC-PSl-0010755-760. [Sealed Exhibit.] 

6/20/2006 email from HSBC Emma Lawson to HBUS Alan Ketley and Teresa Pesce, “Al 
Rajhi Banking & Investment Corp., Saudi Arabia,” HSBC OCC 328 1 773-774, 

6/20/2006 email from HBUS Alan Ketley to HSBC Emma Lawson and Teresa Pesce, “Al 
Rajhi Banking & Investment Corp., Saudi Arabia,” HSBC OCC 3281773-774. 
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“Saudi Arabia . . . [W]e are experiencing a lot of competition from 
Comraerz [Bank] who are shipping [U.S. dollars] directly from NY 
[New York] into Saudi and they are offering nearly 50% cheaper 
prices than BN [Banknotes] quote, so work has had to be done to 
offer better prices to re-gain volume in this business. We only 
have two customers here ... but we continue to press for the re- 
instatement of A1 Ra[jh]i but there remain ongoing KYC 


In the fall, at the request of Gordon Brown, KYC manager at the 
London Banknotes office, the HSBC Financial Intelligence Group (FIG) 
provided an update to an existing investigative report on A1 Rajhi 
Bank.’^’"' The report was only three pages long and consisted primarily 
of information taken from publicly available publications about the 
bank’s ownership and management. The report also noted that a U.S. 
judge had dismissed the bank from a lawsuit brought by victims of the 
9/1 1 terrorist attack, and that the World-Check database had listed the 
bank’s Chairman and Managing Director Sulaiman Abdul Aziz A1 Rajhi 
under its category for “terrorism.”'^’^ 

Following receipt of the report, the KYC customer profile was 
updated by the HBUS Banknotes Department for A1 Rajhi Bank with a 
view toward reinstating the account. The profile stated in part: 

“A multitude of allegations have surrounded the Al-Rajhi family 
implicating them in a gamut of highly adverse activities ranging 
from money laundering to terrorist financing. The current facts, 
however, do not easily support these allegations. Presently, no 
U.S. or foreign government law enforcement or regulatory body 
has stated, unconditionally, that any member of Al-Rajhi or any 
company controlled by Al-Rajhi is under sanction. The U.S. 
continues to pursue relationship with Saudi Arabia and the Al- 
Rajhi family irregardless of the allegations being levied against 
charitable institutions with some presumably direct and indirect 
links to Al-Rajhi. The major 9/1 1 lawsuit, which included Al- 
Rahji, has been dropped against the family and family-related 
institutions. 

However, there is some reputational risk and the possibility that 
further investigations by U.S. authorities may ultimately uncover 
substantiating proof of the Al-Rajhi connection to terrorism is 


1273 7/24/20 06 “2Q06 London Banknotes Review Meeting,” HBUS London Banknotes branch, 
MSBC OCC 269U 17-124, at 122 (emphasis in original). 

10/24/2006 email from FIG Michael Ellis to HBUS Gordon Brown and others, “Report of 
Findings - A1 Rajhi Banking & Investment Corp. - FIG,” HSBC OCC 75 1 9403-406. 

Id. at 405-406. 
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certainly a concern. Our account relationship with Al-Rajhi will 
be primarily selling USD banknotes out of London. The risk of 
future sanctions and the reputational risk based on the 
aforementioned allegations should be measured against the current 
risks involved in our relationship when ultimately deciding our 
course of action. Therefore, London Banknotes feels that the bank 
poses minimal reputational risk to us.”’^’* 

This justification for renewing the account relationship had two key 
features. First, it asserted that, despite many allegations, no government 
had stated “unconditionally” that Al Rajhi Bank or its owners were 
under sanction for financing terrorism. Second, it focused on “current 
risks” and asserted that, measured against those, Al Rajhi Bank posed 
only “minimal” reputational risk to HSBC. 

On November 14, 2006, Christopher Lok, head of Global 
Banknotes, submitted the new profile for approval to Beth Fisher, the 
HBUS corporate relationship manager formerly assigned to Al Rajhi 
Bank.'^” Ms. Fisher responded to Mr. Lok, with a copy to Mr. Ketley 
and Mr. Jack in HBUS AML Compliance, “I thought this was an HSBC 
exit name.”'^^* Mr. Ketley replied to her, “It was exited once (2004?) - 
Banknotes London is looking to reopen the relationship.” He also 
stated: “The profile had better be bullet proof 

Three days later, Mr. Allen sent Ms. Fisher and Mr. Ketley an 
email urging them to expedite their review of the client profile, which he 
hoped would reestablish the account, citing a threat by Al Rajhi Bank to 
pull all business from HSBC unless the U.S. banknotes services were 
restored: 

“Salman Hussain, the PCM [Payments and Cash Management] 
Regional Sales Manager at HBME [HSBC Bank Middle East] in 
Bahrain, who has recently visited the subject, has called to say that 
Al Rajhi has now run out of patience waiting for us to re-start our 
banknote trading relationship and unless we can complete the kyc 
formalities and advise them accordingly by the end of November, 
they will terminate all product relationships with the HSBC Group 
- which I believe to be substantial. 


2010 HSBC KYC Profile of Al Rajhi Bank, at 1 1-12. HSBC KYC profiles are evolving 
documents that retain past information stretching back multiple years. 

1 1/14/2006 email from HSBC Christopher Lok to HBUS Beth Fisher, “KYC Approval 
needed for: Al Rajhi Banking & Investment Corp,” HSBC OCC 3279589-590. 

^278 1 1/14/2006 email from HBUS Beth Fisher to HSBC Christopher Lok and HBUS Alan 
Ketley, “KYC Approval needed for: Al R^hi Banking & Investment Corp,” HSBC OCC 
3279589. 

1 1/14/2006 email from HBUS Alan Ketley to HBUS Beth Fisher, “KYC Approval needed 
for: Ai Rajhi Banking & Investment Corp,” HSBC OCC 3279589. 
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Their main point of contention is that they feel that they were 
exonerated by all US legal processes from TF [Terrorist Financing] 
suspicion some time ago and yet we have still not been able to re- 
start trading with them. Gordon [Brown] finished our latest 
attempt at the profit on Tuesday and you will find the kyc profile 
to be currently in the TB Pending’ inbox. Could 1 please ask you 
both to expedite your reviews so that we can attempt to prevent the 
loss of an important client to the Group?”*^*“ 

Later in the day, Mr. Allen forwarded to Ms. Fisher and Mr. Ketley 
an email that had been sent by Mr. Hussain after he met with the bank in 
Riyadh, Saudi Arabia.'**' Mr. Hussain had sent the email to Mr. Allen 
and other colleagues, informing them that Cassim Docrat, an A1 Rajhi 
Bank representative, had told him that if the U.S. banknotes business 
wasn’t reestablished by the end of November, A1 Rajhi Bank would 
“cancel any business dealings with HSBC.”"^*^ His email also stated 
that the bank had indicated it had been able to procure a large line of 
credit from one of HSBC’s competitors, JPMorganChase. Mr. Hussain 
wrote: 

“I can’t stress on the fact that we do want to do business with this 
institution from PCM [Payments and Cash Management] side. We 
do stand a good chance to win a US$ clearing account thru offering 
Islamic Overnight Investment Product and the US $ checking 
clearing thru Check 21.”'^*^ 

Mr. Allen also sent a copy of Mr. Hussain’s email to Mr. Lok, 
commenting; “As ever, we are taking an inordinate amount of time to 
make our minds up. I discussed this client with Terry [Pesce], Linda 
[Cassell] and Alan [Ketley] when I visited in February, we eventually 
received and have now answered a rate of supplementary questions from 
Linda and now that she has left, no doubt there will be more questions 
from Alan!’’"^*'* Mr. Lok responded: 

“1 would tell Salman that he should relay the ‘concern’ Alrajhi has 
expressed to the higher ups. To cancel the Amanah business is 
much bigger than not dealing with banknotes. Hopefully 


1280 j 1/17/2006 email from HBUS Stephen Allen to HBUS Beth Fisher and Alan Ketley, “A1 
Rajhi Banking,” HSBC OCC 3280504-505. 

1 1/17/2006 email from Salman Hussain to David Illing, Gordon Brown, Stephen Allen and 
others, “A1 Rajhi Bank KYC & AML Policy,” HSBC OCC 3280496-497. Mr. Salman was 
meeting with the bank, because HSBC Bank Middle East had never ceased doing business with 
it, 

1282 j 1/17/2006 email from Salman Hussain to David Illing, Gordon Brown, Stephen Allen and 
others, “A1 Rajhi Bank KYC & AML Policy,” HSBC OCC 3280496-497. 

1283 y 

1 1/17/2006 exchange between HBUS Stephen Allen to HSBC Christopher Lok, “Alrajhi,” 
OCC-PSI-001 50798. 
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somebody in London will listen and given NYK [New York] 
Compliance a gentle push.”’^*^ 

That afternoon, Ms. Fisher sent an email to Mr. Allen declining to 
approve the new A1 Rajhi Bank client profile: 


“I am not trying to be difficult, but I do not personally feel 
comfortable [being the] IB [institutional banker] approving this 
name. I do not know this bank. Additionally, several years ago, 
when HBUS had relationships with 2 different A1 Rajhi names, 
management would ask me questions about the customer every 
time the name appeared in the US newspapers. I do not know this 
bank personally and therefore not qualified to render an opinion. 
... Therefore, please ask another officer to IB approve. I am IB- 
Denied the KYC, so that my name can be removed as RM 
[relationship manager].”'^® 


Mr. Allen responded: “I quite understand your position and I will try 
another tack.”’^®’ 

After receiving her refusal to approve the A1 Rajhi Bank profile, 
Mr. Allen forwarded it to Mr. Lok and asked: “[Wjho do you suggest 
can/will sign this profile? You will see that it is pressing - perhaps 
David [Wilens] could IS and you could IB approve if Susan [Wright] 
and I sign it again?”'^*® Mr. Lok responded: “At the end of the day, its 
compliance who’s the key. I’ll speak to Ketley & ask him to re-evaluate 
this name.”'^*^ Mr. Lok also sent an email to Mr. Allen informing him: 
“Just spoke to Alan [Ketley]. He’s going to read the whole file ... and 
he’s aware of the ‘threat’ you passed along. His view is Alrajhi may not 
really walk away if we can’t revert by November end, which I agree. . . . 
W[e] should have an answer in the next few weeks.”’^^“ 

Over the next few days, Mr. Ketley reviewed A1 Rajhi Bank’s 
AML policies and procedures. He also asked Mr. Hussain: “What 
revenue projections do you have associated with the US$ clearing and 
Check 21 ‘cash letter”’ services that could be provided by HBUS to A1 


1285 

1286 2 1/17/2006 email from HBUS Beth Fisher to HBUS Stephen Allen, Alan Ketley, 
Christopher Heusler, “A1 Rajhi Banking,” HSBC OCC 3280504. 

1 1/17/2006 email from HBUS Stephen Alien to HBUS Beth Fisher, Alan Ketley, 
Christopher Heusler, “A1 Rajhi Banking,” HSBC OCC 3280504. 

1288 1 1/17/2006 email from HBUS Stephen Allen to HSBC Christopher Lok and David Wilens, 
“Al Rajhi Banking,” OCC-PSI-OOI 50795. In a Subcommittee interview, Mr. Lok explained that 
he retained the authority to act as the institutional banker for a client and so could approve a 
client profile. Subcommittee interview of Christopher Lok (3/29/2012). David Wilens was the 
chief operating officer of the London Banknotes office and later became chief operating officer 
for the entire HBUS Banknotes Department. See Nov. 2006 HBUS organizational chart, OCC- 
PSl-0000050Lat505. 

1289 2 1/17/2006 email from HSBC Christopher Lok to HBUS Stephen Allen and HSBC David 
Wilens, "Al Rajhi Banking,” OCC-PSl-00150795. 

1 1/17/2006 email from HSBC Christopher Lok to HBUS Stephen Allen, "Alrajhi,” OCC- 
PSI-OOI 50796. 
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Rajhi Bank?'^®* Mr. Hussain responded: “Estimated revenue will be a 
minimum of $ 100k per annum.” 

Emma Lawson, in AML Compliance at HSBC Group 
Headquarters, also sent an email to Mr. Ketley asking, “Has progress 
been made.”'^^^ Mr. Ketley responded: 

“Your timing is uncanny and 1 suspect not entirely unrelated to 
correspondence last week from Banknotes and PCM. I have 
reviewed the new documentation provided by the client and 
discussed it with Terry [Pesce] - she has indicated a desire to 
discuss with David. Will keep you posted.”'^’^ 

A later email indicated that Ms. Pesce also raised the matter with “the 
Bank’s executive management.”'^®^' 

On December 1, 2006, Mr. Ketley sent an email to Mr. Allen and 
Salman Hussain, with copies to Ms. Pesce and Mr. Lok, indicating he 
would approve re-opening the banknotes account with A1 Rajhi Bank: 

“[T]he purpose of this note is to confirm to you the willingness of 
HBUS to recommence a relationship with A1 Rajhi Bank. ... 

[I] am satisfied that we can do business with this entity as long as 
our due diligence is thoroughly documented and close transaction 
monitoring takes place by Compliance along with a high degree of 
transaction awareness being maintained by the business. Over a 
period of years there has been much negative publicity associated 
with the principals of this entity - while none of these allegations 
has been proven or substantiated, the notion of ‘no smoke without 
fire’ is one we must bear in mind and any business unit dealing 
with this entity must acknowledge the associated risks. ... [T]o 
paraphrase an expression from English Banking, if it is in my hand 
and in order 1 will approve it.”'^’^ 


1 1/20/2006 email from HBUS Alan Ketley to HSBC Salman Hussain, with copies to 
Stephen Allen, Gordon Brown, and others, “Re: Fw: A1 Rajhi Bank KYC & AML Policy,” 
HSBC OCC 3280945. 

6/20/2006 email exchange between HSBC Emma Lawson and HBUS Alan Ketley, “Fw: A1 
Rajhi Banking & Investment Corp., Saudi Arabia,” HSBC OCC 3281773-774. 

Id. Teresa Pesce, then HBUS AML head, told the Subcommittee that she didn’t recall any 
specific pressure exerted by HSBC Group with regard to the A1 Rajhi Bank relationship, but she 
knew that HSBC Group was interested in maintaining it. Subcommittee interview of Teresa 
Pesce (3/30/12). 

6/3/2008 email from HBUS Denise Reilly to HBUS Alan Williamson, Daniel Jack, Anne 
Liddy and others, “Banknotes with A1 RaUhJI Banking in S.A.,” HSBC OCC 1638575. Ms. 
Pesce told the Subcommittee that the United States initially raised the idea of exiting the A1 
Rajhi relationship. She said she may have raised it with Susan Wright, David Bagley, and “the 
board.” Subcommittee interview ofTeresa Pesce (3/30/2012). 

12/1/2006 email from HBUS Alan Ketley to HBUS Stephen Allen, HSBC Salman Hussain, 
and others, “A1 Rajhi Bank,” OCC-PSI-00150892. Ms. Pesce told the Subcommittee that a court 
dismissal of claims against the bank was dte single most important reason that she decided to re- 
open the relationship. Both Mr. Ketley and Ms. Pesce stated that they did due diligence on A1 
Rajhi Bank, and both thought that the risk could be managed and that they made sure the 
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Mr. Ketley also placed several conditions on the approval of the client 
profile, noting that his approval extended only to banknotes transactions 
and not to cash letter transactions. He also stated that the hank could 
engage in wire transfers, hut “I cannot support paper activity with the 
degree of close monitoring that would he appropriate.”'^*’® 

Mr. Ketley noted that Christopher Lok, head of Global Banknotes, 
would act as the “relationship owner” of the account in place of Beth 
Fisher, and would “approve the profile if he is satisfied with it.”'^^’ 

Mr. Ketley announced the decision to reopen the A1 Rajhi Bank 
account despite, in the words of the 2006 client profile, a “multitude of 
allegations ... implementing [Al-Rajhi] in a gamut of highly adverse 
activities ranging from money laundering to terrorist financing.” The 
decision was also made despite the refusal of the prior A1 Rajhi Bank 
relationship manager, Beth Fisher, to approve the profile, and 
immediately after HSBC learned that the outside KYC database it relied 
on for due diligence. World Check, had identified A1 Rajhi Bank’s most 
senior official as linked to terrorism. The decision also came one year 
after a 2005 U.S. indictment provided a concrete example of A1 Rajhi 
Bank’s alleged link to terrorism, disclosing how senior officials from al- 
Haramain Foundation Inc. had cashed $1 30,000 in U.S. travelers 
cheques at A1 Rajhi Bank in Saudi Arabia and then smuggled the money 
to violent extremists in Chechnya.'"’* 

The 2006 client profile focused on the fact that no country had 
indicted, issued a terrorist-related designation, or sanctioned A1 Rajhi 
Bank or its owners, even though that was also true in 2005, when the 
original decision to close the account was made. The internal HSBC 
emails indicate that two other major factors in the decision to restore the 
account were the threat made by A1 Rajhi Bank to withdraw its business, 
and the promise of new revenue exceeding $100,000 per year. 

H. 2007 to 2010: Additional Troubling Information 

The HBUS Banknotes account for A1 Rajhi Bank was formally 
reestablished on December 4, 2006.'"” Once the account was 
reinstated, HBUS London Banknotes began supplying an estimated 


regulators were aware of the relationship. Subcommittee interviews of Teresa Pesce (3/30/2012) 
and Alan Ketley (2/26/2012). 

12/1/2006 email from HBUS Alan Ketley to HBUS Stephen Allen, HSBC Salman Hussain, 
and others, “A! Rajhi Bank,” OCC-PS1~00150892. Ms. Pesce confirmed to the Subcommittee 
that the HBUS relationship with Al Rajhi Bank was limited to a banknotes relationship. 
Subcommittee interview of Teresa Pesce (3/30/12). 

12/1/2006 email from HBUS Alan Ketley to HBUS Stephen Allen, HSBC Salman Hussain, 
and others, “Ai Rajhi Bank,” OCC-PSI-001 50892. 

J298 “ponner U.S. Head of Al-Haramain Islamic Foundation Sentenced to 33 Months in Federal 
Prison,” U.S. Attorney’s Office for the District of Oregon press release (9/27/1 1), at 1. 

See 2010 HSBC KYC Profile of Al Rajhi Bank, at 13. 
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average of $25 million in physical U.S. dollars per month to A1 Rajhi 
Bank in Saudi Arabia.'^°° HBUS informed the Subcommittee that over 
the next four years A1 Rajhi Bank purchased nearly $1 billion in U.S. 
dollars from HBUS, while selling back less than $10 million. The 
annual totals are as follows. 


U.S. Dollars Sold U.S. Dollars Purchased 

to A1 Rajhi Bank from A1 Rajhi Bank 


2006 $ 0 $ 0 

2007 $ 123 million $ 8 million 

2008 $ 202 million $ 0 

2009 $ 369 million $ 0 

2010 $ 283 million $0 


Grand total: $ 977 million $ 8 million'^”’ 


During that time period, troubling information about Saudi Arabia 
in general and A1 Rajhi Bank in particular continued to circulate, but 
neither HSBC nor HBUS engaged in another round of internal 
deliberations over whether to maintain the account. Instead, HBUS’s 
Hong Kong branch opened a new line of banknotes trading with A1 
Rajhi Bank. 

In July 2007, the Wall Street Journal published two lengthy articles 
by reporter Glenn Simpson examining A1 Rahji Bank’s links to 
terrorism.'^” The first article disclosed the existence of the 2003 CIA 
report, “A1 Rajhi Bank: Conduit for Extremist Finance,” and quoted its 
statement that “[sjenior al-Rajhi family members have long supported 
Islamic extremists and probably know that terrorists use their bank.” 

The article repeated the information that the name of the bank’s most 
senior official, Sulaiman bin Abdul Aziz A1 Rajhi, had appeared on al 
Qaeda’s list of 20 early financial benefactors.'^®^ After the first article 
was published, HBUS’ primary U.S. regulator, the OCC, asked HBUS to 
respond to its allegations.'^®'' 

Also in 2007, reports by the U.S. Department of State"®^ and the 
Congressional Research Service'®®® stated that Saudi Arabia continued to 


See 7/26/2007 email from HBUS Daniel Jack to HBUS Alan Ketley, “BN-LN 'with Al Rajhi 
Bank in Saudi Arabia,” HSBC OCC 1413726. 

Subcommittee briefing by HSBC legal counsel (7/9/2012). 

1302 “u § Tracks Saudi Bank Favored by Extremists,” Walt Street Journal. Glenn Simpson 
(7/26/2007); “Reported U.S. Concerns over Saudi Bank leave Compliance Officers Reading Tea 
Leaves,” Wall Street Journal . Glenn Simpson (7/27/2007). 

1303 ‘‘u § Tracks Saudi Bank Favored by Extremists,” Wall Street Journal. Glenn Simpson 

(7/26/2007). 

7/26/2007 email from OCC Joseph Boss to HBUS Alan Ketley, “Saudi’s,” HSBC OCC 
3391185 . 

See 2007 International Narcotics Control Sttategy Report, U.S. State Department, at 355. 
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be a source of financing for A1 Qaeda and other terrorist organizations, 
and expressed particular concern about the use of cash couriers to 
deliver funds outside of the country. In September, on the sixth 
anniversary of the 9/1 1 attack, Treasury Under Secretary Levey said in a 
televised interview on terrorist financing: “[l]f 1 could somehow snap 
my fingers and cut off the funding from one country, it would he Saudi 
Arabia.”’^®’ In August 2007, Congress enacted legislation expressing 
concern about Saudi Arabia’s uneven role in terrorist financing.'®®* 

In April 2008, Treasury Under Secretary Levey testified that, while 
Saudi Arabia had taken strong action against terrorists operating within 
its borders and was cooperating with the United States on an operational 
level, it was not working as hard to prevent funds from flowing to 
terrorists outside of its borders: “Saudi Arabia today remains the 
location from which more money is going to terror groups and the 
Taliban - Sunni terror groups and the Taliban - than from any other 
place in the world.”'®®® 

The 2009 GAO report prepared for Congress stated: “U.S. 
officials remain concerned about the ability of Saudi individuals and 
multilateral charitable organizations, as well as other individuals visiting 
Saudi Arabia, to support terrorism and violent extremism outside of 
Saudi Arabia.”'®'® Also in 2009, HBUS received an inquiry from the 
IRS Criminal Investigation Division asking for contact information for 
the U.S. agent that receives service of process in the United States on 
behalf of A1 Rajhi Bank.'®" In response, HBUS AML compliance 
officer Daniel Jack reviewed the bank’s account activity for the prior 12 
months. He wrote: 

“This bank (an SCC) had a long-standing relationship (25-t years) 
with Banknotes-London until we closed the account in Feb-05 due 
to TF [Terrorist Financing] & reputational risk. With approval 
from AML (A. Ketley), London re-opened the BN [Banknotes] 
account in Dec-06 with SCC classification due to PEP. This client 
still has relationships with HSBC in the UK, UAE, France, Hong 


See 2007 CRS Report on Saudi Arabia Terrorist Financing Issues, in the summary. 

1307 “U S ; Saudis Still Filling A1 Qaeda's Coffers,” ABC News, Brian Ross (9/11/2007). 

See Section 2043(c), Implementing Recommendations of the 9/1 1 Commission Act, P.L. 
110-53 (8/3/2007). 

Stuart Levey testimony before Senate Committee on Finance, “Anti-Terrorism Financing: 
Progress Made and Challenges Ahead,” (4/1/2008). 

13 EO “Combating Terrorism: U.S. Agencies Report Progress Countering Terrorism and Its 
Financing in Saudi Arabia, but Continued Focus on Counter Terrorism Financing Efforts 
Needed.” U.S. Government Accountability Office, GAO-09-883 (Sept. 2009), 
http://www.gao.gov/new.items/d09883.pdf, at 29. 

See 5/12/2009 HBUS email exchange, “A!-Rajhi Banking and Investment Corporation, 
Saudi Arabia,” OCC-PSl-00823520, with attachments. 
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Kong and Italy. . . . Following is a listing of all traders’ 

explanations provided for alerts over the past 7+ years.”'^'^ 

His analysis disclosed that, over the prior 12 months, HBUS had 
provided A1 Rajhi Bank with over $200 million in U.S. dollars. 

In 2010, the al Haramain Foundation trial got underway related to 
the cashing of $130,000 in travelers cheques at Al Rajhi Bank in Saudi 
Arabia to help violent extremists in Chechnya. Prior to the trial, the 
United States served a subpoena on Al Rajhi Bank to obtain 
authenticated bank documents for use in the trial, but the bank refused to 
produce the documents and moved to quash the subpoena,'^ ''' leading to 
“negative news articles,” in the words of the 2010 KYC client profile 
prepared by HBUS for Al Rajhi Bank.”'* The trial court denied the 
bank’s motion,”'* and the case was later closed as “moot.”'*” 

One other 2010 development was action taken by an Al Rajhi 
related money exchange, Tahweel Al Rajhi, to join with the largest bank 
in Pakistan, Habib Bank Ltd., to initiate a new funds transfer product 
called “HBL Fast Cash.” The new product was designed to allow the 
instant transfer of funds from Riyadh, Saudi Arabia, to any Habib branch 
in Pakistan, whether or not the sender or recipient of the funds had an 
account at either financial institution. According to one media report, 
Hazem Elhagrasey, the head of Tahweel Al Rajhi, said: “The new 
service will assure that the beneficiaries will receive payments in cash 
within minutes in Pakistan.”'*'* Tariq Matin Khan, Habib Bank’s 
general manager for financial institutions and international banking, 
said: “The remitters can benefit from the huge HBL network to send 
money to any nook or comer of Pakistan.”'*'^ The Subcommittee 
intended to ask Al Rajhi Bank about AML safeguards to prevent misuse 
of this new transfer mechanism, but the bank declined to provide any 
information in response to the Subcommittee’s inquiry. It is unclear 
whether Tahweel Al Rajhi has an account at Al Rajhi Bank. 


id. 

See Al Rajhi Banking & Investment Coro, v. Holder . Case No. 1;10-MC-00055'ESH (USDC 
OR 1/19/10). 

2010 HBUS KYC Profile of Al Rajhi Bank, at 6. See also 12/6/201 1 HSBC AMLID Case 
#1434 for Al Rajhi Bank, HSBC-PSl-PROD-0102340-342. 

United States v. Sedaehatv . (USDC D OR), 2010 U.S.Dist.LEXlS 144171, Order 
(1/12/2010). 

See A! Rajhi Banking & Investment Com, v. Holder . Case No. 1 :10.MC-00055-ESH, Order 
Dismissing Action As Moot (3/2/2010). 

“Tenor-linked Saudi bank launches major remittance program to Pakistan,” Khaieei Times 
in Saudi Arabia (4/10/2010), 

htlp://$\^av.khaleejtimes.com/biz/inside.asp?xfile=/data/busmess/2010/ApriI/business_ 

Aprill83.xml&section=business&col=. 
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Meanwhile, from 2007 to 2010, HBUS continued to supply, 
through its London branch, hundreds of millions of U.S. dollars to A1 
Rajhi Bank in Saudi Arabia. In addition, at A1 Rajhi Bank’s request, 
HBUS expanded the relationship in January 2009, by authorizing its 
Hong Kong branch to supply A1 Rajhi Bank with non-U. S. currencies, 
including the Thai bat, Indian rupee, and Hong Kong dollar.'^^” At the 
time, Gloria Strazza, a senior official in HBUS’s Financial Intelligence 
Group, observed: “There was (and may be in the future) a fair amount of 
press and government attention focused on this entity. I am not sure we 
would want to engage in even this limited activity for this entity but I 
forward some of the intelligence from our files on this bank.”'^^’ Mr. 
Lok responded: “This is an on-going debate that will never go away. 

My stance remains the same, i.e. until it[’]s proved we carmot simply 
rely on the Wall Street Joumal[’s] reports and unconfirmed allegations 
and ‘punish’ the client.”'^^^ In a later email, Mr. Lok commented: 

“LON [London Banknotes office] already has a relationship with 
Alrajhi. Adding HKG [Hong Kong Banknotes office] won’t change 
Alrajhi’s profile.”'^^^ AML compliance officer Daniel Jack offered this 
comment to his fellow compliance officer, Alan Williamson, regarding 
the account: “I believe the business owns the customer and the risk. ... I 
don’t think you should CO [Compliance Office] deny - or even hesitate 
now - on this for HK [Hong Kong], despite the negative info on TF 
[Terrorist Financing] & Rep[putational] risk, which is not new (e.g. WSJ 
in Jul-07, EDD in Dec-07). I understand why Denise/ Anne/Gloria are 
not comfortable, but I respectfully do not think it is their decision to 
terminate the relationship (again).’’ HBUS decided to open the Hong 


See 2010 HBUS Hong Kong office KYC Customer Profile for A1 Rajhi Bank, HSBC-PSI- 
PROD-0102304-306 (showing Hong Kong account for A1 Rajhi Bank began trading 1/29/2009), 
See also 4/3/2008 email from HBME Salman Hussain to HBMD David Filing and HBEU John 
Scott, “A1 Rajhi Bank, Saudi Arabia,” OCC-PSI-00 156271 (showing Al Rajhi Bank requested 
the Hong Kong account); 5/5/2008 exchange of emails among HBUS Christopher Lok, Gary 
Yeung, Stephen Allen, and others, “KYC Approval needed for: AI Rajhi Banking & Investment 
Corp,” OCC-PSI-00155719; 6/2/2008 email from HBUS Daniel Jack to HBUS Anne Liddy, 
Gloria Strazza, Alan Williamson, and others, “Banknotes with Al Ra[jh]I Banking in S.A.,” 
OCC-PSI-00343451. 

6/3/2008 exchange of emails among HBUS Gloria Strazza, Daniel Jack, Christopher Lok, 
Stephen Allen, and others, “Banknotes with Al Ra[jh]i Banking in S.A.,” HSBC OCC 0752005- 
006. AML compliance officer Daniel Jack forwarded her email to Mr. Lok, Mr. Allen, and 
others, noting “there is still some concern in AML/ICRO regarding TF [Terrorist Financing] & 
reputational risk in dealing with [Al Rajhi],” and asked for an email to “address the negative 
info, risk analysis and appropriateness of mitigants, and your support for maintaining the HBUS 
relationship.” Id. 

,322 ,d, 

7/18/2008 email from HBUS Christopher Lok to HBUS Alan Williamson and others, 
“Banknotes with A! Ra[jh]I Banking in S.A.,” HSBC OCC 0760928. 

6/3/2008 email from HBUS Daniel Jack to HBUS Alan Williamson, “Banknotes with AI 
RaOh]I Banking in S.A.,” HSBC OCC 1638463. See also 5/30/2008 emails exchanged among 
HBUS Daniel Jack, Alan Williamson, and Betty NG, “KYC BankNote Profile is IB Approved 
for: Al Rajhi Banking & Investment,” OCC-PSI-00239206; HSBC OCC 1638463. 
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Kong account, providing Al Rajhi Bank on average another $4.6 
million per month in non-U.S. currencies. 

HBUS Banknotes finally ceased doing business with Al Rajhi 
Bank when, in September 2010, HSBC made a global decision to exit 
the U.S. banknotes business, one week after the OCC sent a lengthy 
Supervisory Letter to the bank criticizing its AML program, including 
with respect to its handling of banknotes. 

I. Servicing Other Banks with Suspected Links to 
Terrorism 

Al Rajhi Bank was not the only bank with suspected links to 
terrorist financing serviced by HSBC. Two others were Islami Bank 
Bangladesh Ltd. and Social Islami Bank Ltd. Both banks cooperated 
with the Subcommittee’s inquiries. 

(1) Islami Bank Bangladesh Ltd. 

Islami Bank Bangladesh Ltd. opened its doors in 1 983, designed its 
operations to be in conformance with Islamic requirements, and has 
grown to become one of the largest private banks in Bangladesh, which 
is one of the most densely populated countries in the world. It 
provides a wide variety of individual and commercial banking 
services. Several of the bank’s most senior officials were politically 
important figures within the country or in Saudi Arabia, leading to their 
designations as Politically Exposed Persons in the World Check 
database. According to Islami Bank Bangladesh, it has an extensive 
network of more than 600 correspondent accounts. 


In July 2008, Mr. Williamson approved the new account and wrote to Mr. Lok, “You’re in 
business now.” 7/18/2008 email exchange between Alan Williamson, Christopher Lok, and 
others, “Banknotes with Al RaQhjl Banking in S.A.,” HSBC OCC 0761014. 

See HBUS Hong Kong office KYC Customer Profile for Al Rajhi Bank, HSBC-PSl-PROD- 
0102304-306, at 2. 

See 9/20/2010 “HSBC to Exit Asian Banknotes Business,” HSBC Holdings pic 
Announcement, http://$vww.hsbc.com/l/PA_esf-ca-app- 

content/content/assets/investor_relations/sea/ 201 0/sea_100920__ wholesale_banknotcs_en.pdf. 
See also 2010 HBUS KYC Profile on Al Rajhi Bank, at 1 (showing account deactivated on 
10/14/2010); 2010 HBUS Hong Kong office KYC Profile on Al Rajhi Bank, HSBC-PSI-PROD- 
0102304-306, at 1 (showing Hong Kong account deactivated on 10/29/2010). In addition, in 
October 2010, both the OCC and Federal Reserve issued Cease and Desist Orders to HBUS and 
its parent holding company, HNAH, to require them to revamp their AML programs. 

See Islami Bank Bangladesh Ltd. website, “About IBBL,” 
http://www.islamibankbd.com/abtIBBL/abtIBBLAtaGIance.php; 4/19/2005 HSBC FIG report on 
Islami Bank Ltd.-Bangladesh, HSBC OCC 3241695; 7/4/2012 email from Islami Bank 
Bangladesh Ltd. to Subcommittee, PSI-IBBL-0 1-0001. 

See Islami Bank Bangladesh Ltd. website, “Products & Services,” 
http.7/www.islamibankbd.com/prodServices/prodServices.php 

See 4/19/2005 HSBC FIG report on Islami Bank Ltd.-Bangladesh, at HSBC OCC 3241696; 
5/1 i/2006 FIG report on Islami Bank Bangladesh, HSBC OCC 3241693. 

J331 7/4/2012 email from Islami Bank Bangladesh Ltd. to Subcommittee, PSl-IBBL-01-0001. 
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Islami Bank Bangladesh applied to open accounts with HSBC in 
2000, and currently has correspondent accounts with HSBC in 24 
locations around the world. According to the bank, it opened a U.S. 
dollar account with HBUS in 2000, and U.S. dollar clearing accounts 
with HSBC India and HSBC Pakistan in 2006. In 2007, the HBUS 
branch in Singapore also sought approval to open an account for the 
bank to supply it with physical U.S. dollars, cash U.S. dollar monetary 
instruments such as travelers cheques and money orders, process U.S. 
dollar wire transfers, and provide other services. 

Opening 2007 HBUS Account. Documents show that proposals 
to open the 2007 HBUS account for Islami Bank immediately raised 
AML concerns within HBUS AML Compliance, not only because the 
bank was located in a country ranked by HSBC as at “high risk” of 
money laundering’ and ranked by Transparency International as one 
of the most corrupt country in the world,’^ ^ but also because members 
of the A1 Rajhi group held a 37% direct ownership interest in the bank. 

In the fall of 2007, Kwok Ying Fung at the HBUS office in 
Singapore asked Beth Fisher at HBUS AML Compliance to approve 
Islami Bank’s KYC profde, but she declined without explaining why.'”^ 
On October 24, 2007, after receiving her response, he asked HBUS 
AML Compliance to suggest someone else to approve opening the 
account,'’’” Angela Cassell-Bush suggested that he “reach out to Chris 
Lok to see if he is willing to be the RM [Relationship Manager] 
Approver.”'”* Ms. Fisher warned her colleagues that, given the 
connection between the Bangladeshi bank and A1 Rajhi Bank, “[tjhis is 
not just an RM issue. This is a KYC due diligence issue.’’”” 

On November 6, 2007, Mr. Fung asked Mr. Lok, head of HSBC 
Global Banknotes and located in HBUS offices in New York, if he 
would consider serving as the “RM [Relationship Manager] approver” of 
the Islami Bank KYC profile, so that the bank could become a “shared 


See HBUS Know Your Customer Profile of Islami Bank Bangladesh Ltd. (3/9/2012), HSBC- 
PSI-PROD-OU7222-237 (hereinafter “2012 HBUS KYC Profile of Islami Bank"), at 2; 7/4/2012 
emaii from Islami Bank Bangladesh Ltd. to Subcommittee, PSI-IBBL-01-0001. 

See 2012 HBUS KYC Profile of Islami Bank at 2. 

ld.atl. 

See 2007 “Corruption Perceptions Index," Transparency International, 
http;//archive.transparency.org/policy_research/surveys_indices/cpi/2007 (ranking Bengladesh as 
162 out of 180 countries in terms of perceived levels of corruption). 

See 10/24/2007 email from HBUS Kwok Ying Fung to HBUS Jarrett Payne and Angela 
Cassell-Bush, “KYC BankNotes Profile is IB Denied for: Islami Bank Bangladesh Limited,” 


HSBC OCC 0739990-991. 

'”Ud. 

1 1/6/2007 email from Angela Cassell-Bush to Kwok Ying Fung with copies to Beth Fisher 
and others, “KYC BankNotes Profile is IB Denied for; Islami Bank Bangladesh Limited,” HSBC 


OCC 0739990. 

1 1/7/2007 email from HBUS Beth Fisher to HBUS Angela Cassell-Bush and others, “KYC 
BankNotes Profile is IB Denied for: Islami Bank Bangladesh Limited,” HSBC OCC 0739989. 
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client” of HBUS Banknotes and HBUS Payments and Cash 
Management (PCM).’^'**’ On November 8, 2007, Mr. Lok responded that 
his interest in considering a new account depended upon whether there 
was enough potential revenue to make the effort of vetting A1 Rajhi 
worth it: 

“First, I’m happy to be the RM [Relationship Manager] if this is 
an account worth chasing. How much money can you expect to 
make from this name? If this can be answered positively then I 
will ask PCM to check out the . . . airajhi coimection. . . . The name 
Alrajh has been a name heatedly debated for many years. We 
terminated our trading relationship following 9 1 1 and only a year 
ago after London Compliance came back telling NYK the group is 
happy to let us resurrect the relationship that we went back. . . . 

Not saying just because of this connection we won’t do business. 
It[’]s just that if the revenue is there then we’re prepared for a good 
fight.”'^^' 

Mr. Lok’s email suggests that he expected from the outset that HBUS 
AML Compliance would resist opening an account for Islami Bank and 
it would take a “fight” to open the account. 

Later the same day, Benjamin Saram of HBUS Singapore emailed 
Mr, Lok and others with information about the likely revenues if an 
account were opened for Islami Bank. He wrote that, because 
approximately 60,000 Bangladeshis traveled to Saudi Arabia each year 
on religious pilgrimages and would require about $1,000 to $3,000 each, 
“we’re therefore looking at about USD 60 mio [million] of currency 
needs on an annual basis.”'^’'^ He noted that, in 2006, HBUS Banknotes 
had netted about $47,000 in profits in Bangladesh, and expected a 53% 
increase in 2007, to about $75,000, explaining, “[w]e are a monopoly 
here, and margins are decent,”’^'*^ Mr. Saram estimated that, if an 
account were opened for Islami Bank, the “net profit would be 
approximately USD 75,000/ year.” 

Mr. Lok responded: “One, the money is there and we should go 
for this account. Two, I will jump in and wear the GRM [Global 
Relationship Manager] hat. ... I believe we should be able to get the 
K[YC] sign off”‘^ He also asked HBUS AML Compliance to look 
into the possible connection between Islami Bank and A1 Rajhi Bank. 


1 1/6/2007 email from HBUS Kwok Ying Fung to HBUS Christopher Lok, “Islami Bank 
Bangladesh Limited,” HSBC OCC 0739989. 

1 1/8/2007 email from HBUS Christopher Lok to HBUS Kwok Ying Fung and others, 
“Islami Bank Bangladesh Limited,” HSBC OCC 0739988-989. 

1 1/8/2007 email from HBUS Benjamin Saram to HBUS Christopher Lok, Kwok Ying Fung, 
and others, “Islami Bank Bangladesh Limited,” HSBC OCC 0739987-988. 

1343 

11/8/2007 email from HBUS Christopher Lok to HBUS Benjamin Saram, Kwok Ying Fung, 
and others, “Islami Bank Bangladesh Limited,” HSBC OCC 0739987, 
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The next day, November 9, 2007, HBUS AML compliance officer 
Angela Cassell-Bush confirmed a direct link between the two banks: 

“[PJlease note that there is a connection between ISLAMI BANK 
BANGLADESH LIMITED-Bangladesh and Al-Rajhi Bank .... 
Based on the information we have on file, the A1 - Rajhi family has 
been associated with Islami Bank Bangladesh Limited, since its 
inception. They have at least 37% direct ownership ... through 
their ownership within the following companies: Arabsas Travel 
& Tourist Agency, 9.999%; Janab Yousif Abdullah Abdul Aziz 
Al-Rajhi, 9.936%; Al-Rajhi Company for Industry & Trade, 

9.94%; Abdullah Abdul Aziz Al-Rajhi, 7.58%. This same family 
has major controlling interest within Al-Rajhi bank.”'^‘‘^ 

Troubling Information. HBUS’ Singapore branch actually 
opened the account for Islami Bank in December 2007. Mr. Lok and 
others approved the account, despite ongoing questions about its primary 
shareholder, A1 Rajhi Bank, whose past links to terrorist financing had 
received additional attention in the media during the summer of 2007. 
HBUS also approved the account despite troubling information about 
Islami Bank itself 

The troubling information about Islami Bank was contained in an 
internal report that had been prepared less than a year earlier by HSBC’s 
Financial Intelligence Group (FIG).'^‘'’ The May 2006 FIG report 
disclosed that, in March 2006, “Abdur Rahman, chief of the Jamaatul 
Mujahideen of Bangladesh (JMB), and his second-in-command, Bangla 
Bhai, were arrested for being responsible for the terrorist bomb blasts of 
August 1 7, 2005 in Bangladesh.”'^'** The FIG report noted that Mr. 
Rahman had been found to have an account at Islami Bank."*'*® 


1 i/9/2007 email from HBUS Angela Cassell-Bush to HBUS Christopher Lok and 
Others, “Islami Bank Bangladesh Limited-Bangladesh,” OCC-PSI-00154139, at !. Mr. 
Lok asked Ms. Cassell-Bush to doublecheck one of the shareholders, Abdullah Abdul 
Aziz Al-Rajhi, who was listed as holding 7.58% of the shares, suggesting that the wrong 
company may have been identified as the shareholder. A later email suggested that the 
shareholding company was not a member of the A1 Rajhi group. See November and 
December 2007 exchange of emails among HBUS Christopher Lok, Angela Cassell- 
Bush, Muhammad Shohiduzzaman, and others, “Islami Bank Bangladesh Limited- 
Bangladesh,” HSBC OCC 0741466-469. Later KYC profiles for the bank indicate, 
however, that the shares were, in fact, held through a company that was part of the A1 
Rajhi group. See, e.g., 2012 HBUS KYC Profile of Islami Bank, at 7. Islami Bank 
Bangladesh Ltd. has confirmed to the Subcommittee that Abdullah Abdul Aziz A1 Rajhi 
has been both a shareholder and director of the bank. 7/4/2012 email from Islami Bank 
Bangladesh Ltd. to Subcommittee, PSI-IBBL-OI-OOOl. 

See 2012 HBUS KYC Profile of Islami Bank, at 15. 

See 5/1 1/2006 FIG report on Islami Bank Bangladesh, HSBC OCC 3241692-694. 

Id, at 693. 

Id. Islami Bank Bangladesh Lid. told the Subcommittee, however, that it has never 
had an account for Abdur Rahman. 7/4/2012 email from Islami Bank Bangladesh Ltd. to 
Subcommittee, PSI-IBBL-Ol-OOOI. 
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The FIG report also disclosed that an investigation by the Central 
Bank of Bangladesh found that two branches of Islami Bank had been 
engaged in “suspicious transactions” and urged the bank to take action 
against 20 bank employees, including for failing to report the suspicious 
transactions.'^’” According to the FIG report, in response, Islami Bank 
reportedly suspended five officers and warned 15 others.'”' The FIG 
report stated that Bangladeshi news articles had observed it was the third 
time Islami Bank had been fined by the Central Bank “for covering up 
militants’ transactions.”'”^ 

Islami Bank’s KYC profile repeated this information and indicated 
that the HSBC Global Relationship Manager had visited the bank to ask 
about the matter, and was told that the incident did not involve terrorist 
financing.'”’ The Global Relationship Manager advised against taking 
any further action, attributing the AML failures to the bank’s 
unsophisticated technology platform.'”'' Neither the KYC profile nor 
the FIG report indicate whether any steps were taken to verify the bank’s 
explanation of the incident with the Central Bank. The KYC profile 
noted that, in 2006, FIG recommended classifying Islami Bank as a 
“Special Category Client,” or SCC, HSBC’s designation for its highest 
risk clients, but that recommendation was rejected, which meant HSBC 
did not subject the bank to any enhanced monitoring.'”’ 

2009 Information on IIRO Accounts. The HBUS account was 
opened near the end of 2007. About 18 months later, in May 2009, a 
FIG due diligence report prepared for another Bangladeshi bank with 
which HBUS did business. Social Islami Bank, discussed below, 
disclosed new information relevant to Islami Bank. This information 
related to the International Islamic Relief Organization (IIRO), a Saudi 
nonprofit organization which, in 2006, had two of its branches and a 
high ranking IIRO official designated by the United States as terrorist 
financiers and added to the list of entities with which U.S. persons are 
prohibited from doing business.'”* 


5/1 1/2006 FIG report on Islami Bank Bangladesh, at HSBC OCC 3241693. 

Islami Bank Bangladesh told the Subcommittee that it suspended and later fired the 
bank officials involved. 7/4/2012 email from Islami Bank Bangladesh Ltd. to 
Subcommittee, PSI-IBBL-01-0001, 

5/1 1/2006 FIG report on Islami Bank Bangladesh, at HSBC OCC 3241693. 

2012 HBUS KYC Profile of Islami Bank, at 3, 

Id. (The Global Relationship Manager wrote: “[Cjonstdering that Islami Bank is involved in 
mass banking with a pretty large branch network without a sophisticated or integrated IT 
platform, there will always be a chance that isolated Incidents like this might be found. As such, 
we will closely monitor the future events and keep you informed as soon as any issue of concern 
Is detected.”). 

1355 

See 8/3/2006 “Treasury Designates Director, Branches of Charity Bankrolling Al Qaida 
Network,” U.S. Treasury Department press release, reprinted in 8/2/2006 email from HBUS 
Sharyn Malone to HBUS Stephanie Napier and others, “Social Investment Bank, Bangladesh,” 
HSBC OCC 3259936. 
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The 2009 FIG report stated that the IIRO had accounts at both 
Social Islami Bank and Islam! Bank.'^^^ It quoted a 2008 loeal press 
article saying that, in response to the action taken by the United States in 
2006, Islami Bank had frozen its IIRO accounts.”^ The FIG report did 
not indicate when the accounts were first opened, what actions had been 
taken beyond freezing them, or how much money was involved. In 
2010, an HBUS KYC profile for Social Islami Bank referenced a letter 
from the Bangladeshi Central Bank, dated June 30, 2010, indicating that 
IIRO had accounts at three Bangladeshi banks, including Islami Bank, 
which needed to be closed. 

Islami Bank Bangladesh confirmed to the Subcommittee that IIRO 
had two accounts at the bank which opened in 1993 and 1 994, when 
IIRO was a nongovernmental organization in good standing.*^®" It stated 
that after the IIRO was added to a United Nations sanctions list in 2006, 
it froze the accounts and reported them to the Bangladeshi Central Bank. 
In 2010, according to the bank, it received an “instruction from the 
Central Bank at the direction of [the] Ministry of Finance” to unfreeze 
the accounts and “transfer the accounts” to a government owned bank, 
BASIC Bank, which it did.'^*' 

Despite the 2008 published article, the information in the two 
internal HBUS documents related to Social Islami Bank, and Islami 
Bank Bangladesh’s willingness to discuss the accounts, no information 
about the IIRO accounts appeared in the HBUS KYC profile for Islami 
Bank. While the IIRO accounts at Social Islami Bank were the focus of 
extensive discussions in emails and other documents by HBUS AML 
Compliance personnel and HBUS bankers working in Bangladesh, no 
similar discussions appear in any of the HBUS documents related to 
Islami Bank. 

In September 2009, the Islami Bank KYC profile indicates that an 
unnamed HSBC employee requested a new enhanced due diligence 
report on the bank.’^“ HBUS Compliance denied the request, indicating 
an update “is NOT needed at this time.”'^*^ 

2010 see Designation. In February 2010, HBUS AML 
Compliance personnel reviewed the Islami Bank account and 


See 5/5/2009 FIG Report of Findings on Social Investment Bank Limited, OCC-PSI- 
00823818, at 7 (quoting 10/8/2008 article from Bangladeshnews.com). 

Id. 

2012 HBUS KYC Profile of Social Islami Bank, at 4 (“The 3 bank accounts of IIRO namely 
i) Social Islami Bank Ltd. ii) Islami Bank Bangladesh Ltd. Hi) Al-Falah Islami Bank Ltd. must 
be disposed off [sic] and transferred”). 

1360 7/4/2012 email from Islami Bank Bangladesh Ltd. to Subcommittee, PSI-IBBL-Ol- 
0001-003, at 003. 

136! 

2012 HBUS KYC Profile of Islami Bank, at 2. 


1363 


Id. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00462 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



449 


VerDate Nov 24 2008 


275 

recommended that the bank be designated an SCC client. One key 
reason given for the proposed SCC designation was Islami Bank’s links 
to the A1 Rajhi group, noting that the Vice Chairman of the bank and 
10% owner was Yousif Abdullah A1 Rajhi, that A1 Rajhi interests held 
about a third of the bank’s shares, and A1 Rajhi itself had links to 
terrorist financing. Another reason given was the information 
provided in the 2006 FIG report, that the Bangladeshi Central Bank had 
issued a “notice of cause” to Islami Bank “to explain accounts owned by 
suspected Islamic Milittmts,” and reportedly fined the bank for the third 
time “for covering up militants[’] transactions.” No mention was 
made of the IIRO accounts. Contrary to the outcome in 2006, in 2010, 
HSBC designated Islami Bank as an SCC client.'^*’^ 

Later in 2010, an OCC AML examiner reviewing emails related to 
Islami Bank characterized the information provided about the bank as 
depicting “extreme circumstances,” and recommended that the account 
be reviewed as part of a larger AML “look back” effort at HSBC.'^'’* In 
2011, HSBC engaged in an extensive discussion with Islami Bank 
regarding its AML policies and procedures, also noting in its KYC 
profile that the bank acted as a “payout agent” for 53 money exchange 
businesses across the Middle East. 

Today, although HSBC exited the U.S. banknotes business in 2010, 
Islami Bank Bangladesh remains a customer of two dozen HSBC 
affiliates, including HBUS PCM, which continues to provide Islami 
Bank with access to U.S. dollars, U.S. wire transfers, and U.S. payment 
systems.'^’” 

(2) Social Islami Bank Ltd. 

A third bank serviced by HSBC despite suspected links to terrorist 
financing is Social Islami Bank Ltd. 

Social Islami Bank Ltd. was founded in 1995, changed its name 
from Social Investment Bank Ltd. in 2009, and is located in 
Bangladesh.’^’’ It operates 76 branches throughout the country and 
provides a variety of individual and commercial banking services, 
including deposits, loans, investment advice, commercial financing, 
foreign exchange, and wire transfers. It operates in conformance with 


■‘Islami 


See 2/3/2010 email exchange between HBUS Jon K. Jones, Ali Kazmy and others, 

Bank Bangladesh Ltd - Poss SCC,” OCC-PSl-00453499. 

Id. 

Id. 

Id. See also 2012 HBUS KYC Profile of Islami Bank, at 3. 

10/27/2010 email from OCC AML Examiner Joseph Boss to OCC colleagues, OCC-PSl- 


00919631. 

2012 HBUS KYC Profile of Islami Bank, at 3-4. 

20 1 2 HBUS KYC Profile of islami Bank, at 2, 7. 

See Social Islami Bank website, http://www.siblbd.com/html/homepages.php; HBUS “Know 
Your Customer Profile” of Social Islami Bank Ltd. (2/7/201 2), HSBC-PSI-PROD-0 1 02782-789 
(hereinafter “2012 HBUS KYC Profile of Social Islami Bank”), at 2. 
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Islamic requirements and is publicly traded on Bangladeshi stock 
exchanges. Its headquarters are in Dhaka, the capital of Bangladesh, one 
of the world’s largest cities with a population of 16 million. 

Until May 2012, HSBC was one of the bank’s major 
correspondents, providing it with services in multiple countries. 

HSBC also has an affiliate located in Dhaka. That affiliate, HSBC Bank 
Asia Pacific (HBAP) Dhaka, introduced Social Islami Bank to 
HBUS.'”^ In 2003, HBUS Payments and Cash Management (PCM) 
sought to open an account for Social Islami Bank, providing it with U.S. 
dollar wire transfer and clearing services.’’^'* 

Opening of HBUS Account. When HBUS first sought to open 
the account in 2003, it asked for an enhanced due diligence report on the 
bank from the HSBC Financial Intelligence Group (FIG). In addition to 
noting that Bangladesh was a high risk country due to its reputation for 
corruption, the resulting FIG report contained adverse information about 
some of the bank’s owners and officials.'^^^ Most serious were 
allegations that two shareholders, the International Islamic Relief 
Organization (IIRO) and the Islamic Charitable Society Lajnat al-Birr A1 
Islam (Lajnat al-Blrr), had links to terrorism. IIRO then held 8.62% of 
the total outstanding shares, and was the bank’s largest single 
shareholder, while Lajnat al-Blrr held 1.54%. 

The 2003 FIG report stated the following with regard to the two 
shareholders: 

“IIRO is a Saudi-Arabian charity. ... The IIRO was named in the 
2002 lawsuit brought forward on behalf of family members of 
victims of the September 1 1, 2001 terrorist attacks. The IIRO was 
accused of having ‘played key roles in laundering of funds to 
terrorist[s] for the 1998 African embassy bombings’ and having 
been involved in the ‘financing and aiding and abetting of terrorists 
in the 1993 World Trade Center bombing.’ The IIRO has also 
reportedly funded al-Qaeda directly as well as several of its 
satellite groups. Osama bin Laden’s brother-in-law, Mohammed 
Jamal Khalifa, headed the Philippine branch of the IIRO in the 
1990’s. The Philippine government has charged that the group 
contributed to terrorist causes there.'^’^ ... 


See Social Islami Bank website, “List of Conespondents/Agency Arrangements Overseas,” 
http://www.siblbd.eom/download/CoiTespondentsAgencyArrangementsOverseas.pdf. 

*^^^2012 HBUS KYC Profile of Social Islami Bank, at 7. 

Id. at 2, 14. 

See 1 1/2003 Report on Findings for Social Investment Bank, Ltd., HSBC Financial 
Intelligence Group, OCC'PSI~00823818, at 18 (hereinafter “2003 FIG Report on Social Islami 
Bank”). 

'^’^’Id.at 1-2. 
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Lajnat al-Birr A1 Islamiah was established in 1987. It has been 
stated that Lajnat al-Birr A1 Islamiah was the original name of the 
Benevolence International [Fjoundation, and that it originally had 
offices in Saudi Arabia and Pakistan. According [to] the U.S. 
government, among the purposes of Lajnat was to ‘raise funds in 
Saudi Arabia to provide support to the Mujahadeen then fighting in 
Afghanistan,’ as well as to provide ‘cover for fighters to travel in 
and out of Pakistan and obtain immigration status.’ Benevolence 
International has been tied to terrorism and its director, Enaam 
Amaout, was indicted in 2002 with conspiring to defraud his 
group’s donors by secretly providing financial and logistical help 
to al-Qaeda for a decade.”' 


The FIG report also contained negative information about the 
bank’s founder: 


“Dr. M.A. Mannan was the chairman and founder of Social 
Investment Bank Ltd. He was fired in 2000 after fault was found 
with his banking procedure. It was alleged that he created an 
obstacle to the team of Bangladesh Bank [Bangladesh’s Central 
Bank] during their visit to Social Investment Bank Ltd. 
Additionally, he was accused of interfering with bank 
administrative work and with harassing a bank employee.”'^^* 

The FIG report concluded: 

“In conclusion, it is of significant concern that the leading 
shareholder of Social Investment Bank Ltd. (at 8.62%), 
International Islamic Relief Organization, has been accused in both 
the Philippines and in America of funding terrorist groups. The 
group is currently under investigation by the F.B.I. Another of the 
bank’s shareholders, Lajnat al-Birr A1 Islam (at 1.54%) has also 
been connected to terrorist groups. Additionally, the bank’s 
founder and chairman was let go on allegations of interference and 
harassment. ... Finally, it is important to note that Social 
Investment Bank Ltd. is located in Bangladesh, which was ranked 
as the world’s most corrupt nation by Transparency 
International.”'^^'' 

The FIG report offered this cautious analysis about whether to open an 

account: 


“Although the allegations presented in this report, primarily 
against the International Islamic Relief Organization (IIRO) and 


•”Gd.at2, 
Id. at 3. 
'™ Id. at 4. 
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the Lajnat al-Birr A1 Islamiah, are highly adverse, no U.S. or 
foreign government law enforcement or regulatory body has stated 
unconditionally, that these organizations are under sanction. The 
reputational risk is significant, however, and the possibility that 
further investigations by U.S. authorities may ultimately uncover 
substantiating proof of a connection to terrorism. The risk of 
future sanctions and the reputational risk based on allegations 
noted in this report should be measured against the current risks 
involved in our relationship when ultimately deciding a course of 
action.”'^*" 

While the 2003 FIG report provided significant adverse 
information about Social Islami Bank and noted that Lajnat al-Birr was 
the original name of the Benevolence International Foundation which 
“had been tied to terrorism,” it failed to state that, in 2002, the United 
States had designated the Benevolence International Foundation as a 
“financier of terrorism” with whom U.S. persons are prohibited from 
doing business.'^*' This additional terrorism-related designation meant 
that when HBUS was considering whether to open an account for Social 
Islami Bank in 2003, Social Islami Bank was partially owned by two 
organizations associated with terrorist financing. 

Despite its failure to provide that additional information, the 2003 
FIG report provided significant negative information about Social Islami 
Bank and squarely raised the question of whether HBUS should be 
doing business with it, given the “highly adverse” allegations. 
Nevertheless, on October 14, 2003, HBUS AML Compliance approved 
Social Islami Bank as an HBUS PCM client.'^*^ In addition, despite the 
bank’s location in a high risk country, the terrorist links uncovered in 
connection with two of its shareholders and a director, HBUS opened 
the account without designating the bank as an SCC client warranting 
additional monitoring and due diligence reviews. HBUS immediately 
began providing the bank with services that included clearing U.S. dollar 


138! ‘--j-reasury Designates Benevolence International Foundation and Related Entities as 
Financiers of Terrorism,” U.S. Treasiuy Department press release No. PO-3632 (11/19/2002), 
\vww. treasury.gov/press-center/press-reieases/Pages/po3632.aspx. See also Executive Order 
13224, “Blocking Property and Prohibiting Transactions with Persons who Commit, Threaten to 
Commit, or support Terrorism” (9/23/2001). 

The 2003 FIG Report also failed to mention that Social Islami Bank had opened an account 
for Ai Rajhi Commercial Foreign Exchange. That money exchange business was part of the Al 
Rajhi Group, whose U.S. business and charitable ventures were the subject of a 2002 law 
enforcement search to disrupt terrorist financing. The FIG may have been unaware of the 
account at that time, although a 2005 FIG report on A! Rajhi Commercial Foreign Exchange 
disclosed it. See 7/13/2005 HBUS Financial Intelligence Group (FIG) Report of Findings 
(Update) on Al Rajhi Commercial Foreign Exchange, HSBC OCC 2725167-168. In 2005, Ai 
Rajhi Commercial Foreign Exchange and seven other businesses merged into Al Bilad Bank. Id. 
According to bank counsel, the AI Rajhi Commercial Foreign Exchange account closed in July 
2002. Subcommittee briefing by HSBC legal counsel (6/27/2012). 

2012 HBUS KYC Profile of Social Islami Bank, at 14. 
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monetary instruments and U.S. wire transfers. Those services produced 
revenues from Social Islami Bank totaling about $100,000 per year.'^*'* 

2005 Review. Two years after the account was opened, as part of 
a broader HSBC effort to update its KYC client profdes in 2005, Social 
Islami Bank was the subject of a second enhanced due diligence 
review.'^*^ The resulting 2005 FIG report again identified IIRO, the 
bank’s largest shareholder, as linked to terrorism, noting that it was 
“alleged to have provided funding to terrorist groups such as A1 Qaeda 
in the past,” and is “alleged to have acted as a cover for Al-Qaeda 
operations in the Philippines.”’^** The FIG report stated; “Based on the 
frequency with which the group is connected to terrorist financing in the 
press, it is likely that their activities will always be under scrutiny, and 
future government sanctions against the group are highly probable.””*’ 
The report also noted that Social Islami Bank did “not appear to have 
correspondent relationships with many of the other major global banking 
corporations.”'*** The FIG report “strongly recommendjed]” that the 
account not be approved “until the matter is discussed with Senior 
Compliance Management.”'**’ 

Despite the concerns raised in the FIG report, HBUS retained 
Social Islami Bank as a client. At the same time, to address concerns 
about the account, HBUS AML Compliance required the HSBC CEO 
for Bangladesh to provide annual approval of the account for it to stay 
open.'*™ Despite this requirement, the Subcommittee uncovered only 
one instance in which approval was granted, and when asked, HSBC 
was unable to provide any additional documentation.'*” 

2006 Terrorist Designation. Eighteen months later, on August 3, 
2006, the United States designated two branches of IIRO and a high 
ranking IIRO official as terrorist financiers and prohibited U.S. persons 


See 3/8/2005 email from HBUS Nanayo Ryan to HBUS FIG Michael Ellis, “Social 
Investment Bank Ltd Bangladesh,” HSBC-PSI-PROD-0102769-770. 

3/10/2005 “Report of Findings - Social Investment Bank Ltd. - FIG (UPDATE),” HBUS 
Financial Intelligence Group, OCC-PSI-008238 ! 8 (hereinafter “2005 FIG Report on Social 
Islami Bank”), at 15. 

'“’Id. 


HBUS AML head Terri Pesce told the Subcommittee it was “unusual” to obtain CEO 
approval of an account. Subcommittee interview of Teresa Pesce (3/30/2012). See, e.g., 2012 
HBUS KYC Profile of Islami Bank, at 14-15; 2/9/2010 email from HBUS Jon K. Jones to HBAP 
Sadique Reza and others, “Compliance Conditions: Social Islami Bank Ltd,” HSBC-PSI-PROD- 

0102645. 

This approval was provided in April 2005 by Steve Banner, HSBC Bangladesh CEO. He 
wrote with regard to Social Investment Bank: “I have been in Bagladesh for only 2 months and 
have not yet met any of the executives from SIBL. Based on my discussion with Shohid, 
however, I can see no reason why we should not continue the relationship as at present.” 
4/16/2005 email from HSBC Steve Banner, HSBC PSI PROD 0102765. See also Subcommittee 
briefing by HSBC legal counsel (4/12/2012). 
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from transacting business with them.’^^^ Treasury Under Secretary for 
Terrorism and Financial Intelligence Stuart Levey said: “We have long 
been concerned about these IIRO offices; we are now taking public 
action to sever this link in the al Qaida network’s funding chain.”'^^^ 

In response, on the same day, HBUS AML Compliance placed a 
block on the Social Islami Bank account, so that no funds could be 
withdrawn. The email imposing the block noted that the Social Islami 
Bank brought in HBUS revenues totaling $44,000 per year.'^^'' 

The next day, August 4, 2006, the HSBC Financial Intelligence 
Group (FIG) issued an updated due diligence report on Social Islami 
Bank, containing significant adverse information about IIRO.'^^^ 

Among other information, the FIG report noted that the World Check 
database relied on by HSBC for KYC information classified IIRO as 
associated with terrorism, linked it to providing assistance to al Qaeda 
and other terrorist organizations, and described it as “allegedly linked” 
to the 1993 World Trade Center bombing, “plots to assassinate Bill 
Clinton and the Pope,” and “the planned destruction of the Lincoln 
Tunnel and Brooklyn Bridge.”'^ ^ 

Two days after that, on August 6, 2006, an HSBC institutional 
banker from HEAP Dhaka, Muhammad Shohiduzzaman, met with 
Social Islami Bank to discuss IIRO.'^’^ He wrote to the HSBC CEO in 
charge of the operations in Bangladesh, Steven Banner, that Social 
Islami Bank had told him that IIRO “never took part in any activities” at 
the bank, “did not even take possession of the shares,” and had never 
been a board member.’^^* Mr. Shohiduzzaman advised; “we are of the 
opinion that since IIRO is not involved in the operation of SIBL [Social 
Islami Bank Ltd.], there [are] no issues of concern locally. But since the 
matter has been raised by the US treasury, HBUS should take 
appropriate measure after careful examination of all the present and 
potential aspects.”'^®® Mr. Banner wrote to Hersel Mehani, the HSBC 
sales person assigned to the account: “Based on the feedback from 


See 8/3/2006 press release, “Treasury Designates Director, Branches of Charity Bankrolling 
A! Qaida Network,” U.S. Treasury Department, reprinted in 8/3/2006 email from HBUS Sharyn 
Malone to HBUS Stephanie Napier and others, “Social Investment Bank, Bangladesh,” HSBC 
OCC 3259936. 

1393 g/3/2006 press release, “Treasury Designates Director, Branches of Charity Bankrolling Al 
Qaida Network,” U.S. Treasury Department, reprinted at HSBC OCC 3259936. 

8/3/2006 email from HBUS Sharyn Malone to HBUS colleagues, HSBC-PSI-PROD- 
0102776 (“IIRO holds a 8.62% stake in Social Investment Bank (SIB), Bangladesh who is a US 
PCM client of HBUS since Oct. 2003. Their value to US PCM is $44K annualized.”). 

See 8/4/2006 FIG Report of Findings (Update) on Social Investment Bank Limited, OCC- 
PSI-00823818,atl2. 

'^^^Id. at 3. 

8/6/2006 email from HBAP Muhammad Shohiduzzaman to HBAP Steve Barmer, “Social 
Invst Bank Bangladesh,” HSBC OCC 3260411-412. 

1398 jd. 
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SIBL, IIRO’s role remains that of a minority shareholder that does not 
seek to engage in the management of the bank. We have no reason to 
disbelieve SIBL’s statements. There are therefore no grounds for me to 
recommend an account closure or account freeze.”''’°° 

Mr. Banner continued: 

“I appreciate, however, that HBUS may feel compelled to act 
firmly in the light of OFAC’s position. This is obviously a 
decision that rests with HBUS and I can confirm that we will not 
object to such action. That said, we would much prefer it if SIBL 
is allowed to withdraw the balances held with HBUS before you 
freeze or close the account. From our perspective there appears to 
be no justification for depriving SIBL of their funds and to do so 
would open HSBC to unwanted reputational damage / regulatory 
scrutiny locally 

In essence, Mr. Banner asked for the account to be kept open but if it 
were frozen, to allow Social Islami Bank to pull its money first so that 
none of its funds would be affected. 

Later that same day, August 6, 2006, HBUS AML Compliance 
officer Alan Ketley forwarded the email exchange to his AML 
Compliance colleagues, George Tsugranes and Andrew Rizkalla, and 
asked for their thoughts.''"’^ Both advised closing the account. Mr. 
Tsugranes wrote: 

“Although the Philippine and Indonesia branch offices were cited, 
the Treasury action also cited Abd A1 Hamid Sulaiman Al-Mujil 
who is a high ranking IIRO official. So although only the 2 
branches were cited, having a top official in the organization 
mentioned should be cause for concern involving the IIRO. As 
this organization has a 9.0% stake and does not involve itself on 
the day to day operations or mgmt - who is to say that they won’t 
sooner or later or start moving funds through this acct.”'"*” 

Mr. Rizkalla wrote: 

“I remain firm to my first opinion, the account should be closed in 
an orderly fashion. We still don’t know if there is a nominee 
shareholder interest to IIRO, the U.S. Govt has designated IIRO 


8/6/2006 email from HBAP Steve Banner to HBAP Muhammad Shohiduzzaman, ’’Social 
Invst Bank Bangladesh,” HSBC OCC 3260411. 

Id. See also 8/6/2006 email from HBAP Hereel Mehani to HBUS Alan Ketley, HSBC OCC 
3260410. 

m 2 g/y/2006 email exchange among HBUS Alan Ketley, George Tsugranes, and Andrew 
Rizkalla, “Social Invest Bank Bangladesh,” HSBC OCC 3260409-4 1 0. 

■«Ud. 
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for supporting terrorism, so even the small shareholder ownership 
entitles them to profits and dividends from Soc Invst Bank to 

reinvest where?? Hersel says monitor the accounts for 6 

months, will he be doing the monitoring??”''*®"' 

Despite their advice to close the account, Mr. Ketley lifted the 
block on the account four days after it was imposed and approved 
keeping the account open: 

“After reviewing the information provided by HSBC Dhaka my 
provisional decision is that this relationship be allowed to continue. 
It will need to be designated as an SCC Category 4 (reputational 
risk) with immediate effect and will be subject to closer monitoring 
as a result .... lam not willing to commit to the 6 months 
suggested by Hersel and we will review activity and determine 
what further action may be required as events warrant. ... IIRO’s 
shareholding is a minority holding and information received 
indicates that they exert neither management control nor have 
board representation. While this entity clearly represents a 
heightened reputational risk to the bank, I believe that with the 
knowledge we have today and the controls that are being 
implemented we have mitigated that risk adequately.”'"' ^ 

A few days later, FIG forwarded its report on Social Islami Bank 
to the head of HBUS AML Compliance, Teresa Pesce. She wrote to Mr. 
Ketley: “This makes me very uncomfortable. Can we talk to the 
business about this?”'"*®'* Despite the discomfort she expressed and the 
advice of two AML compliance officers, the account was kept open. 

Mr. Ketley reported to the Subcommittee that he understood that IIRO 
was a passive shareholder, that Social Islami was attempting to expel 
them, and that he talked about the account with Terri Pesce and Denise 
Reilly and believed they supported his decision to maintain the 
account.'"*®^ Ms. Pesce told the Subcommittee that she did not recall 
much about the relationship, but the bank should have reached out to 
OFAC with regard to it.'"'® HBUS OFAC Compliance officer Elizabeth 
Protomasto told the Subcommittee that she contacted OFAC about this 
relationship after the SDN designation, and was told that the bank could 
continue to do business with Social Islami Bank, because only two 
branches of the IIRO had been designated by OFAC as SDNs, not all 


I40< 

1405 g/7/2006 email from HBUS Alan Ketley to Hersel Mehani and others, “Social Investment 
Bank,” HSBC OCC 3260426. 

1406 gyi 1/2006 email from HBUS Teresa Pesce to Alan Ketley and Andrew Rizkalla, “Re: 
Report of Findings - Social Investment Bank Limited - Bangladesh - FIG,” HSBC OCC 
3261519. 

Subcommittee interview of Alan Ketley (2/16/2012). 

Subcommittee interview of Teresa Pesce (3/30/2012). 
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branches and not the branch in Bangladesh.''”'’ Social Islami Bank was 
also designated an SCC client.''"" 

IIRO Remained a Shareholder for Six Years. In September 
2006, Mr. Ketley asked Mr. Mehani to obtain additional information 
from the Social Islami Bank about its relationship with IIRO.''*" In 
response to a question asking whether IIRO was “a customer of the 
hank,” Mr. Mehani wrote that the bank had told him: “IIRO has no 
relationship with the subject bank and do[es] not maintain or operate any 
account with the hank.”''"^ In 2009, however, an internal FIG due 
diligence report quoted a 2008 local press article stating that the IIRO 
did have an account at Social Islami Bank, as well as over 50,000 hank 
shares which FIG estimated might then be worth $733,000.''"^ In 2010, 
the HBUS KYC profile referenced a Bangladeshi Central Bank letter 
dated June 30, 2010, stating that IIRO had accounts at three Bangladeshi 
hanks, including Social Islami Bank, that needed to he closed.''" Social 
Islami Bank told the Suhcommittee that IIRO did have a “foreign 
currency account” with the hank that was opened in 1 995, but has a 
current balance of zero.''"^ 

In 2006, Mr. Mehani indicated that the bank planned to “oust” 
IIRO as a shareholder at its next board of directors meeting and sell 
IIRO’s bank shares.''"* Mr. Mehani wrote: “IIRO never responded to 
their request to provide a full address rather than a PO box and they will 
use this to oust them by November [2006] which is allowed according to 
their Articles of Association which I have a copy given by them to 
me.”''*" Despite that communication, a 2006 Social Islami Bank board 
resolution authorizing sale of the shares,''"* and HBUS’ repeated 


Subcommittee interview of Elizabeth Protomastro (6/9/2012). 

See 2012 HBUS KYC Profile of Social Islami Bank, at 14 (applying SCC designation as of 

8/7/2006). 

‘ September 2006 emails between HBUS Alan Ketley, Hersel Mehani and others, “Social 
Invest Bank Bangladesh, HSBC OCC 3260409-418. 

1412 9/27/2006 email from HBUS Hersel Mehani to HBUS Alan Ketley and others, “Compliance 
issues from Trip Dhaka,” HSBC-PSI-PROD-0102755-756 (answer to Question 5). 

’ 5/5/2009 Financial Intelligence Unit Report of Findings on Social Investment Bank Limited, 
OCC-PSI-00823818, at 7 (quoting 10/8/2008 article from Bangladeshnews, com). The FIG 
report also stated: “You may therefore wish to obtain information from your customer to 
ascertain the status of the accounts held by the IIRO in the Social Investment Bank Ltd. You 
may also wish to consider the risks, including reputational risk involved in maintaining this 
account relationship.” Id. at 7-8 (emphasis omitted). 

2012 HBUS KYC Profile of Social Islami Bank, at 4 (“The 3 bank accounts of IIRO namely 
i) Social Islami Bank Ltd. ii) Islami Bank Bangladesh Ltd. iii) Al-Falah Islami Dank Ltd. must 
be disposed off [sic] and transferred”). 

7/11/2012 Social Islami Bank response to Subcommittee questions, at 4, PSI-SIBL-01-0001. 
1416 9/27/2006 email from HBUS Hersel Mehani to HBUS Alan Ketley and others, “Compliance 
issues from Trip Dhaka,” HSBC-PSI-PROD-01 02755-756. 

Id. See also 2012 HBUS KYC Profile of Social Islami Bank, at 5 (“Compliance advised ... 
that IIRO has no involvement in the running of the bank, is not a client of the bank and will 
likely be ousted as a shareholder [which] give considerable grounds for comfort”). 

See 12/14/2006 letter from Social Islami Bank quoting board resolution, HSBC OCC 
3342182. 
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inquiries into their status over multiple years,'*’® IIRO has remained a 
shareholder of Social Islami Bank, although its ownership interest has 
gradually dropped from 8.62% in 2006, to 3.85% in 2009, to 1.69% hy 
2010.'*^“ IIRO currently holds a 1.61% interest in the hank, six years 
after Social Islami Bank promised to ensure the shares would he sold.'*^' 

In 2009, Social Islami Bank sent a letter to HBUS indicating that it 
was planning to seek permission from the country’s High Court to sell 
the shares still held hy IIRO.'*^ In 2010, Social Islami Bank informed 
HBUS that the Bangladesh government had reached an agreement with 
IIRO that, after certain safeguards were put in place, would allow IIRO 
to begin operating in the country again. One of the conditions was 
that the IIRO would have to “dispose” of its Social Islami Bank 
account,'*^* although that account remains open today with a zero 
balance. Social Islami Bank informed the Subcommittee that, due to 
the government’s actions, “the bank is under definite obligation in 
paying dividend/issuing bonus shares/right shares to IIRO as per the 
instructions of the Central Bank and Ministry of Finance which were not 
paid/issued in their favor till 31/05/2010.”'*"* 

A Second Terrorist Financier Shareholder. Also in 2009, a due 
diligence report issued by the HBUS Financial Intelligence Group 
identified a second, longterm Social Islami Bank shareholder that raised 
concerns. It disclosed that Islamic Charitable Society Lajnat al-Birr A1 


See, e.g., January 2007 email exchange among HBUS Muhammad Shohiduzzaman, Hersel 
Mehani, Alan Ketley, and others, “Social Investment Bank - IIRO ” OCC-PSI-00808829; 
9/23/2008 email exchange among HBUS Alan Williamson, Daniel Jack , Hersel Mahani, and 
others, “Social Investment Bank,” OCC-PSI-00246337; 9/23/2008 email exchange among 
HBUS Alan Williamson, Daniel Jack, Gloria Strazza, Monique Codjoe, and others, “POSITIVE 
OFAC MATCH ~ IIRO -KYC NOTES DATABASE,” OCC-PSI-00246334; 9/24/2008 call 
report from a meeting at Social Islami Bank, HSBC-PSl-PROD-0102615; 3/8/2009 letter from 
Social Islami Bank to HSBC Dhaka, “Information regarding Bank’s ownership for KYC 
purposes,” HSBC-PSl-PROD-0 102743, at 1; 2/9/2010 email from HBUS Jon K. Jones to HEAP 
Sadique Reza and others, “Compliance Conditions: Social Islami Bank Ltd,” HSBC-PSI-PROD- 
0102737. 

See 2012 HBUS KYC Profile of Social Islami Bank at 3-4; 3/8/2009 letter from Social 
Islami Bank to HSBC Dhaka, “Information regarding Bank’s ownership for KYC purposes,” 
HSBC-PSr-PROD-0102743, at L 

7/1 1/2012 Social Islami Bank response to Subcommittee questions, at 3, PSI-SlBL-01-001; 
See also 2012 HBUS KYC Profile of Social Islami Bank, at 3, 16. 

3/8/2009 letter from Social Islami Bank to HSBC Dhaka, “Information regarding Bank’s 
ownership for KYC purposes,” HSBC-PSl-PROD-0102621-625, at 1. Around the same time in 
2009, HSBC’s Commercial and Institutional Banking in the Asia Pacific region further expanded 
HSBC’s relationship with Social Islami Bank by providing it with new commercial banking 
services. The approval form mistakenly characterized Social Islami Bank as “medium risk,” 
erroneously said it was not an SCC designated client, and stated that none of the bank’s disclosed 
shareholders increased the client’s risk profile, despite a specific reference to IIRO. 3/10/2009 
CIBM-Institutional Banking KYC Profile for Social Islami Bank Limited, HSBC-PSI-PROD- 


0102646. 


1423 

1424 

1425 

1426 


2012 HBUS KYC Profile of Social Islami Bank, at 4. 

Id. 

7/1 1/2012 Social Islami Bank response to Subcommittee questions, at 2, PSI-SIBL-01-001. 
Id. at 3. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00472 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



459 


VerDate Nov 24 2008 


285 

Islam still held a 1 .54% ownership interest in the bank.’''^’ The 2009 
FIG report explained that World Check, the database relied on by HSBC 
for KYC purposes, had classified the charity “as a terrorist organization 
with reported tie[s] to Hamas. In September 2008, the Israeli 
government reportedly declared it an illegal entity.”''*^® Despite this new 
information in the 2009 FIG report, the HBUS KYC profile on Social 
Islami Bank does not acknowledge it, stating instead in a note: 

“Updated EDD [Enhanced Due Diligence] ROF [Report on Findings] 
received May 5, 2009. Report provided no new, or, up to date 
information.”’'*^^ Social Islami Bank has informed the Subcommittee 
that Lajnat al-Birr remains a 0.22% share owner, but does not have any 
account at the bank.’'*^” 

Sobhan Misconduct. The ongoing ownership of the bank’s shares 
by IIRO and Lajnat al-Birr was not the only troubling development. 
Social Islami Bank’s initial Chairman of the Board, Ahmed Akbar 
Sobhan, also known as Shah Alam, was a well-known businessman who 
held, with his son, a 3.35% ownership interest in the bank since its 
inception. Begirming in 2006, however, Mr. Sobhan and his son 
became the subjects of several criminal investigations involving bribery, 
corruption, fraud, and tax evasion. In 2007, Mr. Sobhan and his son 
reportedly fled to the United Kingdom, after which Mr. Sobhan was the 
subject of corruption charges brought in his absence by the Bangladeshi 
Anti-Corruption Commission which sentenced him to eight years in 
prison. This troubling information was detailed in the 2009 FIG 
report that, inexplicably, was later described in the Social Islami KYC 
profile as containing no new information.''*'’'’ 

In May 2012, HSBC terminated its relationship with Social Islami 
Bank.''”^ David Bagley, head of HSBC Group Compliance, told the 
Subcommittee, when asked, that the closure decision had been a “no 


™ 5/5/ 2009 FIG report, HSBC PSI PROD 0102696, at 3, 5. 

Id. at 5 (emphasis in original is omitted). 

2012 HBUS KYC Profile of Social Islami Bank, at 4. 

S430 1/2012 Social Islami Bank response to Subcommittee questions, PSl'SIBL-OI-0001-004, 

at 002. 

See “Social Investment Bank Ltd. Director’s Business Information,” Social Islami Bank, 
undated, HSBC-PSI-PROD-0 102626; 2003 Bankers Almanac at 3891 (listing Mr. Sobhan with a 
2.12% interest and Mr. Sobhan and his son, Sadat Sobhan, sharing a 1 .23% interest). 

See 5/5/2009 Financial Intelligence Unit Report of Findings on Social Investment Bank 
Limited, HSBC OCC 326 1 530, at 6-7. See also “Court orders to arrest Bashundhara chairman,” 
The Daily Star (4/26/2012), http://www.thedaiiystar.net/newDesign/news- 
details.php?nid=231738; “Shah Alam lands injml,’’The Daily Star (3/21/201 1), 
http://ww'w.thedai!ystar.net/newDesign/news-detaiis.php?nid=l 78563. 

See 5/5/2009 Financial Intelligence Unit Report of Findings on Social Investment Bank 
Limited, HSBC OCC 3261530, at 6-7. 

5/5/2009 Financial Intelligence Unit Report of Findings on Social Investment Bank Limited, 
HSBC OCC 3261530, at 2, 6-7; 2012 HBUS KYC Profile of Social Islami Bank, at 4. 

1435 1/2012 Social Islami Bank response to Subcommittee questions, PSI-SIBL-01-0001-004, 

at 002. 
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brainer.”''*^* He did not explain what factors led to the termination 
decision. Social Islami Bank currently has no open account with any 
HSBC affiliate. 

J. Analysis 

HSBC is a global bank with a strong presence in many countries 
confronting terrorist threats. If safeguards are lacking, HBUS offers a 
gateway for terrorists to gain access to U.S. dollars and the U.S. 
financial system. HSBC has a legal obligation to take reasonable steps 
to ensure it is not dealing with banks that may have links to or facilitate 
terrorist financing. 

Banks rarely carry explicit links to terrorist financing, but in the 
three banks reviewed here, an array of factors raised troubling questions. 
In the case of A1 Rajhi Bank, the factors included the naming of a key 
bank official in a list of al Qaeda financial benefactors, a U.S. law 
enforcement search of Al Rajhi nonprofit and business ventures in the 
United States to disrupt terrorist financing, a CIA report targeting the 
bank for being a “conduit” for extremist finance, the bank’s refusal to 
produce authenticating bank documents for use in the criminal trial of a 
client who cashed travelers cheques at the bank for use by terrorists, and 
multiple accounts held by suspect clients. In the case of Islami Bank, 
the factors included substantial ownership of the bank by al Rajhi 
interests. Central Bank fines for failing to report suspicious transactions 
by militants, and an account provided to a terrorist organization. In the 
case of Social Islami Bank, the factors included ownership stakes held 
by two terrorist organizations whose shares were exposed but never sold 
as promised, and a bank chairman found to be involved with criminal 
wrongdoing. 

In each case, HBUS and HSBC personnel were aware of the 
information, but approved or maintained the accounts anyway. When an 
AML Compliance officer like Beth Fisher declined to approve an 
account, HSBC personnel found someone else to take her place. In 
several cases, Christopher Lok, head of U.S. Banknotes, took on the role 
of relationship manager fighting for account approval. His test for 
taking on that role depended in part upon how much revenue an account 
would produce. Al Rajhi Bank’s threat to terminate business with 
HSBC affiliates also appears to have galvanized HBUS’ renewal of the 
account. 

Another striking feature of these accounts is the fact that a decision 
by one HSBC affiliate to terminate a relationship with a bank due to 
terrorist financing concerns did not always lead other HSBC affiliates to 


'■** Subcommittee interview of David Bagley (5/10/2012). 

7/1 1/2012 Social Islami Bank response to Subcommittee questions, PSI-SIBL-01-0001-004, 
at 002. 
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follow suit. In the case of A1 Rajhi Bank, for example, HBUS 
terminated the relationship, but HSBC affiliates in the Middle East 
continued to do business with the bank. One HBUS executive later 
argued that, since HSBC was already exposed to the reputational risk 
posed by A1 Rajhi Bank through the accounts at other HSBC affiliates, 
its reputational risk would not increase if one more account were 
opened. In May 2012, HSBC changed its policy to apply decisions to 
terminate a client relationship to apply globally to all its affiliates. 
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VI. HOKURIKU BANK: CLEARING BULK 

TRAVELERS CHEQUES 

With few questions asked and despite ongoing evidence of 
suspicious activity, HBUS cleared tens of millions of dollars per year in 
bulk travelers cheques for Hokuriku Bank of Japan. According to 
Hokuriku Bank, from 2005 to October 2008, HBUS cleared travelers 
cheques totaling between $70 million and $90 million per year for the 
bank, producing a grand total in less than four years of more than $290 
million. HBUS estimated that, at one point in 2008, it was clearing 
travelers cheques for the bank at an average of $500,000 to $600,000 per 
day. The Hokuriku deposits consisted of U.S. dollar travelers cheques 
that were in denominations of $500 or $1,000, came in batches of 
sequentially numbered cheques, and were signed and counter-signed by 
the same person using an illegible signature. They were made payable 
to one of 30 different companies or individuals, all of whom claimed to 
be in the used car business. The cheque beneficiaries were clients of 
Hokuriku Bank, but the cheques were purchased from the same Russian 
bank for deposit into their accounts in Japan. When HBUS finally asked 
Hokuriku Bank about those clients and the business purpose behind 
Russians cashing massive numbers of U.S. dollar travelers cheques on a 
daily basis for deposit in Japan, Hokuriku Bank claimed to have little or 
no KYC information or understanding of its clients’ banking 
transactions. 

The documents produced to the Subcommittee disclosed that some 
HBUS AML Compliance personnel raised concerns about the Hokuriku 
travelers cheques in 2005, but failed to investigate the transactions. The 
Hokuriku travelers checks came to HBUS’ attention again in 2007, 
during the course of an OCC AML examination which found “serious 
concerns related to weak policies, procedures, systems and controls” 
with how it processed monetary instruments,''*^* but HBUS again failed 
to investigate the transactions. In 2008, during a followup OCC AML 
examination, the OCC singled out the Hokuriku travelers cheques as 
suspicious and required HBUS to obtain additional information about 
them. 


The OCC and HBUS quickly uncovered troubling information 
about the travelers cheques, including that they had originated in Russia, 
a country at high risk of money laundering, involved millions of U.S. 
dollars, and had no clear business purpose. When HBUS sought more 
information about the cheques, Hokuriku Bank at first delayed 
responding, then provided minimal information, and finally declined to 
investigate further, claiming to be constrained by bank secrecy laws 


3/31/2007 OCC Report of Examination for HSBC bank, OCC-PSI-00304077. [Sealed 
Exhibit.] 
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from disclosing client-specific information. In 2008, at the urging of the 
OCC, HBUS stopped accepting travelers cheques from the bank and told 
the OCC that it planned to close the Hokuriku account within 30 days. 
HBUS later decided to continue to do business with Hokuriku Bank in 
other areas despite its poor AML efforts. In 2010, during the course of 
another AML examination, the OCC uncovered the ongoing relationship 
with Hokuriku Bank. In May 2012, HBUS closed the Hokuriku Bank 
account, although Hokuriku Bank continues to do business with other 
HSBC affiliates. 

A. Hokuriku Bank 

Hokuriku Bank Ltd. is a Japanese regional bank with over 2,800 
employees and 185 branches.''*^’ It also has representative offices in 
New York, London, Singapore, and China.''*'*” Hokuriku Bank traces its 
origins back to 1877; in 1961, it began trading on the Tokyo Stock 
Exchange.*'*'*' In 2003, the Hokugin Financial Group was formed in 
Japan, and Hokuriku Bank became a wholly-owned subsidiary of the 
Group. In 2004, the Group merged with another financial institution and 
changed its name to Hokuhoku Financial Group Inc. which continues to 
operate as the bank’s holding company today.' Hokuhoku Financial 
Group is headed by Shigeo Takagi, who has been the President of both 
the Group and Hokuriku Bank since 2003. '‘*‘*’ 

According to a 2010 HBUS Know Your Customer (KYC) Profile, 
Hokuriku Bank is a longstanding customer of HBUS, which has 
provided it with correspondent banking services in Hong Kong, Korea, 
and the United Kingdom, as well as the United States.*'* “* In addition to 
HBUS, Hokuriku Bank has correspondent relationships with several 
other HSBC affiliates as well, including Hong Kong and Shanghai 
Banking Corporation, Ltd. and HSBC Middle East. By 2001, 
Hokuriku Bank had become a client of HBUS’ Payments and Cash 


See HBUS “Know Your Customer Profile” for Hokuriku Bank (hereinafter “HBUS KYC 
ProfiIe”)(last updated on 9/3/2010), prepared by HBUS Global Payments and Cash Management 
division, HSBC-PSI-PROD-0 1 0241 5-425, at 417; "Hokuhoku Financial Group Inc. Annual 
Report 201 1,” (year ended March 31, 201 l)(hereinafter “Hokuhoku 2011 Annual Report”), at 
59, http://www.hokuhoku-fg.co.jp/english/financial/docs/fg_ar201 1 .pdf. 

Hokuhoku 2011 Annual Report, at 1, 59. 

See Hokuhoku 2011 Annual Report at 59; HBUS KYC Profile at HSBC-PSl-PROD- 


0102416. 

»«ld. 

HBUS KYC Profile at HSBC-PSl-PROD-0102420; Hokuhoku 2011 Annual Report, at 61. 
HBUS KYC Profile at HSBC-PSI-PROD-0102417-418. HBUS told the OCC that it first 
Opened an account for Hokuriku Bank in 1978, through its U.S. predecessor. Marine Midland 
Bank, which HSBC purchased during the 1980s. 5/15/2012 email from OCC to the 
Subcommittee, “HSBC - Hokuriku Questions,” PSI-OCC-38-000 1-002. 

See 6/26/2012 letter from Hokuriku Bank’s legal counsel to the Subcommittee, PSI- 
HokurikuBank-0 1 -000 1-016, at 001 . 
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Management (PCM) division which used its processing centers in New 
York to handle most Hokuriku transactions. 

HBUS provided Hokuriku Bank with two accounts, numbered 
50385 and 34738. Account No. 50385 was closed on Feb. 6, 2009, and 
its balance transferred to Account No. 34738, which remained open until 
May 2012.’'*''’ HBUS provided Hokuriku Bank with access to U.S. 
dollars, primarily by clearing millions of dollars in U.S. dollar travelers 
checks each year. According to Hokuriku Bank, HBUS cleared travelers 
cheques totaling about $77 million in 2005, $72 million in 2006, $90 
million in 2007, and $52 million in 2008, until HBUS stopped providing 
clearing services for the bank’s bulk travelers cheques. Those figures 
show that, in less than four years, HBUS cleared travelers cheques for 
Hokuriku Bank totaling over $290 million. HBUS also processed wire 
transfers from Hokuriku Bank and provided other banking services. In 
2007, the Hokuriku account produced revenues for HBUS totaling about 
$47,000.''''*'’ 

According to the HBUS KYC Profile, the initial HBUS Account 
Manager for Hokuriku Bank was Nanayo Ryan, and the Relationship 
Manager for KYC approval purposes was Beth Fisher.''**'* In 2008, the 
HBUS Account Manager switched to Kgomotso Hargraves, while the 
Relationship Manager for KYC approval purposes switched to Wayne 
W. Ferguson, then Anthony Julian, then Wen Lu Wu.'"**' The Global 
Relationship Manager since 2008 has been Machiko Yamashita.''**^ 

B. Travelers Cheques 

Travelers cheques are typically sent by one financial institution to 
another via a “pouch.” A pouch is an envelope or package, and pouch 
activity refers to the sending or receipt and processing of an item that is 
sent to a bank from another country by common carrier, courier, or 
referral agent. Pouches typically contain currency or a monetary 
instrument, such as a travelers cheque, cashiers cheque, or money order, 
which is intended to be used to make a deposit or loan payment, or to 
engage in another transaction. Pouches can be sent by an unrelated 
financial institution, a bank affiliate, or by an entity or individual. 


''** HBUS KYC Profile at HSBC-PSI-PROD-0I02415-425, at 423. 

Id- at 420. HBUS closed the second account on May 21, 2012. 6/26/2012 letter from 
Hokuriku Bank’s legal counsel to the Subcommittee, PSI-HokurikuBank-01-0001-0I6, at 001. 

See 6/26/2012 letter from Hokuriku Bank’s legal counsel to the Subcommittee, chart 
entitled, “Volume of U.S. Dollar Travelers Checks to HBUS for Clearance by year,” PSI- 
HokurikuBank-01-0001-016. Hokuriku Bank cleared another $52 million in 2008, until HBUS 
stopped clearing the cheques in October 2008. 

HBUS KYC Profile at HSBC-PSI-PROD-0102415-425, at 420. 

Id. at 424. 

Id. at 418, 424-425. 

9/5/2008 email from Hideki Matsumoto to Michio Yamashita and others, “Hokuriku Bank,” 
OCC-PSI-00808695, at 5. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00478 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



465 


VerDate Nov 24 2008 


291 


In addition to physical delivery of monetary instruments, many 
banks, including HBUS, provide a service called “Remote Deposit 
Capture” (RDC). RDC enables customers who sign up for the service to 
send electronic images of physical monetary instruments that they wish 
to present for deposit, including travelers cheques. Processing these 
electronically sent deposits are sometimes referred to as part of the 
receiving bank’s pouch activity. 

At large banks, pouched monetary instruments are typically sent to 
a specialized facility for processing. These facilities typically process a 
high volume of monetary instruments on a daily basis. When a bank 
processes a pouched travelers cheque, it typically credits the amount of 
the cheque to the correspondent account of the client financial institution 
that sent the cheque. Pouch activity is often referred to as “cash letter” 
activity, since it consists primarily of cashing a monetary instrument by 
crediting an account with the amount specified on the instrument. 
Providing cash in exchange for a monetary instrument is also referred to 
as “clearing” the instrument. 

HBUS has two processing centers in the United States, one in 
Brooklyn and one in Buffalo, New York, both of which process a high 
volume of monetary instruments on a daily basis. RDC services are 
provided solely at the Buffalo center.*''” Both centers segregate 
travelers cheques from other types of deposits and process them 
separately, crediting the U.S. dollars to the relevant client accounts.'''” 

A processing clerk typically skims each deposit to identify any 
sequentially numbered travelers cheques. If the sequentially numbered 
cheques total more than a designated amount, the clerk is required to 
refer the deposit to HBUS AML Compliance for approval prior to 
processing, If the sequentially numbered travelers cheques exceed 
another specified threshold, the processing clerk must attach a Traveler’s 
Cheque/Money Order High Value Deposit Information (TC/MO HVDI) 
form to the deposit prior to processing.''*’^ If the form is not attached, 
the deposit must be submitted to AML Compliance for approval prior to 
processing.'''’^ This procedure is intended to ensure that HBUS AML 
Compliance is kept apprised of large deposits of sequentially numbered 
travelers cheques, since such cheques are often associated with money 
laundering or other misconduct. 


10/4/2010 draft OCC Supervisory Letter to HBUS, OCC-PSI-00863984-992, at 2. [Sealed 
Exhibit.] 

6/26/2008 Memorandum to the OCC Examiner-In-Charge Anthony DiLorenzo from OCC 
Examiner Elsa de la Garza, “Pouch Transactions - Hokuriku Bank and SK Trading Company 
Ltd,” OCC-PSI-00885828,at 1. [Sealed Exhibit] 

H55 

1457 
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U.S. banking regulators have long warned financial institutions 
about the money laundering risks associated with travelers cheques 
which can be purchased with cash by a non-customer of the bank and 
used to move substantial funds across international borders in ways that 
are difficult to trace. Travelers cheques have been used by 
terrorists, drug traffickers,'''*’ and other criminals.''"" 

C. 2005 Concerns about Hokuriku Travelers Cheques 

The documents produced to the Subcommittee show that HBUS 
AML Compliance personnel were aware of, and expressed concerns 
about, the large number of travelers cheques being cashed for Hokuriku 
Bank from at least as early as March 2005, but did little about them for 
years. 


On March 15, 2005, HBUS AML compliance officer George 
Tsugranes sent an email to the HBUS account manager for Hokuriku 
Bank, Nanayo Ryan, in which he noted that, in less than 60 days from 
January to March 2005, Hokuriku Bank had deposited travelers cheques 
totaling over $2 million.'''^ The email provided a chart listing 41 
separate deposits over a 51-day period, showing that the deposited 

See, e.g., Federal Financial Institutions Examination Council (FFIEC) Bank Secrecy 
Act/Anti-Money Laundering (BSA/AML) Examination Manual, “Core Overview: Purchase and 
Sale of Monetary Instruments,” (6/23/2005) at 59; FFIEC BSA/AML Examination Manual, 
“Purchase and Sale of Monetary Instruments-Overview,” (8/24/2007), at 212 (“The purchase or 
exchange of monetary instruments at the placement and layering stages of money laundering can 
conceal the source of illicit proceeds. As a result, banks have been major targets in laundering 
operations because they provide and process monetary instruments through deposits.”). 

See, e.g., United States v. al-Haramain Islamic Foundation Inc. . Case No. 6:05*cr-60008“HO 
(USDC Oregon) Indictment (2/17/2005); “Former U.S. Head of Al-Haramain Islamic 
Foundation Sentenced to 33 Months in Federal Prison,” U.S. Attorney’s Office for the District of 
Oregon press release (9/27/U), at 1 (describing how the convicted defendant cashed $130,000 in 
U.S. dollar travelers cheques at a bank in Saudi Arabia and then provided the funds to support 
violent extremists in Chechnya), 

See, e.g.. United States v. Wachovia Bank N.A. . Case No. 10-20165-CR-Lenard (USDC 
SDFL), Factual Statement, Exhibit A to Deferred Prosecution Agreement (3/16/2010), at f 35 
(describing how Wachovia Bank processed $20 million in suspicious travelers cheques, some 
portion of which was suspected to include illegal drug proceeds); “Mow a Big U.S. Bank 
Laundered Billions from Mexico’s Murderous Drug Gangs,” The Guardian . (4/2/201 1), 
http://www.guardian.co.uk/world/201 l/apr/03/us-bank-mexico-drug-gangs. See also Albajon v. 
Gualiotta . 72 F. Supp. 2d 1362, 1365 (S.D. Fla. 1999) (admitting travelers cheques as evidence 
of drug trafficking proceeds); United States v. $41.305.00 in Currency & Travelers Checks . 802 
F.2d 1339, 1343 (llthCir. 1986) (finding travelers cheques could be seized as drug trafficking 

g- Folk V. State . 192 So. 2d 44, 46 (Fla. Dist Ct. App. 1966) (upholding conviction for 
signing a false name on travelers cheques and cashing them); United States v. Sebaggala . 256 
F.3d 59, 63 (1st Cir. 2001) (upholding conviction for using undeclared travelers cheques to 
attempt to move money fraudulently through U.S. customs). 

3/15/2005 email from HBUS George Tsugranes to HBUS Nanayo Ryan, “Hokuriku Bank 
C/L Activity,” HSBC OCC 3 1 1 3976-977. The chart is unlikely to contain a comprehensive list 
of all of the travelers cheques presented by Hokuriku Bank over the course of those two months 
since, during 2005 alone, Hokuriku Bank cleared $77 million in travelers cheques through 
HBUS. See 6/26/2012 letter from Hokuriku Bank’s legal counsel to the Subcommittee, chart 
entitled, “Volume of U.S. Dollar Travelers Checks to HBUS for Clearance by year,” PSI- 
HokurikuBank-0 1 -000 1 . 


proceeds). 
See, e. 
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amounts ranged from $20,000 to $100,000 at a time; often consisted of 
multiple $1,000 travelers cheques; and referenced about ten different 
clients, including corporations and individuals.''"’^ All of the deposits 
were to Hokuriku Bank’s Account No. 50385. Mr. Tsugranes asked Mr. 
Ryan: 


“to reach out to the bank and ask that adequate KYC is on file for 
each name listed on the spreadsheet, whether the customer activity 
is consistent with the KYC, and also who is their customer base 
(local clients, people buying cars for export, etc.) and why US 
dollar travelers checks would be used for payment.”''*^'' 

This email shows that, in early 2005, Hokuriku’s pattern of making large 
deposits with multiple travelers cheques triggered a review by HBUS 
AML Compliance persoimel concerned about who was behind the 
deposits. Despite the request for more information in the March 2005 
email, the Subcommittee received no additional documentation or 
information indicating that HBUS AML Compliance personnel actually 
sought or obtained additional KYC information from Hokuriku Bank in 
early 2005, regarding the travelers cheques it was cashing. 

Eight months later, in November 2005, several emails indicate that 
HBUS AML Compliance personnel took a broader look at the cash 
letter/pouch activity at its Brooklyn center, apparently in an effort to 
detect unlicensed money service business activity. This inquiry was 
not specific to Hokuriku Bank. On Nov. 23, 2005, HBUS AML senior 
compliance officer Alan Ketley sent an email to AML compliance 
officer Mark Balawender stating that, while HBUS had “strong 
monitoring procedures in place for PCM clients,” he wasn’t sure about 
what was “in place for other clients” at the Brooklyn center. He 
attached to the email a 2 1 -page chart listing the “cash letter volume” for 
35 bank clients over a one-year period from April 2004 to March 
2005.'“'®^ The data disclosed, among other information, that over the 
course of the year, Hokuriku Bank had cashed an increasingly larger 
volume of monetary instruments each month into its Account No. 

50385, building from 36 items totaling about $209,000 in April 2004, to 
1 09 items totaling over $4.3 million in March 2005. Altogether for the 
year, Hokuriku Bank is recorded as having deposited at HBUS 562 
“envelopes” with over 24,000 items totaling $ 1 1 .2 million. 


3/15/2005 email from HBUS George Tsugranes to HBUS Nanayo Ryan, “Hokuriku Bank 
C/L Activity,” HSBC OCC 3 1 1 3976-977. 

I«4 

See email exchange among HBUS AML Compliance personnel, from 1 1/23/2005 - 
1 1 /29/2005, HSBC OCC 3 1 80772-797, at 773 (“I do not believe there are any formal or 
documented checks in place that would identify potential unlicensed money service business 
activity”). 

Id. at 776-797. 

Id. at 776. 
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On November 25, 2005, Mr. Balawender sent an email to Mr, 
Ketley with his findings.''’^* He described the Brooklyn center as 
engaged in “heads down volume process[s]ing.” He stated, “Given the 
volume/deadline driven/processing nature of the departments above, I 
am not sure what we can do. ... I would anticipate a rather strong push- 
back from Ops and the branches, if AML Compliance were to suggest 
additional processes.”''**^® 

No further information or inquiries related to Hokuriku Bank 
appear in the 2005 timeframe among the documents provided to the 
Subcommittee in response to a broad request for all documents related to 
Hokuriku Bank and pouch activity. When asked for more information 
about the March and November 2005 reviews, Mr. Ketley indicated that 
he could not recall either Hokuriku Bank or what happened in either 

1470 

review. 

In sum, despite a specific March 2005 AML inquiry into $2 
million in travelers cheques cleared for Hokuriku Bank, and a broader 
November 2005 inquiry that included evidence of an escalating pattern 
of Hokuriku deposits, HBUS AML Compliance apparently took no 
further action to investigate Hokuriku’s cash letter activities in 2005. 

The 2005 and 2006 OCC annual examination of HBUS also made no 
mention of AML issues related to its pouch activities or clearance of 
travelers cheques.''*” 

D. 2007 OCC Pouch Examination 

Two years after the internal HBUS inquiries, in early 2007, the 
OCC commenced an AML examination of HBUS’ pouch activities.'"'’^ 
In response, HBUS AML compliance officer George Tsugranes 
produced a chart listing clients with a high volume of cash letter activity 
during the last two months of 2006.''”'' Hokuriku Bank was repeatedly 
listed, appearing in the chart more times than any other bank. Over a 
62-day period, the chart identified 100 Hokuriku deposits. The deposit 
amounts ranged from $20,000 to $193,000 at a time, often consisted of 
multiple $1,000 travelers cheques, and referenced about a dozen clients, 
both corporate and individual. Many of the client names on the 2006 


Id, at 773. 

.469 y 

Subcommittee interview of Alan Ketley (2/16/2012). 

See OCC Reports of Examination of HBUS, for the examination cycle ending March 31, 
2005 and March 31, 2006. [Sealed Exhibit.] 

See 5/8/2007 OCC Memorandum, “BSA/AML Examination - HSBC, USA, NA - Pouch 
Activities,” OCC-PSI-01298647 [Sealed Exhibit.]; 3/2/2007 email from HBUS George 
Tsugranes to HBUS Alan Ketley, HSBC OCC 3352026. 

See chart, prepared by HBUS AML Compliance, HSBC OCC 3352034-037. 

Hokuriku Bank told the Subcommittee that, since the mid 1980s, it has limited its clients to 
deposits of no more than $ 1 ,000 in travelers cheques per person per day, unless the cheques were 
issued by Hokuriku Bank or the depositor was a “regular customer’’ and the bank “deemed that 
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list had also appeared on the March 2005 list compiled by Mr. 
Tsugranes, The total amount deposited over the two-month period was 
about $5.6 million. 

Mr. Tsugranes sent the chart to his supervisor, Mr. Ketley, and 
wrote that “all acc[oun]ts are being checked to ensure activity is 
reflected on KYC.” Of the documents produced to the Subcommittee, 
none indicate, however, what information was “checked” with respect to 
Hokuriku Bank or what Mr. Tsugrantes learned. 

Six weeks later, on April 24, 2007, Mr. Ketley asked HBUS AML 
compliance officers Mr. Tsugranes and Robert Guthmuller, to travel to 
the HBUS Brooklyn center “to gain a thorough understanding of what is 
processed . . . [and] what items are reviewed.”''*’^ Three days later, on 
April 27, 2007, Mr. Guthmuller sent an email to Mr. Ketley providing 
him with “the Readers Digest version” of their findings after “a high 
level review of cash letter processing” at the Brooklyn center. 

Mr. Guthmuller’s email stated that the Brooklyn center “treat[ed] 
all clients the same,” regardless of whether cash letter items involved 
“high risk clients.” He wrote: “We should be drilling down on our high 
risk customers” and, for example, “identify those clients that in the past 
have sent a large number of sequentially numbered travelers checks ... 
and monitor accordingly.”''"^ Mr. Guthmuller also wrote that the center 
staff had “divided loyalty,” explaining: 

“Their main job is processing checks -5 :00PM deadline. But they 
are also asked to be the ‘front line’ for monitoring, referring items 
to Delaware for further investigation. One job focuses on pushing 
items through, another is to go slower, review items, ask 
themselves questions - is it suspicious? - contact Delaware - wait 
for a response - hopefully before 5:00PM. 

[Ojne solution is to have a full time compliance person review 
items FULLY, that means internet searches, OF AC, wor[l]dcheck 
etc. Additionally the compliance person could drill down on the 
high risk accounts.”''*^* 


the funds will be collected from the customer should it turn out that the travelers’ che[c]k was 
not duly issued.” 6/26/2012 letter from Hokuriku Bank’s legal counsel to the Subcommittee, 
PSl-HokurikuBank-Ol-OOOl-Olb, at 004. 

4/23/2007 email from HBUS Alan Ketley to HBUS George Tsugranes, Robert Guthmuller, 
Mark Balawender, and others, “Vist to Brooklyn Ops,” OCC'PSI-003 12153, at 5-6. 

4/27/2007 email from HBUS Robert Guthmuller to HBUS Alan Ketley, “Visit to Brooklyn 
OpsLink,” OCC-PSI-003 121 53, at 4. 

Id. at 5. 

Id. at 5 (emphasis in original). 
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Mr. Guthmuller also stated that HBUS “[m]ust improve trend 
analysis. Nothing done in Brooklyn.” He wrote: 

“We have reportedly had all travelers checks $20k and over ... on 

Excel for 4 years but haven’t used/sorted items for trend analysis. 

Let’s start looking at it. WHAT ABOUT SEQUEN[T]IALLY 

NUMBERED TRAVELERS CHECKS AGGREGATING SAY 

$15K per day, same payee 

This email indicated that HBUS had compiled an extensive database of 
travelers cheque information, but was not using it to identify suspicious 
travelers cheque activity or high risk clients. 

Mr. Guthmuller also wrote that the HBUS AML office in 
Delaware “must improve” its enhanced due diligence (EDD) efforts, 
including by using “more internet searches, calls on high risk clients 
asking questions, use of certifications, etc.”'‘'*“ His email indicated that 
HBUS’ AML staff did not engage in sufficient due diligence activity to 
identify high risk clients depositing bulk travelers cheques. 

Mr. Ketley forwarded the email to Anne Liddy, a senior HBUS 
Compliance official, with the comment, “Food for thought.”'^'*' He 
wrote: “We will look to have a meeting with Bob [Guthmuller] next 
week to discuss further.” 

Ten days later, on May 7, 2007, Mr. Tsugranes sent an email to 
Mr. Ketley and others stating he had “discussed the issues with the 
Delaware AML team and asked for some input on ways to improve our 
cash letter monitoring.”*'**^ He stated: “Below are some 
recommendations which will allow for both operational benefits and a 
more risk based monitoring approach.” 

His email advised reducing the monitoring of checks from 
Fortune 100 names, and revising the dollar limit to $100,000 to trigger 
review of an account of a Special Category Client (SCC). While 
reducing review of Fortune 100 names could be seen as an effort to 
target AML review efforts to higher risk transactions, imposing a 
$100,000 dollar limit on SCC clients, the bank’s highest risk clients, set 
a high bar to trigger a review. With respect to Hokuriku Bank and 
another bank in Korea, Mr. Tsugranes advised that AML personnel track 
the banks’ total daily deposits, “eliminate the check by check 
comparison,” and “only investigate if an apparent MIF [Monetary 
Instrument Form] was not included.” He wrote: “To summarize we 


Id. at 5 (emphasis in original). 
Id. at 5. 

Id. at 4. 

Id. at 2-3. 
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would be focusing more on SCC clients, cutting back on some Group 
reviews in non HRCs [non High Risk Clients] and also tracking” a 
specific bank of concern. 

While the Tsugranes email advocated a stronger focus on SCC 
clients, it did not address Mr. Guthmuller’s suggestion to identify other 
high risk clients by analyzing the bank’s travelers cheque data. His 
email did not, for example, include the Guthmuller suggestion to 
strengthen trend analysis of the cash letter activity at the Brooklyn center 
by utilizing the four years of travelers cheque data already included in 
Excel spreadsheets. The Tsugranes email also failed to include the 
suggestion, urged in capital letters in the Guthmuller email, to identify 
and investigate clients making deposits of sequentially numbered 
travelers checks above a specified threshold. Instead, the Tsugranes 
email recommended reducing the monitoring directed toward Hokuriku 
Bank hy eliminating the “check by check comparison” that had been 
routine practice. In the end, despite another chart disclosing multi- 
million-dollar Hokuriku deposits of $1,000 travelers checks, the final 
result of HBUS’ review was to advocate devoting less rather than more 
attention to the hank. 

The two OCC examiners who conducted the 2007 examination 
told the Subcommittee that they were very concerned about the lack of 
AML controls over HBUS pouch activity and had recommended that the 
OCC impose a Cease and Desist Order requiring HBUS to revamp 
them.'"'®^ They later concluded, however, that they were unable to meet 
the OCC standards required for issuing the order. Instead, the OCC 
examiners designated the lack of AML controls over pouch processing 
as a Matter Requiring Attention (MRA) which was included in the 
annual OCC Report of Examination provided to the HBUS Board of 
Directors on July 24, 2007.'“'*'' The MRA did not, however, explicitly 
identify the Hokuriku travelers cheques as a problem. 

The OCC uses its annual Reports on Examinations to ensure bank 
boards are kept apprised of serious bank deficiencies requiring action by 

See 7/3/2007 OCC memorandum, “BSA/AML Examination — HSBC, USA, NA — Pouch 
Activities,” OCC-PSI-0087773 [Sealed Exhibit.]; Subcommittee interviews of Joseph Boss 
(i/30/2012) and Elsa de la Garza (1/9/2012). 

1484 7/24/2007 OCC Report of Examination of HBUS, for the examination cycle ending March 
31, 2007, OCC-PSI-00304077, at 1, (Sealed Exhibit.] The MRA read in full as follows: 

“The bank provides pouch services in a number of business unites. An examination of 
HSBC pouch services resulted in serious concerns related to weak policies, procedures, 
systems and controls. The policies and controls in this area are inferior to BSA/AML 
controls in other areas of the bank, and remedial action is warranted. The absence of 
comprhesnive policies, procedures and adequate systems and controls could potentially 
subject the bank to undue reputation risk and/or lead to BSA/AML violations. Pouch 
serives facilitate easy movement of funds, and are favored by persons who transfer iligal 
and terrorist funds. Consequently, the Board should ensure that management implements 
appropriate policies, procedures, systems and controls for this activity. The Board should 
communicate the corrective measures to the OCC, and confirm subsequent resolution.” 
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management. The 2007 Report of Examination notified the HBUS 
Board about the OCC’s “serious concerns related to weak policies, 
procedures, systems and controls” related to its pouch activities, and 
urged immediate improvements.*'^*^ In September 2007, the OCC also 
issued a Supervisory Letter to HBUS which again urged that “policies, 
procedures, systems, and controls for pouch need strengthening and 
augmenting.”*'**'’ 

E. 2008 OCC Inquiry into Hokuriku Travelers Cheques 

Nine months later, in June 2008, the OCC commenced a followup 
AML examination of HBUS pouch activity, looking at pouch services in 
additional business units.*'**’ During the course of that examination, 
OCC examiners identified the Hokuriku travelers cheque deposits as an 
activity warranting greater scrutiny.*'*** 

In June 2008, two OCC AML bank examiners visited the HBUS 
Brooklyn and Buffalo processing centers to examine their pouch 
activity.*'**’ One of the examiners told the Subcommittee that when they 
visited the Brooklyn center, they found “stacks and stacks of travelers 
cheques, some signed and countersigned by the same entity.”*'*’*’ In a 
memorandum the examiner wrote that, at the Brooklyn center, she 
reviewed a Hokuriku cash letter deposit in the amount of $1 10,000, and 
found it consisted of 220 sequentially numbered travelers cheques, each 
for $500.'“*’* She wrote that all of the cheques were signed and 
countersigned by the same individual, whose name was illegible, and all 
were made payable to SK Trading Company Ltd. The TC/MO HVDI 
form attached to the deposit described SK Trading as a “used car dealer” 
and stated that the travelers cheque funds were to be used for a “business 
purpose.”*'*’^ The other examiner reviewed another Hokuriku deposit 
for $240,000 and found a similar situation involving sequentially 
numbered $1,000 travelers cheques that had been signed and 
countersigned by the same person as the other deposit and made payable 
to SK Trading. The OCC examiners then contacted the HBUS cash 
letter department manager who explained that the Brooklyn center 
received three to five Hokuriku deposits daily of travelers cheques 
which totaled between $500,000 and $600,000 each day.*'*” He 


I486 9/13/2007 OCC Supervisory Letter, “Pouch Services and Middle Market at HBUS,” OCC- 
PSI-00000391-394. [Sealed Exhibit.] 

See 6/26/2008 OCC memorandum, “Pouch Transactions - Hokuriku Bank and SK Trading 
Company Ltd,” OCC-PSI-00885822-826. [Sealed Exhibit.] 

1488 

1489 

Subcommittee interview of OCC AML Examiner Elsa de la Garza, (1/9/2012). 

6/26/2008 OCC memorandum, “Pouch Transactions - Hokuriku Bank and SK Trading 
Company Ltd,” at OCC-PSI-00885822, at 1. [Sealed Exhibit.] 

1492 

Id. at 2. 
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indicated that travelers cheques were the “only types of instruments 
received through pouch for Hokuriku Bank.”'"’^'* 

The OCC examiners researched SK Trading and found that, 
according to its website, the company appeared to be headquartered in 
Seoul, Korea, with offices in Japan and the United States, and had been 
in business since 1984.’''®^ They also found that the company had been 
identified by other financial institutions as involved with suspicious 
activity. These other financial institutions had identified suspicious wire 
transfers, sometimes involving millions of dollars, which were 
originated by individuals with Russian surnames who sent the fimds 
from accounts at Russian banks or which were originated by 
corporations that sent the funds from banks in the British Virgin 
Islands.''*^^ The ultimate beneficiary of the funds in each case was SK 
Trading using accounts at various banks in Japan. The OCC examiners 
noted that, in November 2006, one of the financial institutions had 
contacted Hokuriku Bank directly and asked it about the business 
purpose behind the transactions, but was told that Hokuriku Bank “could 
not answer this as their customer (S.K. Trading Company Limited) 
refused to provide information.”''’’’ 

The OCC examiners concluded that SK Trading was “conducting 
high dollar volumes of activity utilizing wire transfers and pouch 
services,” that SK Trading was involved with “numerous entities,” and 
that the transactions involved “numerous individuals from Russia,” and 
warranted additional investigation.’'”* The travelers cheques’ 
connections to Russia raised a particular red flag, since the United States 
has long viewed Russia as a country of “primary” money laundering 
concern, its highest risk category.''*” At the time, a 2008 report by the 
U.S. State Department, then the latest in a long line of annual U.S. State 
Department reports summarizing money laundering concerns on a 
country-by-country basis, described Russia as follows: 

“Criminal elements from Russia and neighboring countries 
continue to use Russia’s financial system to launder money .... 
Experts believe that most of the illicit funds flowing through 
Russia derive from domestic criminal activity, including evasion of 
tax and customs duties and smuggling operations. Despite making 
progress in combating financial crime, Russia remains vulnerable 
to such activity because of its vast natural resource wealth, the 
pervasiveness of organized crime, and, reportedly, a high level of 


1494 

'“Id. 

1496 y 

Id. at 3. (emphasis omitted). 

'“Id. at 4. 

See, e.g., “International Narcotics Control Strategy Report, Volume II, Money Laundering 
and Financial Crimes,’' U.S. State Department (March 2008), at 62. 
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corruption. Other vulnerabilities include porous borders, Russia’s 
role as a geographic gateway to Europe and Asia, a weak hanking 
system with low public confidence in it, and under funding of 
regulatory and law enforcement agencies. Russia’s financial 
intelligence unit (FIU) estimates that Russian citizens may have 
laundered as much as U.S. $1 1 billion in 2007.”'^“ 

When the Subcommittee asked the OCC about its 2008 inquiry 
into the Hokuriku travelers cheques, Ms. de la Garza stated that, despite 
the earlier AML examination in 2007, HBUS seemed to have no AML 
policies or procedures in place regarding pouch activity.*^°’ She 
characterized the failure to monitor the travelers cheques being cashed 
as “not normal,” and stated that they immediately brought the matter to 
the attention of HBUS AML Compliance. Ms. de la Garza indicated 
that, at first, HBUS Compliance personnel asserted that the travelers 
check transactions were legitimate, and that the high cost of cars in 
Russia accounted for the daily deposits of $500,000 or more hy SK 
Trading. After doing additional research and finding additional accounts 
with high volumes of traveler cheque deposits, often sequentially 
numbered and signed and countersigned by the same person, she said 
that HBUS AML Compliance became more concerned. 

On Sept. 2, 2008, the OCC examiners met with HBUS senior 
compliance officials Anne Liddy and Mary Ann Caskin.'^®^ According 
to an OCC memorandum summarizing the meeting, Ms. Liddy disclosed 
that HBUS had reviewed: 

“all transactions over the past 2 months and identified a total of 20 
entities (including SK Trading) which were using Cash Letter 
services to clear Travelers Cheques. All 20 entites are used car 
dealerships. . . . Four additional companies with significant dollar 
amounts have been identified. (Marie Trading - $3.5 Million; 
Jamsou Traders - $1 Million; I K Auto - $929 Thousand and Dean 
Corp - $587 Thousand - totals for two months). . . . The Business 
Unit has gone back to the Relationship Manager and Hokuriku 
Bank to obtain additional information on Marie Trading and 
Jamsou Traders. They will also be inquiring on the other 
companies identified. ... The bank will be exiting the Hokuriku 
relationship within the next 30 days.”'^’’^ 


Id. at 390. See also “International Narcotics Control Strategy Report, Volume II, Money 
Laundering and Financial Crimes,” U.S. State Department (March 2012), at 156 (identifying 
generally the same AML vulnerabilities in Russia today). 


Md. 

^ 9/3/2008 OCC memorandum, “SK Trading Co Update,” OCC-PSI-00885817. [Sealed 


Exhibit] 

1504 id_ 
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The OCC informed the Subcommittee that the two OCC examiners who 
attended the meeting understood HBUS to mean that it would close the 
Hokuriku account, cease all business with the bank, and report any 
suspicious activity to U.S. law enforcement.'^®^ 

F. Absence of Hokuriku Bank KYC Information 

In July 2008, in response to the OCC, HBUS AML Compliance 
initiated a more in-depth review of the Hokuriku travelers cheques. A 
search of HBUS processing records determined that, over a 12-month 
period from 2007 to 2008, HBUS had received an average of 7,800 
travelers checks per month from the bank with an average monthly value 
of about $7.4 million.'^®® HBUS determined that “[a]ll deposits are 
Travellers Checks, no Money Orders found.”'^®’ An HBUS AML 
Compliance officer also noted: “They seem to sell traveler’s checks 
which are used to purchase cars in Japan. The purchasers of the cars 
often provide Russian passports as ID.”'^®* 

To find out more, on July 15, 2008, HBUS AML compliance 
officer Stephanie Napier sent an email to Yumi Seto at HSBC Tokyo, 
PCM Client Service, informing her that HBUS had undertaken a review 
of Hokuriku Bank Account No. 34738 and asking her to obtain specified 
KYC information related to certain deposits into that account.'^®® The 
Subcommittee was unable to determine why the email asked only about 
Hokuriku Account No. 34738 and not also Account No. 50385, where 
the travelers cheques were typically deposited.'^'® Nor was the 
Subcommittee able to determine why the email requested information 
about only four entities associated with the travelers cheque deposits: 

De Araujo Roseli Aparecida (an individual), Aksys Corp., R S Corp., 
and Sanhu Corp.'^" 

Ms. Napier made repeated requests for the information over the 
next two months without success.'^ ^ Her HSBC contact in Tokyo, Ms. 
Seto, repeatedly responded to her emails that Hokuriku Bank had 


5/15/2012 email from OCC to the Subcommittee, “HSBC — Hokuriku Questions,” PSI-OCC- 
38-0001-002. 

7/1 6/2008 email from HBUS Jonathan Dean to HBUS Mary Ann Caskin and others, 
“Hokuriku Bank,” OCC-PSI-00407498, at 1. 


Email exchange among HBUS personnel, from July to Sept. 2008, “Hokuriku Bank Ltd- 
Compliance Inquiry,” OCC-PSI-00409214-216, at 8-9. 

'^'^See chart accompanying 3/15/2005 email from HBUS George Tsugranes to HBUS Nanayo 
Ryan, “Hokuriku Bank C/L Activity,” HSBC OCC 3113976-977; chart accompanying email 
exchange among HBUS AML Compliance personnel, from 11/23/2005 - 1 1/29/2005, HSBC 
OCC 3180776-797; chart prepared by HBUS AML Compliance in 2007 regarding transactions 
in 2006, HSBC OCC 3352034-037. 

Email exchange among HBUS personnel, from July to Sept. 2008, “Hokuriku Bank Ltd- 
Compliance Inquiry,” OCC-PSl-00409214 and attachment OCC-PSI-00409215-216, at 9. 

Id. at 4-8. 
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indicated it was preparing a “report.”'^'^ In September 2008, Ms. Seto 
was replaced by Ako Kobayashi who, after several attempts, obtained a 
single, handwritten page from the bank with the requested 
information.'^''* Because the information was provided in Japanese, she 
translated it and, on September 9, 2008, sent both the original and her 
typed translation to Ms. Napier’s supervisor in HBUS AML Compliance 
Judy Stoldt.'^'" 

The information provided by Hokuriku Bank was minimal. In the 
case of the one individual who had been identified, Hokuriku Bank 
reported that he was a “Business man,” gave his address, and stated that 
he worked with a company called “Sugimoto,” and had a “Satisfactory” 
relationship with the “Originator.” In the case of the three corporations, 
Hokuriku Bank stated that each was involved in “Sales of Used Cars,” 
which HBUS already knew, and provided the company’s address, the 
date of establishment, and whether it was a private corporation or 
publicly traded. Hokuriku Bank also provided the name of one 
beneficial owner of one company, but wasn’t sure of the spelling of his 
name. No reasons were given for its clients using sequentially 
numbered travelers cheques, having the same person sign and 
countersign them, or generating the high daily volume of cheques. Ms. 
Stoldt forwarded the information to HBUS senior Compliance official, 
Anne Liddy, characterizing it as “very limited information that took us 
over a month to get.”'^'^ 

G. 2008 Decision to Stop Cashing Hokuriku Travelers 
Cheques 

On September 4, 2008, even before the KYC information from 
Hokuriku Bank was formally translated, HBUS PCM Compliance 
officer Alan Williamson sent an email to multiple HBUS personnel 
informing them that HBUS would no longer accept bulk travelers 
cheques from Hokuriku Bank for processing. He explained: 

“Compliance meets monthly with senior management in the 
Payments and Cash Management AML Management Review 
Committee. Recently we discussed the fact that Hokuriku has 
been sending a large number of sequential traveller’s checks from 
a number of similar businesses through cash letter here in the US. 
This use of cash letter is inappropriate and the Committee has 
concluded that PCM should no longer allow Hokuriku to send 


Id. at 5-7. 

Id.atOCC-PSI-00409215. 

Id. atOCC-PSI-00409216. 

Email exchange among HBUS personnel, from July to Sept. 2008, “Hokuriku Bank Ltd- 
Compliance Inquiry,” OCC-PSI'00409214, at I. The time period was actually closer to two 
months. 
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traveler’s checks through cash letter. Hokuriku should therefore 
cease the activity and make alternative arrangements, such as to 
make the deposits by wire, by September 30.”'^” 

The task of informing Hokuriku Bank was given to Machiko 
Yamashita, an HSBC employee in Tokyo who was then the designated 
Global Relationship Manager for Hokuriku Bank.'^'* On September 1 1, 
2008, he and a colleague met with Hokuriku officials who provided 
additional information about the travelers cheque deposits and asked 
HBUS to continue clearing them. According to Mr. Yamashita, 
Hokuriku Bank explained: 

“-Most of their customers related to this issue are used-car dealers 
for Russian buyers who are cash account holders of Hokuriku 
Bank through appropriate AML process. 

-The dealers are doing cash on delivery type of deals with buyers 
in this market therefore cash or TCs [travelers cheques] are 
normally used to accommodate those deals. As such Hokuriku 
Bank considers it is difficult for its customers to shift their 
payment method to wire transfers or commercial check[s] from 
TCs. ... 

-Since relevant customers are limited [to] around 20 - 25 names 
and they are all cash account holders of Hokuriku Bank, Hokuriku 
Bank is well prepared to cooperate with HBUS by providing 
necessary information.”'^” 

The email also stated: “HBUS is currently the sole Cash Letter provider 
for Hokuriku Bank.”'*^° 

The next day, Anthony Julian responded that HBUS senior 
management had already reviewed the matter extensively “and 
determined that we can not continue to support this business. Th[i]s is 
not an issue for negotiation with Hokuriku.”'*^' Mr. Yamashita replied, 
in that event, Hokuriku Bank had requested additional time to consider 
whether to end the business or find a replacement service provider. He 
wrote: “We suggest that we should withdraw very carefully given the 
fact that Japanese regional banks’ world is very small. If we will push 
Hokuriku drastically, HSBC may likely have bad reputation on our PCM 
business in this marketplace.”'^^^ 

9/4/2008 email from HBUS Alan Williamson to HBUS Anthony Julian and others, 
“Hokuriku Bank.” OCC-PSI-00808896, at 5. 

Emails among HBUS and HSBC personnel from Sept, to Nov. 2008, “Hokuriku Bank,” 
OCC-PSI-00808695, at 5. 

'’'’id. at 4. 

1520 Id 

Id. at 2-3- See also email exchange among HBUS and HSBC persoimel from 9/4 to 
9/11/2008, OCC-PSl-00 196439, at 1. 

Email exchange among HBUS and HSBC personnel from Sept, to Nov. 2008, “Hokuriku 
Bank,” OCC-PSI-00808695, at 2. 
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A month later, on October 1 7, 2008, Mr. Julian sent an email to 
Albert Halley, head of the cash letter department at the Brooklyn 
processing center, advising him that Hokuriku Bank had been informed 
verbally and by letter that HBUS would “no longer accept bulk deposits” 
of travelers cheques “in excess of $5,000.”'^^^ Mr. Julian advised Mr. 
Halley that, after October 3 1 , 2008, any bulk travelers cheques received 
from the bank should be “returned to Hokuriku” via overnight mail. Mr. 
Halley responded that he had been told to return “any deposits” from 
Hokuriku Bank after October 3 1 - not just deposits in the form of 
travelers cheques - and asked Jonathan Dean in Compliance to 
“confirm/clarify this new request.”'’^'* After consulting with his 
supervisors, Mr. Dean clarified that no travelers cheques could be 
accepted from Hokuriku Bank, but that other commercial items could 
still be processed.'^^^ Mr. Dean wrote that he expected the remaining 
volume to be “extremely low” and asked Mr. Halley to report on the 
types of checks received from Hokuriku Bank after October 31. This 
decision to continue the correspondent relationship varied from the 
September memorandum which stated that senior HBUS AML 
Compliance official Anne Liddy told the OCC examiners that HBUS 
would be “exiting the Hokuriku relationship within the next 30 
days.”'=^^ 


H. Hokuriku Bank’s Continued Lack of Cooperation 

Even after informing Hokuriku Bank that it would no longer 
process any travelers cheques, HBUS AML Compliance continued to 
seek KYC information from the bank in connection with the originators 
of the travelers cheques, in order to complete an analysis of the 
transactions and determine whether they involved suspicious activity 
and had to be reported to law enforcement. 

In late November or early December 2008, HBUS Compliance 
provided an update to the OCC about its efforts. According to an OCC 
memorandum summarizing the updated Information, after receiving an 
inquiry from HBUS, the company issuing the travelers cheques 
dispatched investigators to the Russian bank where the travelers checks 
were being purchased. The OCC report stated: 


10/17/2008 email from HBUS Anthony Julian to HBUS Albert Halley and others, ‘'Hokuriku 
Bank,” OCC-PSI-00808896, at 4-5. 

10/20/2008 email from HBUS Albert Halley to HBUS Anthony Julian, Jonathan Dean, and 
others, “Hokuriku Bank,” OCC-PSI-00808896, at 4, 

Email exchange among HBUS personnel, from 10/20-10/31/2008, “Hokuriku Bank,” OCC- 
PSI-00808896, at 1-3. 

See 9/3/2008 OCC memorandum, “SK Trading Co Update,”OCC-PSI-00885817. [Sealed 
Exhibit.] 

12/1/2008 OCC memorandum, “SK Trading,” OCC-PSl-00888526. [Sealed Exhibit.] 
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“The result was that five individuals were identified who were 
purchasing the travelers checks with cash at the bank. The five 
individuals were then providing the checks to Mr. Alexander 
Tokarenko who is the owner of SK Trading. Mr. Tokarenko then 
stamped the checks payable to SK Trading.” 

All five individuals were Russians living in Russia. The memorandum 
stated that HSBC was attempting to determine if Mr. Tokarenko owned, 
not only SK Trading, but also the 29 other entities that had been 
identified as clearing bulk travelers cheques with HBUS. The OCC 
memorandum reported that “the total dollar amount of bulk travelers’ 
checks processed by HSBC for the 30 entities during the period of 
November 2007 to October 2008 was over $61 million.”'^^* 

In late November 2008, HBUS AML Compliance personnel 
drafted a new information request and asked Stephanie Brown to 
forward it to Hokuriku Bank. It asked whether five named Russians 
(identified in the earlier investigation) were or had been account 
signatories or “connected in any way” with the accounts opened by 30 
specified corporations and individuals involved with the bulk travelers 
cheques.'^^^ Ms. Brown forwarded the request to Ako Kobayashi at 
HSBC in Tokyo who, in turn, sent it to Hokuriku Bank.*”“ 

On December 3, 2008, Ms. Kobayashi sent an email to Ms. Brown 
indicating that Hokuriku Bank had raised the following questions: 

“What is the background for your queries? Does it relate to your 
compliance reason or does it relate to criminal act and the police 
asks such information? Where did you get those Russian names? 
Since no cheques has been presented to you since Nov08, why 
such information is required now?”'^^’ 

HBUS explained that the information was needed to complete an 
internal investigation, and was not being requested in connection with a 
criminal prosecution.’^^^ Hokuriku Bank responded that it did not retain 
signatory cards or ownership information for the 30 accounts and had to 
identify and contact each of its branches where the 30 accounts were 
opened, which would take time.’^^^ 


Id. 

Email exchange among HBUS personnel, from Nov. to Dec. 2008, “Hokuriku Bank,” OCC- 
PSI-008 11358, at 10-13. SK Trading Company was one of the 30. 

‘”“!d.at9-10. 

Id. at 9. 

Id. at 8. 

Id. at 6 . 
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On December 15, 2008, Ms. Kobayashi sent an email to multiple 
HBUS AML personnel forwarding additional questions from Hokuriku 
Bank about the new request for information.'^^^ She also wrote: 

“Please be advised that apparently they are not very happy with 
your request as they have other matters to attend toward the end of 
the year. . . . Hokuriku Bank is not saying that they will not assist 
you to provide the required information however they are upset 
with the nature of the request without being given sufficient 
background. Given the nature of the queries, please understand it 
is time consuming and consider to allow them more time. They 
might not be able to supply the information by the end of the 
year.”'«= 

Two days later, Denis O’Brien, head of HBUS Global Transaction 
Banking Compliance, sent an email answering the questions posed by 
Hokuriku Bank.'^’® Later that same day, the HSBC Money Laundering 
Control Officer in Japan, Shinji Kawamura, sent an email to Mr. 

O’Brien indicating that Hokuriku Bank would not provide the requested 
information. He wrote: 

“They have been good enough to provide information so far but as 
you may understand from bank secrecy viewpoint, they should not 
or cannot disclose customer information. So they will no longer 
provide information. If you need my suggestion to clear those 
backlogs, 1 will tell you that you should file suspicious transaction 
report to your authority 

Notwithstanding that communication, two days later, on December 19, 
2008, Ms. Kobayashi sent Mr. O’Brien an email stating that Hokuriku 
Bank “has provided the information at their risk and confirmed that the 
purchasers of the travelers checks ... are not signers or are NOT 
connected in any way to the previously requested named relationships at 
Hokuriku Bank. This should be the last favour and we cannot expect 
further or next assistance from them.”'^^* 

Mr. O’Brien responded: “We are appreciative of your assistance 
and thank you for your diligence in this regard. We have closed our 
investigation as it related to this issue.”'^^’ 

The Subcommittee contacted Hokuriku Bank to learn more about 
the travelers cheques. The bank provided this additional information: 

4-5. 

5. 

3-4. 

2 , 

1 . 

1 . 
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“Due to the geographic proximity of Russia across the Sea of 
Japan, many Japanese dealers of pre-owned automobiles are 
located along the coast, including the Hokuriku region. (Hokuriku 
means ‘North Land’ in Japanese.) Hokuriku Bank is 
headquartered in this area and has several branches in the 
surrounding areas. Some of such dealers have accounts at 
Hokuriku Bank. 

In a typical transaction, a customer of Hokuriku Bank (that is to 
say an account holder) sells a used car (or cars) to a Russian buyer 
who is a passenger or crew member of a ship at a nearby port. The 
buyer pays with travelers’ checks. The seller/account holder 
brings the travelers’ cheques to its bank (Hokuriku) and deposits 
them into its account. Hokuriku Bank accepts the travelers’ 
checks, credits the customer’s account, and sends the checks to 
clearing banks.”' 

This description, which seems to describe a thriving used car business in 
northern Japan, does not explain why a single individual in Russia was 
using five individuals to purchase millions of dollars of sequentially 
numbered U.S. dollar travelers cheques from the same bank in Russia 
per month, and then signing and countersigning all of them. Nor does it 
explain why the parties were using U.S. dollars to purchase used cars 
located in Japan or why the Hokuriku branches had so little information 
about the 30 clients carrying in U.S. dollar travelers cheques totaling 
about $500,000 to $600,000 each day. 

In February 2009, HBUS closed one of the accounts held by 
Hokuriku Bank, Account No. 50385, and transferred its balance to 
Account No. 34738. HBUS has not explained why it closed one account 
but not the other, or why Account No. 34738 was kept open when it was 
the subject of the extended HBUS inquiries to Hokuriku Bank in 2008. 
Because the one account remained open, the correspondent relationship 
between HBUS and Hokuriku Bank continued. The OCC examiners 
told the Subcommittee that they had thought all of the Hokuriku 
accounts had been closed in 2008, and were unaware of the ongoing 
relationship for some time.'^''^ 


6/26/2012 letter from Hokuriku Bank’s legal counsel to the Subcommittee, at 4, PSI- 
HokurikuBank-01-0001. 

HBUS KYC Profile of Hokuriku Bank, at HSBC-PSI-PROD-0102415, 420. 

Subcommittee interviews of Joseph Boss (1/30/2012) and Elsa de la Garza (1/9/2012); 
5/15/2012 email from OCC to the Subcommittee, “HSBC - Hokuriku Questions,” PSI-OCC-38- 
0001 - 002 . 
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I. 2010 OCC Discovery of Hokuriku Account Activity 

Two years later, in the summer of 2010, two OCC AML examiners 
conducted a review of RDC services at the HBUS Buffalo processing 
center, including RDC processing of monetary instruments presented for 
deposit through electronic images.’^"'^ During that review, one of the 
examiners was surprised to discover that the Hokuriku account was not 
only still open, but that HBUS was processing monetary instruments for 
Hokuriku Bank through RDC.'^'*^ In an email to the OCC Examiner-in- 
Charge summarizing the RDC concerns that were communicated to 
HBUS after the examination field work, the examiner included; 
“Concern related to pouch activity being conducted by HSBC for 
Hokuriku,”’^'*^ He informed the Subcommittee that the volume of 
activity was “significant, but not as extensive as in 2008.”'^'"’ 

In October 2010, a draft OCC Supervisory Letter detailing AML 
deficiencies in HBUS’ RDC operations specifically identified concerns 
related to Hokuriku Bank. After describing the problems uncovered in 
2008, involving the bulk processing of Hokuriku travelers cheques, the 
letter stated: 

“[t]n late 2008, early 2009, bank management informed the OCC 
that it would terminate the account relationship with Hokuriku. 
During the OCC’s RDC review, it was again found that pouch 
activity was being conducted by HSBC for Hokuriku. Upon 
further review, it was determined that at the time that the Bank was 
to have initially severed its relationship with Hokuriku, there 
existed two separate accounts for Hokuriku. At that time, 
management decided to close the account in which the 
aforementioned deposits [of travelers cheques] were being 
processed and continue to maintain the other account. It was 
through the second account that the pouch activity continued.”’^”’’ 

The draft OCC letter also recited a long list of AML concerns involving 
the bank’s pouch activity. The final version of this Supervisory Letter 
included most of the information in the draft, but dropped the paragraph 
that singled out Hokuriku Bank.'^''* OCC personnel asked about the 
letter were unable to remember why the reference to Hokuriku Bank had 

See 10/4/2010 draft Supervisory Letter from OCC to HBUS, OCC-PSI-00863984-992. 

See 9/3/2010 email from OCC Joseph Boss to OCC Sally Belshaw and others, OCC-PSI- 
00887684-685. HBUS KYC Profile at HSBC-PSI-PROD-0102421; 5/15/2012 email from OCC 
to the Subcommittee, “HSBC - Hokuriku Questions,” PSI-OCC-3 8-000 1-002. 

9/3/2010 email from OCC Joseph Boss to OCC Sally Belshaw and others, OCC-PSI- 
00887684-685. 

5/15/2012 email from OCC to the Subcommittee, “HSBC - Hokuriku Questions,” PSI-OCC- 
38-0001-002. 

15^^ 10/4/2010 draft Supervisory Letter from OCC to HBUS, at OCC-PSI-00863990. 

10/21/2010 Supervisory Letter HSBC-2010-24 from OCC to HBUS, OCC-PSI-00880181- 

185. 
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been dropped.'^'*’ HBUS’ legal counsel told the Subcommittee that 
HBUS stopped processing travelers cheques through the Hokuriku 
account in 2008.'^^° Hokuriku Bank similarly informed the 
Subcommittee that HBUS stopped processing its travelers cheques in 
October 2008,'^^' 

The HBUS KYC Profile of Hokuriku Bank, updated in 2010, 
referenced ongoing AML concerns related to the bank, perhaps due to 
the OCC’s renewed interest in the relationship. Among other matters, 
the KYC Profile indicated that, as of September 2010, despite a 
relationship of many years, HBUS did not have a copy on file of 
Hokuriku’s KYC or AML policies and procedures. The profile also 
indicated that HBUS had sent an AML questionnaire to the bank, but 
Hokuriku Bank had not yet returned it. HBUS also noted in the 2010 
profile that Hokuriku Bank did not have an independent AML 
compliance function within the bank, raising further questions about 
Hokuriku’s AML efforts.'^^^ 

In May 20 12, HBUS closed the Hokuriku Bank account'**'' While 
that action ended the direct relationship, Hokuriku Bank still has 
correspondent relationships with other HSBC affiliates which, in turn, 
have correspondent accounts at HBUS. Accordingly, it is still possible 
for Hokuriku Bank to obtain U.S. dollar services through the U.S. dollar 
correspondent accounts of the HSBC affiliates, although Hokuriku Bank 
told the Subcommittee it is not doing so. 

J. Analysis 

As a major global bank, HBUS serves as a gateway for foreign 
banks to obtain U.S. dollars, including through the clearing of U.S. 
dollar travelers cheques. HBUS AML Compliance personnel knew that 
travelers cheques were vulnerable to money laundering abuses, and that 
large numbers of sequentially numbered travelers cheques were a red 
flag. In 2003, it set up a data system that captured travelers cheque 
information, but in five years, appeared not to use it to identify 
suspicious activity or high risk clients. In 2007, the OCC found that 
HBUS essentially had no effective AML controls over the process used 
to cash travelers cheques and required the bank to strengthen its policies 
and procedures. 


Subcommittee interview of Teresa Tabor (5/17/2012). 

Subcommittee briefing by HSBC legal counsel (5/9/2012). 

6/26/2012 letter from Hokuriku Bank’s legal counsel to the Subcommittee, PSb 
HokurikuBank-01-0001-016, at 001. 

HBUS KYC Profile at HSBC-PSI-PROD-0102421. 

'^”ld. 

6/26/2012 letter from Hokuriku Bank’s legal counsel to the Subcommittee, at 1, PSl- 
HokurikuBank-0 1-0001. 
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The Hokuriku Bank example illustrates the problem. For years, 
Hokuriku Bank routinely presented a large volume of travelers cheques 
to HBUS for processing. Most involved sequentially numbered cheques 
signed and countersigned illegibly by the same person. For years, 

HBUS cleared the cheques with few questions asked. The cheque 
volume, which involved $500,000 to $600,000 in travelers cheques per 
day and $70 to $90 million per year, produced a four-year total of more 
than $290 million. When directed by OCC to look into the transactions, 
HBUS quickly discovered that most of the cheques were being 
purchased for cash by Russians at a Russian bank and sent to Hokuriku 
Bank accounts in Japan. HSBC discovered that Hokuriku Bank had 
virtually no information about a network of 30, possibly related, 
accountholders who were physically turning in large stacks of 
sequentially numbered U.S. dollar travelers cheques to the bank every 
day. When asked about the accounts by HBUS, Hokuriku Bank resisted 
finding out and claimed bank secrecy requirements prevented it from 
disclosing client-specific information. HBUS also learned it was the 
only bank cashing the Hokuriku travelers cheques. Later, In 2010, 

HBUS discovered that Hokuriku Bank had no separate AML compliance 
function and was left waiting to receive a copy of its written AML 
policies and procedures. After the Subcommittee inquired about the 
account, HBUS closed it, although other HSBC affiliates are continuing 
to service the bank. 

HBUS enabled a number of Russians engaged in suspicious 
activity to use a relatively small Japanese bank with weak AML controls 
to gain access to over $290 million in U.S. dollars in less than four 
years. HBUS continued to clear the travelers cheques even after it 
learned of the transactions’ suspicious nature. In so doing, HBUS 
facilitated the suspicious transactions and failed to live up to its AML 
obligations, all in return for about $47,000 in annual revenues. 
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VII. HBUS PRIVATE BANK AMERICAS: OFFERING 
BEARER SHARE ACCOUNTS 

Over the course of a decade, HBUS allowed over 2,000 customers 
to open accounts in the name of bearer share corporations, a type of 
corporation that allows secrecy by assigning ownership to whomever has 
physical possession of the shares. At its peak, the Miami office had over 
1,670 bearer share accounts; the New York office had over 850; and the 
Los Angeles office had over 30. The Miami bearer share accounts alone 
held assets totaling an estimated $2.6 billion, generating annual bank 
revenues of $26 million. Multiple internal audits and regulatory 
examinations eritieized the aeeounts as high risk and advocated that 
HBUS either take physieal custody of the shares or require the 
corporations to register the shares in the names of the shareholders. 

In 2007, HBUS Complianee eireulated a draft to standardize 
bearer share AML safeguards across the bank, including by designating 
all of the bearer share accounts as high risk clients requiring enhanced 
due diligenee and monitoring. Internal documents show Miami and 
New York bank personnel suceessftilly weakened the standards by 
enabling the majority of accounts not to be treated as high risk and 
requiring updated ownership infoiination only once every three years. 
Later, HBUS learned that the British Virgin Islands (BVI), which 
formed most of the bearer share corporations with HBUS accounts, was 
requiring the registration of all outstanding BVI bearer shares by the end 
of 2009. In response, HBUS initiated an effort to require its BVI 
accountholders to register their shares by the legal deadline. In 2010, 
HBUS also contacted its other bearer share accountholders, requiring 
them either to register their shares or place their shares in the custody of 
HBUS or a third party. HBUS ended up obtaining registered shares or 
share custody for 1,155 accounts, closed over 530 accounts, and by 
2012, had substantially reduced the number of bearer share accounts it 
maintained to 26. 

Two examples of the accounts illustrate the risks they pose. In the 
first, two Miami Beach hotel developers, Mauricio Cohen Assor and 
Leon Cohen Levy, a father and son, used bearer share accounts they 
opened for Blue Ocean Finance Ltd. and Whitebury Shipping Time- 
sharing Ltd. to help hide $150 million in assets and $49 million in 
income. In 2010, both were convicted of criminal tax fraud and filing 
false tax returns, sentenced to ten years in prison, and ordered to pay 
back taxes, interest, and penalties of more than $17 million. A second 
example involves two Panamanian bearer share corporations, Urigeler 
International S.A. - Holding Company and Birmingham Merchant S.A. - 
Holding Company, beneficially owned by a wealthy and politically 
powerful family in Peru. The family sought a waiver from HBUS’ AML 
requirements to avoid registering their shares or placing them in bank 
custody. When asked whether the waiver was granted when the account 
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was opened in 2007, HBUS legal counsel told the Subcommittee that 
“we don’t know.” The account was closed in 2011. These accounts 
demonstrate the risks associated with bearer share accounts, whose 
owners seek to hide their identities. Today, HBUS has 26 bearer share 
accounts left, most of which are frozen, but also maintains a policy 
allowing the bank to open more bearer share accounts in the future. 

A. High Risk Corporate Accounts 

Bearer share accounts have long been viewed as being at high risk 
for money laundering, due to the ability of bearer shares to hide 
ownership of a corporation. A 2005 U.S. Money Laundering 
Assessment defined bearer shares as follows; 

“Bearer shares are negotiable instruments that accord ownership of 
a company to the person who possesses the share certificate. Such 
share certificates do not contain the name of the shareholder and 
are not registered, with the possible exception of their serial 
numbers. Accordingly, these shares provide for a high level of 
anonymity and are easily negotiable.”' 

Because of the ease of transfer and secrecy attached to bearer share 
corporations as well as their attractiveness to money launderers and 
terrorist financiers, their propensity for misuse have made them lose 
favor with governments and AML organizations. 

Financial Action Task Force. The Financial Action Task Force 
(FATF) is the leading international AML body.'^^* In its 2006 report, 
“The Misuse of Corporate Vehicles, Including Trust and Company 
Service Providers,” FATF highlighted the AML problems associated 
with bearer share corporations. FATF explained that anonymity is a 
critical factor in facilitating the misuse of corporate vehicles, and bearer 
shares present a “special challenge to determining beneficial ownership 
of a corporate vehicle” because these shares “can be easily transferred 
without leaving a paper trail. The FATF report noted that, while 
bearer shares can he used for legitimate purposes, they were also used 
for “money laundering, self-dealing, and/or insider trading.”'^^* 


1555 1 2/20 05 “U.S. Money Laundering Threat Assessment,” issued by the Money Laundering 
Threat Assessment Working Group, which included the U.S. Departments of Treasury, Justice, 
and Homeland Security, Federal Reserve, and Postal Service, 
http://www.justice.gov/dea/pubs/pressrel/01 1 i06.pdf, at 47. 

See FATF website, www.fatf-gafi.org. 

’^^^10/13/2006 “The Misuse of Corporate Vehicles, Including Trust and Company Service 
Providers,” at 10, FATF Publication, http://www.fatf-gafi.org/media/fatf/documents/reports/ 
Misuse%20of%20Corporate%20 Veh!cles%20mcludmg%20Trusts%20and%20Company% 
20Services%20Providers.pdf 
Id. at 16. 
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Organisation for Economic Co-operation and Development. 

The Organisation for Economic Co-operation and Development (OECD) 
is a 50-year-old membership organization of 34 countries including the 
United States, which tackles issues of common interest to promote 
economic development,'^^®* In a 2001 report, “Behind the Corporate 
Veil,” the OECD identified bearer shares as one of the primary means 
used to achieve anonymity for the beneficial owners of corporations. 

The OECD report noted that bearer shares’ high level of anonymity and 
ease of transfer “make them attractive for nefarious purposes, such as 
money laundering, tax evasion, and other illicit conduct, especially when 
they are issued by private limited companies.”'^*’" The OECD noted that 
bearer shares were especially vulnerable to misuse, because of the lack 
of information available to authorities in the event of an 
investigation.'^®' 

U.S. Government. The United States has also criticized bearer 
share corporations. In 2005, for example, multiple U.S. agencies 
worked together to produce a U.S. Money Laundering Threat 
Assessment to identify key money laundering methods.'*®^ The 
Assessment identified the use of shell corporations as a key AML 
problem and singled out bearer shares as one of the means, along with 
nominee shareholders and directors, “to mask ownership in a corporate 
entity. ”‘^®'’ It warned that bearer shares “provide money launderers with 
the tools to hide their identity from financial institutions and law 
enforcement.”'®®*' In addition, Federal financial regulators warn about 
the risks associated with bearer shares, because they allow “ownership 
of the corporation to be conveyed by simply transferring physical 
possession of the shares.”'®®® The Federal regulators’ joint AML 
examination manual states that due to the risk, “in most cases banks 
should choose to maintain (or have an independent third party maintain) 
bearer shares for customers,”'®®® 

World Bank. A 201 1 report issued by the World Bank on 
corporate transparency issues is a recent example of an international 


See OECD website, www.oecd.org. 

1560 Corporate Veil: Using Corporate Entities for Illicit Purposes,” OECD 

publication, at 30, http://www.oecd.Org/dataoecd/0/3/43703185.pdf. 

Id. 

See 12/2005 “U.S. Money Laundering Threat Assessment,” issued by the Money Laundering 
Threat Assessment Working Group, which included the U.S. Departments of Treasury, Justice, 
and Homeland Security, Federal Reserve, and Postal Service, 
http://wwwv.justice.gov/dea/pubs/pressrel/01 1 i06.pdf. 

Id. at 47. 

Id. at 48. 

1565 4/29/2010 “BSA/AML Examination Manual,” Federal Financial Institutions Examination 
Council, “Bearer Shares,” at 282, 

http://www.ffiec.gov/bsa_aml_infobase/documents/BSA_AML_Man_2010.pdf. 

1566 AML examination manual also stated: “In rare cases involving lower-risk, well- 
known, long-time customers, banks may find that periodically re-certifying beneficial ownership 
is effective.” Id. 
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body condemning use of bearer share corporations. It indicates that, in 
recent years, bearer share corporations have “generally been frozen out 
of the financial sector,” asserts that “[n]o bank with any sort of due 
diligence standards is willing to conduct business with a company that 
has free-floating bearer shares,” but also states that such corporations 
remain an AML threat; 

“Concerns have been raised in AML forums that companies that 
issue bearer shares are used extensively for illegal activities, such 
as tax evasion and money laundering .... In most jurisdictions, 
bearer-share statutes have generally been undergoing a process of 
reform and elimination .... 

Financial compliance officers and company service providers 
report that bearer shares have generally been frozen out of the 
financial sector even if they are still permitted by the laws of a 
particular jurisdiction. No bank with any sort of due diligence 
standards is willing to conduct business with a company that has 
free-floating bearer shares. Companies that are not required under 
their own laws to have bearer shares immobilized will typically 
have to place the share in the trust of an agent of the bank, as a 
condition of being accepted as a customer. ... 

Given the legislative reforms of the past decade and the fact that 
bearer shares or share warrants featured in roughly 1 percent of the 
grand corruption cases we reviewed, one might be inclined to 
consider bearer securities to be a problem of the past. Investigators 
interviewed for this study from Latin America and the Caribbean 
disagree, however. They maintain that bearer-share companies are 
still a problem for money laundering investigations, that their 
anonymity prevents detection and impedes prosecution, and that 
corrupt individuals still can gain access to financial systems and 
undertake anonymous transactions involving considerable sums. 

In practice, there is scant business rationale for the continued use 
of bearer securities. The claims that bearer securities are necessary 
to facilitate transfer of ownership and enhance liquidity no longer 
hold for the vast majority of countries. An electronic system of 
registered shares is clearly a more efficient platform for 
transferring equity interests. In this case, the risks outweigh the 
benefits.”'^*^ 


“Puppet Masters: How the Corrupt Use Legal Structures to Hide Stolen Assets and What to 
Do About It,” World Bank (2011), at 41, 43-44. 
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B. Bearer Share Activity at HBUS 

Despite the widespread, longstanding international condemnation 
of bearer share corporation s, until last year, HBUS maintained hundreds, 
sometimes thousands, of bearer share accounts in the United States. At 
its peak, HBUS had over 2,000 bearer share accounts, including 1 ,667 
accounts at the International Private Bank in Miami, 851 at the 
International Private Bank in New York;'^*’ and 33 at the International 
Private Bank in Los Angeles.’^™ The Miami bearer share accounts 
alone have held assets totaling an estimated $2.6 billion and produced 
revenues to the bank of $26 million per year.*’’' 

These accounts were overseen by two different Federal banking 
regulators. The OCC oversaw the accounts in New York and Los 
Angeles, which were held in the HBUS International Private Banking 
division. The bearer share accounts in Miami, however, were lodged 
with a different HBUS subsidiary, which was often called an 
International Private Bank, but was actually formed under the Edge Act, 
a Federal law which allows corporations to be chartered by the Federal 
Reserve, engage solely in international banking, and serve only non-U.S. 
citizens with U.S. banking needs.'”’ Edge Act corporations are 
regulated by the Federal Reserve.'”’ The Miami bearer share accounts 
were accordingly overseen by the Federal Reserve Bank of Atlanta 
which conducted an annual examination of its operations. 

HBUS’ bearer share accounts repeatedly raised AML concerns 
largely because the accounts suffered from missing or inadequate KYC 
information. A 2004 internal audit of HBUS’ Private Bank International 
in Miami by HSBC Group auditors found, for example, that sixty bearer 
share accounts lacked “Certificates of Beneficial Owner” forms. 


See 10/2007 “HSBC Group Financial Services and European Audit Report on HSBC Private 
Bank International, Miami and HBUS Domestic Private Banking-Florida Region,” OCC-PSI- 
00223637 (citing 1,667 accounts in October 2007); 12/1 1/2007 email from HBUS Jeff Clous to 
HBUS Paul O’Sullivan and others, “Bearer Share Corporation Policy,” OCC-PSI-00226652 
(citing 1,679 accounts in December 2007); but see OCC-PSI-00217164 (estimating 600 accounts 
in July 2007). 

See 10/2007 “HSBC Group Financial Services and European Audit Report on HSBC Private 
Bank International, Miami and HBUS Domestic Private Bardcing-Florida Region,” OCC-PSI- 
00223637 (citing 851 accounts in November 2005); see 8/27/2007 email from Alan Williamson 
to Terry Westren, OCC-PSI-003 1 8438, with accompanying 2007 List of New York Bearer Share 
Accounts, OCC-PSI-003 1 8439 (citing 636 accounts in August 2007). 

1 1/1 1/2005 memorandum from OCC C. Seiler, “Bearer Share Activity,” at 2, OCC-PSI- 
01437596 (citing 33 accounts in November 2005). 

12/1 1/2007 email from HBUS Jeff Clous to HBUS Paul O’Sullivan, “Bearer Share 
Corporation Policy,” OCC-PSI-00226652. 

See 6/12/2008 letter from FRB of Atlanta Robert Schenck to HSBC Private Bank 
International Board of Directors, OCC-PSI-00107444-449; Section 25A of the Federal Reserve 
Act, P.L. 102-242, codified at 12 U.S.C. §§611-631. 

Section 25Aofthe Federal Reserve Act, P.L. 102-242, codified at 12U.S.C. §§611-631. 

The Miami Edge Act corporation has undergone annual Federal Reserve audits since at least 
2006. 
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meaning the bank had no information on who owned the accounts. The 
audit also repeated a recommendation carried forward from a 2002 
Group Audit that management should obtain the missing beneficial 
ownership information “at the earliest opportunity,”'^’^ suggesting the 
ownership information had been missing for at least two years. In 
February 2005, an HBUS Monthly Private Banking Compliance Report 
to HSBC Group noted that ten bearer share accounts had been frozen 
due to missing “Beneficial Ownership Letters,” and Relationship 
Managers for the accounts had been notified they had 30 days to obtain 
the needed documents or the accounts would be closed. 

OCC Concern. In 2005, the OCC identified the HBUS bearer 
share accounts as an AML concern and, in 2006, directed HBUS to 
assess their AML risk and take physical control of the bearer shares. 

In November 2005, the OCC conducted an AML examination of 
HBUS’ International Private Banking division and looked at the bearer 
share accounts in its New York and Los Angeles offices. In November 
2005, an OCC AML examiner wrote an internal memorandum 
summarizing HBUS’ “Bearer Share Activity” and recommending that 
HSBC adopt a policy to “ensure that either the bank or an acceptable 
third party controls the bearer shares.”'^” The memorandum stated that 
the HBUS New York office then had 85 1 bearer share accounts and the 
California office had 33.'”* The memorandum explicitly noted the 
AML risks attached to the bearer share accounts and the need to obtain 
satisfactory evidence of the accounts’ beneficial owners. It noted that 
bearer share certificates allowed corporate ownership to be transferred 
without the bank’s knowledge, and OCC policy was to require banks to 
maintain control of all bearer shares.'”* The memorandum also 
discussed new legislation in the British Virgin Islands that “provides a 
legal framework for immobilizing bearer shares.”'**" 

As a result of the AML examination, on January 31, 2006, the 
OCC issued a Supervisory Letter to HBUS which included a Matter 


2/2004 Group Financial Services Audit Report on High Level Controls Review of HSBC 
Private Bank International, at 5, OCC-PSl-00210878- 

1576 3/7/2005 report from HSBC Carolyn Wind and HSBC Teresa Pesce to HSBC Curt 
Cunningham and HSBC Anthony Gibbs, “Monthly Private Banking Compliance Report for 
February 2005,” HSBC OCC 7695260-266. 

1 1/1 1/2005 OCC memorandum, “Bearer Share Activity ” OCC-PSl-01437596. According 
to the memorandum, the policy at the time was that the International Private Bank required the 
folloNving for each bearer share account: an explanation for opening the account, CEO approval, 
and completion of a beneficial ownership letter, to be certified every 3 years, identifying the 

beneficial owners of the bearer share company. 

1578 

Id. (explaining that, under the BVI legislation, international corporations formed after 
January 1, 2005 would have to have their shares held by either an “authorized” or “recognized” 
custodian. Companies formed prior to January 1, 2005, would have a transition period in which 
to either have the shares registered or have them held by a custodian). 
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Requiring Attention (MRA) of the HBUS Board of Direetors direeting 
HBUS to strengthen AML controls over its bearer share accounts.'^*' 

The Supervisory Letter stated: 

“Management should evaluate the risks associated with bearer 
share accounts. BSA/AML policy and procedures need to be 
revised to ensure that either the bank or an acceptable third party 
controls the bearer shares. The bank must monitor legal 
requirements in countries that allow for the organization of 
International Business Companies (IBCs) and Private Investment 
Companies (PIC). Policies and procedures need to define 
‘acceptable third parties’ and any applicable due diligence, and 
specify documentation required by the bank to ensure that the 
shares have been properly received by the third party 
custodian.”'^®^ 

The Supervisory Letter also stated that HBUS management had “agreed 
to implement revised policies and procedures for bearer shares in 
accordance with our recommendation by March 31, 2006.”'**^ When 
asked about this Supervisory Letter, the OCC Examiner-in-Charge at 
HBUS, Anthony DiLorenzo, did not remember the bearer share issue, 
but said that, aside from HSBC, he had not seen bearer share accounts at 
other large banks that he oversaw.'^*" 

On March 3, 2006, HBUS responded to the Supervisory Letter 
with a proposal that did not completely follow the OCC instruction on 
bearer shares. Instead of requiring that all bearer share certificates be 
placed in custody for all of its bearer share accounts, HBUS indicated 
that it would require custodization only for what it deemed to be high 
risk bearer share accounts. For lower risk bearer share accounts, HBUS 
would not take possession of the shares, but would allow accountholders 
to submit to the bank a “beneficial ownership letter” every two years 
stating who had possession of the corporate shares. HBUS committed to 
having a plan in place to implement this approach by March 31, 

2006 .°^*^ 


At the same time the OCC was reviewing the New York and Los 
Angeles bearer share accounts, the Federal Reserve was performing a 
“risk-focused examination” of the Edge Act subsidiary holding the 
Miami accounts, HSBC Private Banking Interational. In January 2006, 
the Federal Reserve issued a Report of Examination (ROE) deeming the 


t58! j/3 1/2006 OCC Supervisory Letter, ‘international Private Banking BSA/AML 
Examination,” OCC-PSI-000003I7. [Sealed Exhibit.] 

Id. at 3. 

1583 

Subcommittee interview of Anthony DiLorenzo (3/22/2012). 

3/3/2006 letter HSBC Teresa Pesce to OCC Anthony DiLorenzo, “International Private 
Banking BSA/AML Examination,” at 2, OCC-PSI-01358804-809. 
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overall risk management framework for the Miami operation as 
satisfactory, while identifying as its “primary risk” the “reputational risk, 
arising from its international private hanking and wealth management 
activities that are directed towards a high net-worth Latin American 
client base.”'*** The ROE also deemed the Miami office’s AML 
program as adequate, while noting numerous issues involving offshore 
accounts, unavailable offshore documentation, offshore shell companies 
“serving as operating accounts,” and the addition of international private 
banking accounts moved from New York which added “in excess of SI 
billion” to the assets under management in Miami, but made no mention 
of bearer share accounts.'**^ 

In February 2006, as the OCC deadline approached for 
implementing stronger AML controls over HBUS’ bearer share 
accounts, the head of HBUS’ International Private Bank (IPB) 

Operations in Miami, Jeff Clous, asked a Miami law firm prepared an 
analysis for the bank on the Federal Reserve’s policy regarding bearer 
share accounts. According to Mr. Clous, the law firm reported that the 
Federal Reserve expected banks to conduct a risk assessment and assign 
risk classifications to each account for risk-based monitoring. 

According to Mr. Clous, the law firm also informed him that the Federal 
Reserve provided banks with the option of either obtaining custody of 
the bearer shares or recertifying beneficial ownership of the shares on a 
periodic basis, based upon the account’s risk classification.'*** 

Mr. Clous emailed his report of the law firm’s analysis to senior 
personnel in the New York International Private Bank (IPB), the CEO of 
Private Bank America, Philip Musacchio, the Chief AML Officer of 
Private Bank, Susan Hoggarth, and the Head of Private Bank Operations 
Terry Westren. Mr. Musacchio responded that New York would prefer 
to adopt this “much better and reasonable approach.”'**^ Ms. Hoggarth 
replied: 

“That may work for Miami, but it won’t work for the OCC in NY 
and California. The OCC has specifically advised us that the 
Beneficial Ownership letters are not sufficient. We have been 
advised that the shares need to be held either by ourselves or an 
accepted third party.”'*"'’ 


isK 1/19/2006 letter ftoni FRB Atlanta to HSBC Private Bank International Board of Directors, 
OCC-PSl-00309434. [Sealed Exhibit.] 

Id, at 2, 4-6. 

1588 2/9/2006 email exchanges among HBUS Susan Hogart, HBUS Philip Musacchio, HBUS Jeff 
Clous, HBUS Teresa Pesce, and HBUS Teny Westren, “Bearer Shares ~ More Info,” HSBC 
OCC 4816460-462. 

1589 

1590 
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Mr. Musacchio responded that he had assumed that Ms. Hoggarth would 
explain the Federal Reserve’s position to persuade the OCC to agree to 
the same approach.'^*' Ms. Hoggarth replied that the OCC examiners 
had already advised the bank that beneficial ownership letters were not 
adequate, and she did not think the OCC would accept the Federal 
Reserve’s approach. 

When the OCC’s bearer share deadline arrived at the end of March 
2006, however, little had changed in either the New York or Miami IPB 
offices. Both continued their policy of obtaining periodic beneficial 
ownership letters from most accounts, and arranging for shares to be 
taken into custody only for a small percentage of accounts deemed to be 
higher risk. 

The documents reviewed by the Subcommittee also contain no 
indication that the OCC followed up with HBUS on the bearer share 
MRA in the 2006 OCC Supervisory Letter. When asked why, the OCC 
AML Examiner told the Subcommittee that he had been informed by 
HBUS that it had closed all of its bearer share accounts in 2006, and 
didn’t learn until 2010, that the bearer share accounts had, in fact, 
remained open.'^^^ 

Proposed Job Aid on Bearer Shares. From at least 2002 to 2007, 
HBUS did not have a standard policy establishing how its various 
branches should handle bearer share issues and what AML safeguards 
should be used. ' In early 2007, HBUS undertook an effort to develop 
a standard bearer share policy that would apply to all HBUS offices. It 
was an effort that would take the rest of the year. 

An HBUS AML Compliance officer located in New York, Ali 
Kazmy, was tasked with developing the policy. In February 2007, he 
emailed his supervisor, Mary Caskin, that he hoped to finalize a draft 
that week.'*’^ Internal documents indicate that, a few months later, the 
draft was circulated to other HBUS Compliance personnel for comment. 
At least one colleague sought to strengthen it. On April 1 7, 2007, 

HBUS AML Compliance officer Robert Guthmuller sent an email to 
colleagues stating that the policy should not make it optional for bearer 
shares to be classified as high risk. Mr. Guthmuller contended that 
approach did not mirror other banks’ policies: “For at least the last 10 
___ 

'®Ud. 

”” See 5/10/2010 email exchanges among OCC Joseph Boss, Lee Straus, James Vivenzio, 
Monica Freas, Sally Belshaw, and others, “Bearer Share Accounts” OCC-PSI-00886601 
(discussed further supral . 

See 2/26/2007 email exchanges among HBUS Ali Kazmy and HBUS Mary Caskin and 
others, “APC Interim Procedures,” OCC-PSI-0030770I (“At present, we do not have a standard 
bearer share policy. I am actually working on it and expect it to be finalized this week, however 
it will require senior management approval.”). 
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years, all private banks 1 know classify ALL bearer share PlCs as high 
risk.”’'’*' 


In June 2007, Mr. Kazmy sent a draft “Job Aid” on bearer shares 
to the IPB offices with bearer share accounts.'^’’ HBUS Job Aids were 
documents designed to provide more specific instructions to bank 
personnel in implementing higher level policies and procedures.'^’* Mr. 
Kazmy immediately met strong resistance to strengthening the AML 
controls on bearer share accounts. 

Teresa Garcia, who was a senior Compliance officer at the New 
York IPB, criticized the draft on several grounds: for requiring all 
bearer share accounts to be classified as SCC accounts subject to 
enhanced due diligence and monitoring; requiring all shares to be held in 
the custody of the bank; and requiring beneficial ownership to be 
disclosed every two years.'*” Ms. Garcia wrote that, although the Job 
Aid was similar to an existing policy at the New York IPB, the New 
York IPB did not classify bearer share accounts as SCCs unless the 
nature of the beneficial owner warranted it, and bearer certificates could 
be held with a third party custodian instead of the bank. Ms. Garcia 
added that the Job Aid should only require beneficial ownership 
disclosure forms to be renewed every three years. Later that day, Ms. 
Garcia sent another email to Mr. Kazmy and others stating: “IPB-NY 
has about 500 non-high risk bearer share accounts. There is no way we 
are making all these accounts SCCs.”'““ These emails, in which Ms. 
Garcia opposed the proposed AML controls, show that she saw her role 
in this instance as acting on behalf of the business unit rather than acting 
on behalf of HBUS Compliance. 

The Miami office was also critical of the proposed Job Aid. Clara 
Hurtado, Director of AML Compliance for Miami, wrote: 

“Miami also has a large number of bearer share accounts. I too 
disagree with making these SCCs. We are also getting an updated 
BOL [Beneficial Ownership Letter] every 3 years, not 2 years. 
Before anything goes out to the units, we need to be careful that we 
do not change the agreed upon policies/procedures which have 
been put in place based on local regulator requirements.”'*” 


1596 4/17/2007 email from HBUS Robert Guthmullerto HBUS Nerissa Hall and Alan 
Williamson, OCC-PSI-0021 1658. 

6/18/2007 email from HBUS Ali Kazmy to HBUS Anne Liddy, “Job Aid - Bearer Share,” 
OCC-PSI-00617514. 

Subcommittee interview of Ali Kazmy (2/29/2012). 

6/18/2007 email from HBUS Ali Kazmy to HBUS Anne Liddy, “Job Aid -Bearer Share,” 

OCC-PSI-00617514. 

1600 

Id. 
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On July 25, 2007, Ms. Hurtado sent Mr. Kazmy another email stating 
that Miami had approximately 600 bearer share accounts and they 
“could not possibly categorize them all as high risk.”’“^ She proposed 
instead that Miami use the bearer shares as one indicator of a high risk 
account, but that a second indicator would also have to be present before 
the account would be classified as high risk and subjected to enhanced 
due diligence and monitoring. She wrote; “We feel this is a good way 
to capture truly high risk bearer share accounts.” Ms. Hurtado also 
asserted that there was “no way to custodize in Miami and remotely was 
too difficult.”'*°^ She proposed instead that Miami maintain its current 
practice of requiring a Beneficial Ownership Letter for new accounts 
with updates every three years. She noted that the Miami policy had just 
been approved by HBUS Compliance head Teresa Pesce and 
Compliance Officer of California Programs, Susan Hoggarth, both of 
whom had agreed that Miami would not have to custodize the shares.'*’®'' 
These emails show that Ms. Hurtado, like Ms. Garcia, saw her role in 
this instance as defending the position of the international private bank 
rather than the position of HBUS Compliance. 

Four days later, on July 29, 2007, Ms. Hurtado sent Mr. Kazmy 
another email suggesting that the AML Director rather than the CEO 
should be able to approve the opening of bearer share accounts. She 
also wrote that the Miami subsidiary “will not be lowering the 
monitoring thresholds on over 600 bearer share accounts,” and that 
Miami’s use of Beneficial Ownership Letters had been approved by 
HBUS Corporate Compliance and the office “cannot go back and re- 
paper.”'®®^ The next day, Ms. Hurtado forwarded Mr. Kazmy a copy of 
the Miami bearer share procedures, explaining that if he wanted to 
change them, he would need to “reach out to the business first,” and 
gave him contact information for Jeff Clous, head of HBUS IPB 
Operations in Florida.'®®® 

On August 6, 2007, Mr. Kazmy forwarded Ms. Hurtado’s emails to 
two more senior HBUS AML Compliance officials, Alan Williamson 
and Anne Liddy. Though Mr. Williamson had agreed that IPB Miami 
should be included in the new policy, he said after reading Ms. 

Hurtado’s emails, “unfortunately I now question my prior inclination to 
make them be consistent.”'®®^ Mr. Williamson suggested that the new 
guidance be prospective from the date of issuance so that the bank 


1602 7/25/2007 emaii from HBUS Clara Hurtado to HBUS All Kazmy and others, “Bearer Share 
Meeting,” OCC-PSl-00217164. 

1603 

1604 Id 

Id. 

8/6/2007 email exchange among HBUS Ali Kazmy, HBUS Alan Williamson, HBUS Clara 
Hurtado, and others, “miami bearer share procedures,” OCC-PSI-00217163. 

1607 g/9/2007 email exchanges among HBUS Ali Kazmy, HBUS Alan Williamson, and HBUS 
Atme Liddy, “On Boarding Bearer Share Corporation Policy Guidance,” OCC-PSI.00316956. 
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would not have to do a retrospective review of bearer share accounts, 
stating that “may be a good idea but we should avoid locking ourselves 
in.” Mr. Williamson also recommended adding an “exception process” 
in the policy, because there is “always a special case somewhere.”'®"* 
Mr. Kazmy replied that the hank may have to do a retrospective review 
over a reasonable time period, but agreed to include the following line in 
the policy: “Exceptions to this Policy must be sought from the AML 
Director or designee in writing giving full details of the matter 
warranting such exception. The written approval must be maintained in 
customer file and reported to Oversight & Control Group upon 
receipt.”'®"" In August 2007, the New York IPB policy for hearer shares 
was slightly strengthened. It required all new clients wishing to open a 
bearer share account to obtain approval from the New York IPB CEO 
and AML Local Compliance Officer, and further required them to 
register or custodize their shares.'®'" This policy essentially treated all 
new hearer share accounts as high risk, though no mention was made of 
enhanced due diligence or monitoring obligations. Existing bearer share 
accounts were kept divided into high and low risk accounts. High risk 
bearer share accounts were required to register or custodize their shares. 
Low risk bearer share accounts were allowed to provide a Beneficial 
Ownership Letter every three years, and their shares were not taken into 
custody.'®" At this time, HBUS New York held over 630 bearer share 
accounts.'®'^ 

American Express Prosecution. On August 6, 2007, the U.S. 
Justice Department, working with the Federal Reserve and FinCEN, 
filed a Deferred Prosecution Agreement against American Express Bank 
International for criminal violations of Federal AML laws.'®'* In August 
2007, HBUS Compliance circulated information about the 
prosecution,'®''' not because FIBUS had participated in any of the matters 
involving American Express,'®'® but to alert employees to the 
prosecution, ascertain if any of the American Express clients were also 
clients of HBUS, and point out that the Deferred Prosecution Agreement 
had targeted the bank in part for lack of sufficient AML controls over 
bearer share accounts.'®' 


8/6/2007 email exchanges among HBUS Ali Kazmy, HBUS Alan Williamson, and HBUS 
Anne Liddy, “On Boarding Dearer Share Corporation Policy Guidance,” OCC-PSI-00217148 

1609 

8/27/2007 email exchanges among HBUS Alan Williamson, HBUS Terry Westren, and 
others, “OCC-PSI-003 1 8438 
Id. 

2007 List of New York Dearer Share Accounts, OCC-PSI-003 18439. 

United States v. American Express Bank International . Case No. 07-20602-CR- 
ZLOCH/SNOW (USDC SD Flor.), Deferred Prosecution Agreement (8/7/2007). 

8/9/2007 email exchanges among HBUS Ali Kazmy, HBUS Alan Williamson, and HBUS 
Anne Liddy, “On Boarding Bearer Share Corporation Policy Guidance,” OCC-PSI-003 16956. 

8/7/2007 email exchanges among OCC HBUS Daniel Jack, HBUS Alan Williamson, and 
others, “AML Enforcement Actions vs AmEx (Banknotes & Metals)” OCC-PSI'00217241. 
1616 g/7/2007 email exchanges among HBUS Daniel Jack, HBUS Michael Baez, HSBC/IBEU 
Gordon Brown, HBMD Sally Lomas, HBUS Michael Karam, and others, “AML Enforcement 
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In response, on August 16, 2007, Jeff Clous, head of HBUS IPB 
Operations in Florida, expressed concern to Alan Williamson of HBUS 
Compliance about HBUS’ relative dearth of AML compliance resources 
compared to American Express, which had twelve full time compliance 
staff. He wrote: “I believe we have resource constraints that impact our 
AML program that need to be addressed.”"’'^ 

The next day, on August 17, 2007, HBUS Compliance head 
Carolyn Wind and Alan Williamson met with Federal Reserve officials. 
During this meeting, described by HBUS as “friendly,” the Federal 
Reserve referenced the American Express ease, suggested HBUS might 
have similar issues, and suggested the HBUS Miami management and 
compliance teams take another look at risky products, such as bearer 
share companies.'®'* In a summary of the meeting, Ms. Wind noted that 
one Federal Reserve employee commented with respect to HBUS: “if 
you take the facts from the American Express case and lay them over 
our last report of HSBC, they are all there.”'®'^ Earlier in the year, on 
January 24, 2007, the Federal Reserve had issued a Report of 
Examination for the Miami IPB which included a requirement that 
management “enhance the current controls over bearer share accounts to 
ensure that they are sufficiently risk-based and capable of detecting 
changes in ownership of these entities on an ongoing basis. 

That same month, HBUS Compliance began conducting a “gap 
analysis” comparison of the American Express case versus its own AML 
program. On October 1 1 , 2007, the analysis was issued and identified 
bearer shares as a particular concern at both American Express and 
HBUS.'®^' It also announced the decision by HBUS to stop opening 
new bearer share accounts as of September 1 , 2007, and to consider also 
eliminating all of its existing bearer share accounts: 


Action against AmEx businesses,” OCC-PSl-00153253. On August 9, 2007, Ali Kazmy wrote, 
“At this juncture, your cognizance is drawn to the recently issued enforcement action against 
American Express entities, who were penalized up to $55 million for BSA/AML violations 
including those associated with PlCS^earer share accounts.” 8/09/2007 email from Ali Kazmy 
to Alan Williamson, OCC-PSI-003 16956. 

8/20/2007 email exchanges among HBUS Alan Williamson, HBUS Camillus Hughes, and 
others, “AEBl Deferred Prosecution Agreement,” OCC-PSI-002 1 83 80. 

8/23/2007 email exchanges among HBUS Marlon Young, HBUS Carolyn Wind, HBUS 
Louis Marino, HBUS Jeff Clous, and others, “File Note on Meeting with Federal Reserve Bank 
of Atlanta,” OCC-PSI-00698461. 

1619 id_ 

1620 1/24/2004 Board of Governors of the Federal Reserve System “Report of Examination of 
Edge Corporation,” OCC-PSI-003881 10. 1/24/2004 Board of Governors of the Federal Reserve 
System “Report of Examination of Edge Corporation,” OCC-PSI-00107432. 

10/1 1/2007 “High Level Comparison of Key Anti-Money Laundering Program Deficiencies 
Identified at American Express Bank international,” prepared by Alan Williamson and Stefan 
Hardy, OCC-PSi-00221959. 
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“AEBI [American Express Bank International] failed to exercise 
sufficient control over accounts held in the names of offshore 
hearer share corporations, and until 2004 had no policy or 
procedure requiring beneficial owners of such accounts to certify 
in writing their continued ownership of the bearer shares. 

Bearer share accounts are known and HSBC requires written 
confirmation every three years. A decision has been taken by the 
business not to accept new bearer share accounts beginning 
9/1/07. Management is considering a program to eliminate all 
bearer share customers.”'^^^ 

Although HBUS announced a ban on opening new bearer share accounts 
as of September 1, 2007, it issued a new bank-wide bearer share policy 
three months later allowing new accounts. 

Final Bearer Shares Policy. On December 10, 2007, HBUS 
Compliance officer Paul O’Sullivan circulated a final draft of the 
proposed new Bearer Share Policy. He explained that the policy was 
more flexible than first proposed, and “we will be able to maintain 
Bearer Share Company accounts once the requirements of the policy are 
met jjjg policy applied to both new and existing bearer share 
accounts. It required all bearer share accounts to either register their 
shares or keep the shares in custody with the bank or an approved third 
party. In addition. Beneficial Ownership Letters would have to be filed 
every three years. The draft policy also permitted new accounts to be 
opened if they were approved by the Business Unit head, AML Local 
Compliance Officer, and AML Director, or a designee. The approvals 
would have to be documented and retained in the customer file.'®^^' 

On December 1 1, 2007, HBUS Compliance officer Terry Westren 
responded as follows: 

“If I read this correctly, it is saying that one year from the issuance 
of this policy, we have to have all outstanding bearer shares 
(currently with clients), either registered or in the hands of an 
approved Custodian. Is this correct? I recall when the OCC was 
here, they asked for this. AML Compliance was able to negotiate 
for this requirement to be applicable only to High Risk accounts. 
We then complied with this. It looks like this is now expanded to 
all outstanding bearer shares? Of course, with the new BVI rules 


Id. (Emphasis in original.) 

12/10/2007 email exchanges among HBUS Paul O’Sullivan, HBUS Terry Westren, HBUS 
Mason Salit, HBUS Tereso Suarez-Obregon, and others, “Bearer Share Corporation Policy,” 
OCC-PSl-00226525, 

8/29/2007 Bearer Share Corporation Account “Policy Guidance,” OCC-PSI'00226526. 
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coming into play in 2009, they will have to do this anyway, but I 

think it should be noted this could be a considerable exercise.”'®^^ 

Contrary to the statement in this email, however, the 2006 OCC 
Supervisory Letter had already called for the bank to place all bearer 
shares in the custody of either the bank or an acceptable third party, with 
no exceptions made for lower risk accounts.'^^® While HBUS had 
responded to the Supervisory Letter that it planned to limit that 
requirement to higher risk accounts, there is no documentation showing 
the OCC accepted that position. When asked about this email, the OCC 
told the Subcommittee it had been under the impression that HBUS had 
closed all of its bearer share accounts.'^’ 

That same day, December 1 1, 2007, Jeff Clous, IPB Operations 
head in Florida, repeated the concerns he had voiced to Alan Williamson 
in September. Mr. Clous asserted that the draft policy would have an 
adverse effect on IPB business. He noted that, although IPB Miami was 
no longer opening new bearer share accounts, it still maintained 1,679 
accounts with $2.6 billion, which generated $26 million in revenue 
annually. Mr. Clous also asserted that the draft policy went too far 
beyond what regulators required. He noted that the proposed policy 
required the bank to both register and custodize bearer share accounts, 
while the Federal AML examination manual offered a choice between 
those options. In addition, he noted that the draft policy would require 
existing bearer share accounts to register or custodize their shares by the 
end of 2008, even though the new BVI bearer share regulations would 
not require the registration of BVI bearer shares until the end of 
2009.'“* 

On December 14, 2007, the HBUS Board of Directors approved its 
first HBUS-wide Bearer Share Policy. The bearer share policy 
applied to all new and existing bearer share accounts and required the 
client to register the shares or agree to hold the shares in custody with 
HSBC or a third party custodian and provide a periodic beneficial 
ownership certificate. AML Director Leslie Midzain gave both IPB 
New York and Miami IPB a full year, until 2009, to comply with the 


12/1 1/2007 email exchanges among HBUS Terry Westren, HBUS Paul O’Sullivan, and 
others, “Bearer Share Corporation Policy,” OCC-PSI-00327917. 

See 1/31/2006 OCC Supervisory Letter, “International Private Banking BSA/AML 
Examination,” OCC-PSI-00000317. [Sealed Exhibit.] 

Subcommittee interview of Joseph Boss (1/30/2012) and James Vivenzio (3/15 /2012). See 
also 5/10/2010 email exchanges among OCC Joseph Boss, Lee Straus, James Vivenzio, Monica 
Freas, Sally Belshaw, and others, “Bearer Share Accounts” OCC-PSi-00886601 . 

1628 12 / 1 1/2007 email from HBUS Jeff Clous to HBUS Paul O’Sullivan and others, “Bearer 
Share Corporation Policy,” OCC-PSI-00226652. 

August 29, 2007 Bearer Share Corporation Account Policy Guidance, OCC'PSI-00226526. 
Id. For more information, see 12/14/2007 HSBC Group Private Banking North America 
Compliance Report, OCC-PSI-00328384. 
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policy due to the BVI registration project which had a 2009 deadline.'*’’’ 
For the next year, New York IPB and Miami IPB continued to follow 
their own policies and procedures with regard to bearer share accounts. 

Federal Reserve Concern. In 2008, an HSBC Group Audit of the 
New York IPB disclosed that it had 610 bearer share accounts, 3 1 of 
which had overdue Beneficial Ownership Letters, including 21 which 
were overdue by more than a year.'*’’’ In Miami, an earlier HSBC 
Group Audit disclosed that, as of October 2007, the Miami IPB had 
1 ,667 bearer share accounts, 1, 1 09 or two-thirds of which had Beneficial 
Ownership Letters that were more than three years old and so were 
overdue to get new letters.'®” Both audits indicated that HBUS was at 
risk of not knowing, in many cases, who owned the corporations behind 
the bearer share accounts. 

On January 31, 2008, HBUS AML Compliance officer Paul 
O’Sullivan emailed Clara Hurtado, Compliance officer for the Miami 
IPB, regarding a “De-Risking Strategy for Miami.”'*’’"' He also 
discussed with HBUS Compliance head Carolyn Wind and senior AML 
Compliance officer Alan Williamson the Federal Reserve’s concerns 
regarding the high-risk nature of the Miami IPB’s client-base.'®” Mr. 
O’Sullivan asked Ms. Hurtado to identify the high risk bearer share 
accounts for which there was no “glue to cement the relationship” and 
consider terminating them.'®’® 

Six months later, on June 12, 2008, the Federal Reserve issued its 
annual Report of Examination (ROE) for the Miami IPB. The ROE 
again identified bearer share accounts as a problem, this time expanding 
the recommended action to be taken and noting, in particular, that 
ownership of a bearer share account should be ascertained more 
frequently than every three years: 


See 4/18/2008 HBUS KYC Committee Meeting minutes, OCC-PSI-0024I046. See also 
7/3/2008 memorandum from HBUS AH Kazmy to HBUS Leslie Midzain, OCC-PSI-00292367 
(“Since BVI authorities have granted till December 2009 for all bearer shares to be registered, all 
BVI bearer share corporations within PB Americas wall follow this time frame.”). Subcommittee 
briefing by HSBC legal counsel (7/9/2012). 

10/2008 Group Financial Services Audit October 2008, OCC-PSI-00248215. 

See 10/2007 “HSBC Group Financial Services and European Audit Report on HSBC Private 
Bank International, Miami and HBUS Domestic Private Banking-Florida Region,” OCC-PSI- 
00223637; see also 12/1 1/2007 HSBC Private Bank International FSA Audit Issues Status 
Report, OCC-PSI-00226813. 

1/31/2008 email from HBUS Paul O’Sullivan to HBUS Alan Williamson and HBUS 
Carolyn Wind, “De-Risking,” OCC-PSl-0033 1923. 

'635 asked about the 1,167 bearer share accounts, Ms. Wind told Subcommittee that she 
knew there were bearer share accounts, but did not know there were that many. She said she had 
talked about getting rid of bearer share accounts and wanted tighter controls. She also said 
longstanding bank clients with bearer share accounts were not uncommon in private banking. 
Subcommittee interview of Carolyn Wind (3/7/2012). 
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“Assess the risks associated with bearer share accounts and 
establish risk mitigation control measures that are appropriate for 
the associated level of risk. These control measures may include 
maintaining control over bearer share accounts; entrusting bearer 
share accounts with a reliable second party; or requiring periodic 
certification of ownership. At a minimum, management should 
conduct a review of the bearer share recertification policy and 
ensure that accounts that pose higher risks are recertified more 
frequently than every three years.”'*^^ 

On June 25, 2008, Peter Georgeou, deputy head of Group Audit 
Private Bank, emailed the head of HSBC Group audits, Matthew King, 
addressing the latest Federal Reserve examination report. While the 
Federal Reserve had listed 13 required actions, Mr. Georgeou alerted 
Mr. King to those he considered “more material.” On his list was; 
“Improved controls and risk mitigation are required in respect of bearer 
share accounts and accounts held in the name of PICs. In addition, 
policies and procedures should be enhanced for identification and the 
review of higher risk accounts.”’*^* 

On July 3, 2008, HBUS Compliance officer Ali Kazmy sent a 
memorandum to HBUS Compliance and AML head Lesley Midzain 
summarizing changes that had been made to the IPB’s AML Procedures 
for 2007 and 2008. He noted that BVI bearer shares would have to be 
registered by December 2009, in accordance with the time frame set 
forth by BVI authorities. He wrote that high risk bearer share accounts 
would also require annual recertification of beneficial owner 
information, while lower risk bearer share accounts would need to 
recertify beneficial ownership every three years. In addition, he wrote 
that bearer share clients would be required to attest that they will notify 
tlie bank if a change in ownership occurs and provide a new Beneficial 
Ownership Letter.'*’^’ The next day, July 4, 2008, Jeff Clous, head of 
IPB Operations in Florida, repeated the concerns he had voiced twice 
before, to Alan Williamson and Paul O’Sullivan.’*'*® 

On November 12, 2008, the New York International Private Bank 
sought dispensation to open 80 new bearer share accounts for existing 
clients. New York IPB employee Todd Maddison asked senior 


6/12/2008 Federal Reserve Audit, allO-ll. 

1638 7/2/2008 email exchanges among HBUS Janet Burak, HBUS Bob Martin, and others, 
“Federal Reserve Bank of Atlanta Review of HSBC Private Bank Miami,” HBUS OCC-PSl- 
00725897. 

1639 7 / 3/2008 memorandum from HBUS Aii Kazmy to HBUS Lesley Midzain, “Modifications to 
the Approved Private Bank Americas AML Procedures,” OCC-PSl-00292367. 

1640 10/29/2008 email exchanges among HBUS Alan Williamson, HBUS Lesley Midzain, and 
others, “Enquiry - co-branding,” OCC-PSI-00219656, 

1 1/14/2008 email exchanges among HBUS Todd Maddison, HBUS Alan Williamson, and 
others, “Bearer share question,” OCC-PSI-00248782. HBUS legal counsel told the 
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HBUS Compliance officer Alan Williamson whether Compliance would 
provide the needed dispensation.'®'*^ Mr. Maddison said that he thought 
that an email written by Teresa Garcia, which outlined exceptions to the 
bearer share policy for the Private Bank, implied that the accounts could 
be opened under these exceptions; 

“Since BVI authorities have granted till December 2009 for all 
bearer shares to be registered, all BVI bearer share corporations 
within PB Americas will follow this time frame; High risk bearer 
share accounts will provide an annual recertification of the 
beneficial owners through a properly executed BOL; Standard risk 
bearer share accounts will provide beneficial ownership 
recertification every three years through a properly executed 
Beneficial Ownership Letter (BOL); and Clients must attest that 
they will notify the bank of change in ownership, as and when it 
takes place. A new BOL will be required from the new beneficial 

„!643 

owner. 

Some of the 80 new bearer share brokerage accounts were opened 
and some of them, as well as some other New York IPB bearer share 
accounts, were later moved to the Miami IPB.'®'" On March 1 8, 2009, 
the OCC issued a Supervisory Letter addressing AML concerns related 
to the HBUS Private Banking operations. The letter indicated that one 
of the OCC’s primary examination objectives was to “[ejvaluate 
effectiveness of enhancements to policies and procedures for PUPID 
activities, bearer share accounts and monitoring processes.”'®"'® Despite 
this objective, the letter did not address bearer share issues in its 
conclusions or recommendations.'®''® The OCC’s silence on the issue 
stands in sharp contrast to the Federal Reserve which was not only 
aware of the bearer share accounts, but tracking actions taken in Miami 
with respect to them. 

On May 19, 2009, the Federal Reserve issued its annual Report of 
Examination for the Miami IPB, which again mentioned bearer shares as 
a concern. It stated in part: 

“[T]he risks posed by the international private banking activities 
remain significant, given the high transactional nature of the client 


Subcommittee that 80 of its clients with bearer shares needed to open brokerage accounts due to 
a regulatory change. Subcommittee briefing by HBUS legal counsel (7/9/2012). 

1642 j j/14/2008 email exchanges among HBUS Todd Maddison, HBUS Alan Williamson, and 
others, “Bearer share question,” OCC-PSI-00248782. HBUS legal counsel told the 
Subcommittee it did not know whether or not a dispensation was granted for these accounts. 
Subcommittee briefing by HBUS legal counsel (7/9/2012). 

Subcommittee briefing by HSBC legal counsel (7/9/2012). 

3/18/2009 supervisory letter from OCC to HBUS Leslie Midzain, “Private Banking 
BSA/AML Examination,” OCC-PSI-00000445-447, at 445. 

See 5/10/2010 email from OCC Joseph Boss to OCC Lee Straus, James Vivenzio, Monica 
Freas, Sally Belshaw, and others, “Bearer Share Accounts,” OCC-PSI-00886601. 
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base, a higher risk target market (Latin America), and the 
existence of offshore shell companies (including offshore 
operating companies), including bearer share structures.”'^"*’ 

The examination report continued that the risk was increasing due to the 
bank’s transfer of some accounts from the New York International 
Private Bank to the Miami Edge Corporation. The report also noted that 
HBUS had taken steps to address the risk. It noted that senior 
compliance personnel had sought to “de-risk” the Miami IPB’s private 
banking activities, primarily by; 

“continued review of offshore operating shell companies, seeking 
to exit those relationships where the profitability of the 
relationships does not justify the additional compliance costs 
associated with the account. This strategy, coupled with increased 
approval requirements for new operating company accounts, and a 
decision to no longer open new bearer share accounts, shows 
tangible steps taken towards reducing reputational risk at 
Corporation.”'^"'* 

This was the third Report of Examination over a two year period to have 
directed HBUS to strengthen its AML controls over its bearer share 
accounts. 

2009 Bearer Share Project. In February 2009, HBUS began the 
“Bearer Share Project” with the goal of winding down HBUS’ bearer 
share accounts.'^"*’ Because the British Virgin Islands (BVI) had passed 
legislation that would require bearer share certificates to be registered or 
custodized by the end of the year, HSBC viewed this development as an 
indication that other laws would soon be passed and decided that it 
would begin registering or custodizing its bearer shares beginning with 
the accounts opened by BVI bearer share corporations.'®^" By 2009, 
HBUS’ international private banks operated under a new organizational 
structure called Private Bank Americas (PBA), and the bearer shares 
were treated as a group. PBA determined that it had a total of 1,833 
unregistered bearer share accounts, including 1,257 BVI bearer shares 
and 576 non-BVI bearer shares. It determined that 306 were in the New 
York Private Bank and 1,527 were in the Miami Private Bank.'®®' The 
Project began with HBUS’ sending a letter to all of its BVI bearer share 


5/19/2009 Federal Reserve Report of Examination of Edge Act Corporation, BOG-A- 
300035. [Sealed Exhibit.] 

Id. at 21. 

Subcommittee briefing by HSBC legal counsel on bearer share issues (4/20/2012 and 
7/9/2012). 

'“"Id. 

1651 
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clients in May 2009.'*’^^ The letter explained that as of December 31, 

2009, HBUS would “no longer maintain accounts for companies that 
issue bearer shares.” It indicated that clients would need to register their 
bearer shares or close their accounts. 

In 2010, the OCC, which had been silent on bearer share issues at 
HBUS for four years, renewed its focus on the accounts. On May 10, 

2010, one of the OCC AML examiners sent an email to EIC Sally 
Belshaw, OCC attorneys in Washington and others stating that HBUS 
Compliance head Terry Pesce had told him that all but one bearer share 
account had been closed in 2006.**^^ One of the OCC attorneys in 
Washington wrote in an email that he recalled that the examiner “had 
been told” that there were no bearer share accounts."’*^ The AML 
examiner indicated that he had just learned that HSBC still had 79 bearer 
share accounts held in Panama, Uruguay, Bahamas, Cayman, Belize, 
and Netherlands.'*’^® In June 2010, another OCC examiner at HBUS 
obtained a list from HBUS of 1 1 7 bearer share accounts.'®” On 
September 8, 2010, the same examiner forwarded a portion of a May 
2010 New York IPB report stating it had 610 bearer share accounts, 31 
of which had overdue beneficial ownership declarations.'®®* The report 
also indicated that, for some accounts, the bank had no beneficial 
ownership declaration on file and no information about the location of 
some of the shares. Later that same day, the examiner sent another 
email with a copy of an audit of the Miami IPB indicating it had 925 
bearer share accounts, in addition to the 610 accounts in New York.'®®’ 
The examiner agreed to forward the Miami audit report to the Federal 
Reserve.'®®® These internal communications indicate that a primary 
reason for OCC inaction on bearer share issues was a misimpression that 
the accounts had been closed four years earlier.'®®' It also indicates a 


Letter from HBUS to British Virgin Islands bearer share clients, “For Companies 
Incorporated in the British Virgin Islands,” HSBC-PSl-PROD-01 97129-133; Subcommittee 
briefing by HSBC legal counsel (7/9/2012). 

Letter from HBUS to British Virgin Islands bearer share clients, “For Companies 
Incorporated in the British Virgin Islands,” HSBC-PSI-PROD-0197129-133, at 129. 

See 5/10/2010 email from OCC Joseph Boss to OCC Lee Straus, James Vivenzio, Monica 
Freas, Sally Belshaw, and others, “Bearer Share Accounts,” OCC-PSI-00886601. 

9/8/2010 email exchanges among OCC James Vivenzio and OCC Teresa Tabor, “Bearer 
Share Accounts,” OCC-PSI-00894871. 

See 5/10/2010 email from OCC Joseph Boss to OCC Lee Straus, James Vivenzio, Monica 
Freas, Sally Belshaw, and others, “Bearer Share Accounts,” OCC-PSI-00886601. 

6/15/2010 email from OCC Teresa Tabor to OCC Joseph Boss, [no subject], OCC-PSI- 
00929779 and attachment OCC-PSI-00929780 

1658 9/g/20l0 email exchanges among OCC James Vivenzio and OCC Teresa Tabor, “Bearer 
Share Accounts,” OCC-PSI-00894871. 

6/15/2010 email from OCC Teresa Tabor to OCC Joe Boss forwarded to OCC Elsa De La 
Garza, [no subject], OCC-PSi-00929779 and attachment OCC-PSI-00929780. 

1660 9/g/2010 email exchanges among OCC Teresa Tabor and OCC Joseph Boss, “IPB Miami 
(Edge),” OCC-PSl-00921759-760, at 759. 

See also 5/12/201 1 conclusion memorandum from OCC Teresa Tabor to OCC Kerry Morse, 
“Latin American International Center (LAIC) Miami — BSA/AML Examination,” OCC-PSI- 
01768568 (finding that LAIC had two bearer share accounts which “only came to the attention of 
the LAIC Compliance Staff based on Examiner Inquiries at the commencement of the 
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lack of coordination with the Federal Reserve which had been 
monitoring the bearer share issue in Miami for several years. 

By the time the OCC became aware of the large number of bearer 
share accounts still open at HBUS, the Bearer Share Project was well 
underway in its efforts to reduce the account volume. Having already 
sent a 2009 letter to accountholders with BVI bearer share corporations 
about the need to register their shares or close their accounts, HBUS 
followed in November 2010, by sending a similar letter to all 
accountholders with non-BVl bearer share corporations. 

By June 201 1, of the 1257 BVI bearer share accounts, 900 had 
registered their shares (so that the accounts no longer qualified as bearer 
share accounts) and 350 accounts had closed."^^ Of the 576 non-BVI 
bearer share accounts, 255 had registered their shares, and 182 accounts 
were closed.'**^ In November 2011, Private Bank Americas froze the 
remaining 139 non-BVI bearer share accounts, and began working to 
contact the accountholders and close the accounts.'^^ 

As of July 9, 20 1 2, HSBC legal counsel told the Subcommittee 
that HBUS Private Bank America still had 26 bearer share accounts.'®®’ 
HSBC legal counsel also told the Subcommittee that “all but a handful” 
of those accounts were frozen, because the accountholders had not 
registered their shares or closed their accounts.'®®® According to HSBC 
legal counsel, the handful of bearer share accounts that were not frozen 
were beneficially owned by a single client, and the shares were being 
kept in the custody of a law firm in New York. HSBC legal counsel 
indicated that, although HBUS’ latest bearer share policy continued to 
allow new bearer share accounts to be opened under limited 
circumstances, no new bearer share account had, in fact, been opened 
since that policy took effect.'®®’ Internal HBUS documents indicate that 
as a result of the Bearer Share Project, on at least two occasions, the 
bank identified suspicious activity related to the accoimts.'®®* 


examination”; and that LAIC had not fully followed HBUS bearer share policy for these two 
accounts because Beneficial Ownership Letters were not obtained every three years and the 
shares were being held by third-party custodians but it was unclear if the custodians had been 
approved by LAIC and what approval process was utilized). 

Subcommittee briefing by HSBC legal counsel on bearer share issues (4/20/2012). 

1663 

1664 jd. 

The Subcommittee was told that 12 accounts are located in Miami and 14 are located in New 
York. Subcommittee briefing by HSBC legal counsel on bearer share issues (7/9/2012). 

1666 

Briefing by HSBC legal counsel to the Subcommittee on bearer share issues (4/20/2012). 

See 5/6/2010 AML Oversight Committee Meeting minutes for HBUS, OCC-PSI-00860859- 
860, at 859. 
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C. Two Examples of Bearer Share Accounts 

Two examples of bearer share accounts illustrate the AML risks 
they pose. They involve bearer share accounts opened by Mauricio 
Cohen Assor and Leon Cohen Levy, which demonstrate how bearer 
share accounts can be used to conceal assets and evade taxes; and a 
wealthy Peruvian family, which demonstrates how banks can be 
pressured to waive AML safeguards when opening bearer share 
accounts. 

Cohen Bearer Share Accounts. Mauricio Cohen Assor and Leon 
Cohen Levy, father and son, were hotel developers in Miami Beach. 

On April 14, 2010, both were indicted in Florida on charges of 
conspiring to commit tax fraud and filing false tax returns. The 
Justice Department charged that the Cohens had used bearer share 
corporations and shell companies to help conceal $150 million in assets 
and $49 million in income from the IRS. Both resided in Miami Beach, 
Florida. 

The indictment explained that “bearer share corporations are often 
set up in tax havens to hide the true ownership of assets, because 
ownership records are not maintained and nominee officers and directors 
are often used to appear to control the affairs of the corporation.”'®” 

The indictment named two bearer share corporations used by the 
Cohens to open bank accounts. Blue Ocean Finance Ltd., a Panamanian 
bearer share corporation,'®’^ and Whitebury Shipping Time Sharing Ltd., 
a BVI bearer share company.'®” The Cohens used those bank accounts 
to conceal their ownership of the assets deposited into them. The 
indictment also disclosed that, around May 2007, an unnamed 
international bank asked one of the Cohens to register the shares of 
Whitebury Shipping and, when the request was refused, the bank closed 
the account. 

Internal bank documents disclose that FIBUS was the unnamed 
bank that maintained a bearer share account for Whitebury Shipping. 
April 2007 transcripts of several telephone conversations between 
Mauricio Cohen and an FIBUS banker describe the account, HBUS’ 
request that he register the bearer shares, and his refusal to do so. 


1669 iQ/y/2010 “Miami Beach Hotel Developers Convicted of Tax Fraud,” Department of Justice 
press release, http://www.justice.gov/usao/fls/PressReleases/ 1 0 1 007*0 1 .html. 

See generally United States of America v. Mauricio Cohen Assor and Leon Cohen Levy . 
Case No. 10-60159“CR-ZLOCH(s) (USDC SD Flor.), Superseding Indictment (8/3/2010) 
(hereinafter “Cohen Indietmenf ’). See also “2 Charged in Tax Evasion Scheme Involving 
HSBC,” New York Times . http://dealbook.nytimes.corrr/20I0/04/16/2-charged-in'tax-evasion* 
scheme-involving*hsbc/. 

Cohen Indictment at 3. 

Id. at 7. 

Id. at 8. 
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According to one of the telephone transcripts, on April 23, 2007, HBUS 
executive Claude Mandel, the Relationship Manager who handled the 
bank’s relationship with Mauricio Cohen, apparently agreed to remove 
Mr. Cohen’s name from the Whitebury account.'^^'* The next day, Mr. 
Cohen talked to Mr. Mandel about replacing Whitebury with another 
bearer share account. Mr. Mandel offered to convert Whitebury from a 
BVI to a Bahamian bearer share corporation, but said that the bank no 
longer opened bearer share accounts. Mr. Cohen protested and told Mr. 
Mandel that the bank would lose clients and that other banks take bearer 
share accounts.'’’’^ The telephone transcripts indicate that, on April 25, 
2007, Mr. Mandel and Mr. Cohen again discussed Mr. Cohen’s bearer 
share accounts. Despite Mr. Mandel’s insisting that his bearer shares 
would need to be registered, Mr. Cohen convinced Mr. Mandel to check 
if he could convert Whitebury into a Panamanian bearer share 
corporation. Mr. Cohen indicated again that he did not want to put 
names on the shares; when Mr. Mandel said that the shares would need 
to state the names, Mr. Cohen said; “But, I can’t put that, otherwise I 
have to declare them in the United States? I can’t do that, I don’t want 
to declare ... otherwise, I have to close the accounts with you and go to 
Geneva.”'™ 

Minutes from a May 6, 2010 AML Oversight Committee Meeting 
at HBUS noted that the HBUS Private Bank was providing information 
on closed bearer share accounts opened by an “ex-client” as part of the 
investigation of Mauricio Cohen, a former HSBC client.'®’^ 

In October 2010, the Cohens were convicted after a jury trial, 
sentenced to ten years in prison, and ordered to pay back taxes, interest, 
and penalties totaling over $ 1 7 million. This example demonstrates the 
risk of bearer share accounts being used to conceal ownership of assets 
and commit criminal tax evasion. 

Peruvian Family Bearer Share Accounts. In 2007, a senior 
Compliance official with the HSBC Private Bank in New York, Teresa 
Garcia, sought a waiver to open a relationship for a Peruvian 
businessman for two bearer share accounts.' ® According to Ms. 

Garcia, his business group was one of the richest and most powerful in 
Peru.'™ 


Transcript of 4/23/2007 telephone conversation between HBUS Claude Mandel and 
Mauricio Cohen, HSBC-PSI-PROD-0030891-894. 

Transcript of 4/24/2007 telephone conversation between HBUS Claude Mandel and 
Mauricio Cohen, HSBC-PSI-PROD-0030873-877. 

Transcript of 4/25/2007 telephone conversation between HBUS Claude Mandel and 
Mauricio Cohen, HSBC-PSl-PROD-0024791-793. 

5/6/2010 HBUS AML Oversight Committee Meeting Minutes, OCC-PSI-00860859, at 859. 
6/20/2007 email exchange among HBUS Teresa Garcia and HBUS Alan Williamson, 
“Waiver Request,” OCC-PSI-00214516, at 3. 

Id. at 3. 
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The bearer share corporations, Urigeler International S.A. - 
Holding Company and Birmingham Merchant S.A. - Holding Company, 
were formed in Panama.***" According to an email exchange among 
HBUS Compliance personnel, in 2007, opening a new bearer share 
account required: (1) approval by the New York International Private 
Bank CEO and AML Local Compliance Officer; and (2) registration or 
custodization of the bearer shares.***' 

Ms. Garcia wrote that she was requesting the waiver because the 
businessman had indicated that he did not want to forfeit confidentiality 
by registering or custodizing the bearer shares.'**^ She explained: “they 
wish to maintain confidentiality, and they have never been asked by our 
competitors with whom they bank to do this.”'**^ Manuel Diaz, 
President and Managing Director of HSBC Private Bank International in 
Miami, indicated that he supported a waiver, because he was very 
familiar with the family and interested in establishing a relationship with 
them.'**'* Marlon Young, CEO of Private Banking Americas, also 
approved the waiver request.'*** 

Ms. Garcia then escalated the request to senior HBUS Compliance 
official Alan Williamson to determine who had authority to grant the 
waiver on behalf of AML Compliance. Mr. Williamson explained that, 
while he had no objection to granting the waiver, the bearer shares 
policy was an HSBC Group mandate and any exception would have to 
be approved by HSBC Group Compliance.'** David Ford, HSBC 
Global Money Laundering Control Officer, confirmed that HSBC Group 
approval was required for an exception to Group policy. Mr. Ford also 
wrote that he was “[sjuprised can open bearer share account for offshore 
client with no bo [beneficial ownership] declaration in US,” and 
suggested checking with HBUS Compliance head Carolyn Wind about 
the OCC and Federal Reserve “view of such a structure.”'**’ Mr. 
Williamson asked HSBC Group AML head Susan Wright about the 


1680 5/20/2007 email exchange among HBUS Teresa Garcia and HBUS Alan Williamson, 
“Waiver Request,” OCC-PSI-00214516, at 2. 

Id. all. 

1682 7/5/2007 email exchange among HBUS Teresa Garcia and HBUS Alan Williamson, Susan 
Hoggarth, and others, “[redacted] Family,” OCC-PSI-0021521 1, at 6. 

6/21/2007 email exchange among HBUS Alan Williamson and HBUS Marlon Young, 
Manuel Diaz, Teresa Garcia, and others, “Waiver Request,” OCC-PSI-002I4618, at 3-4. 

6/20/2007 email exchange among HBUS Teresa Garcia and HBUS Alan Williamson, 
“Waiver Request,” OCC-PSI-00214516, at 3. 

6/25/2007 email from HBUS Marlon Young to HBUS Jaime Carvallo and others, “[redacted] 
Family,” OCC-PSl-00214806. 

1686 5/21/2007 email exchange among HBUS Alan Williamson and HBUS Marlon Young, 
Manuel Diaz, Teresa Garcia, and others, “W^vct Request,” OCC-PSI-002146i8, at 3. 
atl. 
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request, and reported that she was reluctant to grant the exception but 
would consider it.'*’** 

There was a strong push for this relationship by the business side. 
Manual Diaz, head of the Miami Private Bank International, wrote: “I 
FULLY SUPPORT THIS WAIVER.”'**’ Jaime Carvallo, a Miami 
bank executive, sent an email to the head of Private Banking Americas, 
Marlon Young, enlisting his support to obtain a waiver. Mr. Carvallo 
wrote: 


“Teresa Garcia must have given you heads up on the [redacted] 
family and the issue regarding their holding companies having 
bearer shares and the fact that they will not sign the BOL 
[Beneficial Ownership Letter]. 

I will see one of the family members tomorrow morning and this 
still seems to have no resolution. This is too important a family in 
Peru for us not to want to do business with, and one that has taken 
a lot of my time and effort to convince to start a relationship with 
us. ... I would appreciate your involvement at this point, as this has 
become extremely sensitive.”'*’® 

Mr. Young signaled his support for the waiver the same day,'*” 
and later wrote to senior HBUS Compliance officer Alan Williamson: 
“This is an important relationship for IPB [International Private Bank] 
and a family that has a clean record. It would be a shame if we are not 
able to obtain an exception.”'*’^ Mr. Cavallo also wrote directly to Mr. 
Williamson that the family was “too important a family in Peru for us 
not to want to do business with.”'*’^ Mr. Carvallo estimated the 
family’s liquid net worth,'*’’' and explained that HSBC was currently 
competing with another bank to help the family reorganize their 
businesses and facilitate the succession of their financial assets and 
operating companies, which could be very profitable.'*’* 

6/26/2007 email exchange among HBUS Alan Williamson and HBUS Jaime Carvallo, 
Marlon Young, Manuel Diaz, Teresa Garcia, and others, ‘‘[redacted] Family,” OCC-PSI- 
00214880, at 1. 

1689 5/20/2007 email exchange among HBUS Alan Williamson and HBUS Manuel Diaz, Teresa 
Garcia, and others, “Waiver Request,” OCC-PSI-00214534, at 1, 

6/25/2007 email from HBUS Jaime Carvallo to HBUS Marlon Young and others, “[redacted] 
Family,” OCC-PSI-0021 4806. 

6/25/2007 email from HBUS Marlon Young to HBUS Jaime Carvallo and others, “[redacted] 
Family,” OCC-PSI-00214806. 

6/26/2007 email from HBUS Marlon Young to HBUS Alan Williamson and others, 
“[redacted] Family,” OCC-PSI-00214891, at 1-2. 

7/5/2007 email exchange among HBUS Teresa Garcia and HBUS Alan Williamson, Susan 
Hoggarth, and others, “[redacted] Family,” OCC-PSI-0021521 1, at 6. 

6/26/2007 email exchange among HBUS Alan Williamson and HBUS Jaime Carvallo, 
Marlon Young, Manuel Diaz, Teresa Garcia, and others, “[redacted] Family,” OCC-PSI- 
00214880, at 1. 

7/5/2007 email exchange among HBUS Teresa Garcia and HBUS Alan Williamson, Susan 
Hoggarth, and others, “[redacted] Family,” OCC-PSI-002152 1 1, at 5. 
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Mr. Williamson responded; “I thought so. I would do it without 
going to Geneva but audit wrote up DPB [Domestic Private Banking] on 
a similar situation.”’^®* Later, he wrote: “we will do our best.”'®^^ Still 
later; “Doing what I can.”'*’* David Ford pointed out that the HSBC 
Group policy was flexible, because the client could either declare 
beneficial ownership, have HSBC hold the shares, or have an acceptable 
third party hold the shares.'*” On July 5, 2007, Mr. Williamson wrote 
that the “RM [Relationship Manger] and the Group Head are not seeing 
eye to eye on this one.””’ 

In 2007, HBUS opened a bearer share account in the name of 
Urigeler.”” When asked whether a waiver had been granted from the 
requirements that the bank hold the shares in custody and obtain an 
Beneficial Ownership Letter from the owner, HSBC legal counsel told 
the Subcommittee: “We don’t know.””® HSBC legal counsel told the 
Subcommittee that the accounts was opened in New York, transferred to 
Miami in 2009, and closed in 2011.'™’ 

This account demonstrates the difficulty of adhering to a strong 
bearer share policy when a wealthy and powerful family asks to open a 
bearer share account and obtain a waiver from requirements to either 
register the shares with their names or submit the shares to the custody 
of the bank. HBUS’ bearer share policy continues to permit the bank to 
open bearer share accounts. 

D. Analysis 

For decades, bank regulators and AML experts have cautioned 
against opening accounts for bearer share corporations due to the ease 
with which these corporations hide ownership and the frequency with 
which they have been used to commit money laundering, financial 
crime, tax evasion, and other wrongdoing. From at least 2000 to 2011, 
HBUS maintained a sizeable number of bearer share accounts, despite 


6/70/2007 email exchange among HBUS Alan Wiiliamson and HBUS Manuel Diaz, Teresa 
Garcia, and othei^, “Waiver Request,” OCC-PSI-002I4534, at 1. 

6/21/2007 email exchange among HBUS Alan Williamson and HBUS Marlon Young, 
Manuel Diaz, Teresa Garcia, and others, “Waiver Request,” OCC-PSI-00214618, at 1. 

6/26/2007 email from HBUS Alan Williamson to HBUS Marion Young and others, 
“[redacted] Family,” OCC-PSI-00214891, at 1. See also 7/5/2007 email exchange among HBUS 
Teresa Garcia and HBUS Alan Williamson, Susan Hoggarth, and others, “[redacted] Family,” 
OCC-PSI-002 15211; 6/26/2007 email exchange among HBUS Alan Williamson and HBUS 
Marlon Young, Manuel Diaz, Teresa Garcia, and others, “[redacted] Family,” OCC-PSI- 
00214891. 

7/5/2007 email exchange among HBUS Teresa Garcia and HBUS Alan Williamson, Susan 
Hoggarth, and others, “[redacted] Family,” OCC-PS{-002152i I, at 2. 

‘™ Id.atl. 

Subcommittee briefing by HSBC legal counsel (7/9/2012). 

’’“id. 

1703 T . 
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repeated regulatory questions and expressions of concern, HBUS 
bankers, and at times their compliance officers, pushed to open and 
maintain bearer share accounts. Two bearer share accounts illustrate the 
risks inherent in such accounts and the pressures to circumvent AML 
controls. While HBUS finally registered or closed most of the accounts 
by 2011, its policy continues to allow bearer share accounts to be opened 
under some circumstances. 
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VIII. OCC: EXERCISING INEFFECTIVE AML OVERSIGHT 

The mission of the Office of the Comptroller of the Currency 
(OCC) is to charter, regulate, and supervise all U.S. banks that hold a 
national charter.'™'* To carry out that mission, in the words of the OCC, 
it conducts “regular examinations to ensure that institutions under our 
supervision operate safely and soundly and in compliance with laws and 
regulations,” including AML laws.'^"^ However, the HSBC case 
history, like the Riggs Bank case history examined by this 
Subcommittee eight years ago,”®* provides evidence that the current 
OCC examination system has tolerated severe AML deficiencies for 
years and given banks great leeway to address targeted AML problems 
without ensuring the effectiveness of their AML program as a whole. 

As a result, the current OCC examination process has allowed AML 
issues to accumulate into a massive problem before an OCC 
enforcement action is taken. 

At HSBC, during the five-year period fi'om 2005 to 2010, OCC 
AML examiners conducted nearly four dozen AML examinations, 
identified at least 83 AML Matters Requiring Attention, and 
recommended two cease and desist orders to strengthen HBUS’ AML 
program. Despite the many AML problems identified by its examiners, 
OCC supervisors took no formal or informal enforcement action during 
nearly that entire period, allowing the bank’s AML problems to fester. 

In 2009, after learning that two law enforcement agencies were 
investigating possible money laundering through HBUS accounts, the 
OCC legal and enforcement divisions directed OCC AML examiners to 
hastily intensify and expand an ongoing AML examination to consider 
HBUS’ AML program as a whole. In September 2010, the expanded 
OCC examination culminated in a blistering Supervisory Letter 
identifying numerous, serious AML problems at the bank. Many of 
these AML problems had been identified in prior examinations, but were 
tied to specific HBUS business units rather than applied bankwide, and 
were not resolved by bank commitments to remedy the identified 
problems. 

The September 13, 20 1 0 Supervisory Letter criticizing HBUS’ 

AML deficiencies ran 3 1 pages long.'™’ It cited the bank for five 
violations of Federal AML law. Its list of AML problems included a 
backlog of over 17,000 unreviewed alerts regarding possible suspicious 


See “FAQs - HSBC Money Laundering Enforcement Action,” attached to 10/6/2010 email 
from OCC James Vivenzio to OCC colleagues, “HSBC FAQs ” OCC-PSI-00898845, at 5. 

Id. 

See “Money Laundering and Foreign Corruptioii: Enforcement and Effectiveness of the 
Patriot Act,” U.S. Senate Permanent Subcommittee on Investigations, S.Hrg. 108-633 (July 15, 
2004). 

1707 9/j3/20i0 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
Laundering (‘BS A/AML’) Examination - Program Violation (12 U.S.C. § I818(s); 12 C.F.R. § 
21.21),” OCC-PSI-00864335, at 342. [Sealed Exhibit] 
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activity, and a failure to timely file hundreds of Suspicious Activity 
Reports (SARs) based upon those alerts. The Supervisory Letter also 
criticized HBUS for failing to conduct any due diligence or to assess the 
AML risks posed by HSBC affiliates that opened U.S. dollar 
correspondent accounts at HBUS, even though many of those affiliates 
operated in high risk jurisdictions, had high risk clients, or offered high 
risk products. Another problem was a three-year failure by HBUS, from 
mid-2006 to mid-2009, to conduct any AML monitoring of billions of 
dollars in bulk cash transactions, including $15 billion from 2007 to 
2008 alone, with those same HSBC affiliates, despite the risks 
associated with large cash transactions. 

In addition, the Supervisory Letter criticized HBUS’ failure to 
conduct any AML monitoring of $60 trillion annually in wire transfer 
activity by customers domiciled in countries rated by HBUS as lower 
risk, unless a customer was individually rated as high risk, while also 
criticizing the bank’s country risk assessment process. The OCC 
attributed the bank’s monitoring failure in part to HBUS’ goal of 
minimizing AML staffing requirements. To place the magnitude of the 
AML vulnerability created by HBUS in context, the OCC noted that, 
from 2005 to 2009, HBUS’ wire activity had grown from 20.4 million to 
30.2 million wire transactions per year, with annual dollar volumes 
climbing from $62.4 trillion to $94.5 trillion, an increase of 50%. The 
OCC also noted that HBUS had become the third largest user of the 
CHIPS wire transfer system which provides 95% of U.S. dollar cross- 
border and nearly half of all domestic wire transactions totaling $1.5 
trillion daily.'™ 

The letter didn’t stop there. It also offered a slew of criticisms of 
the techniques used by HBUS to identify suspicious activity, describing 
them as “ineffective,” “inadequate,” and overly reliant on a “highly 
discretionary manual monitoring approach,” all of which decreased the 
number of AML alerts. Additional problems included inappropriate 
procedures to close alerts; an “inadequate focus on country risk instead 
of customer risk”; the failure to assign high risk ratings to high risk 
clients, including Politically Exposed Persons; inadequate and 
unqualified AML staffing; inadequate AML resources; and high 
turnover in AML leadership. Despite its own failures to take proactive 
steps to oversee the bank, the OCC letter noted that the bank had not 
been proactive enough in identifying and remediating its own AML 
problems: 

“Through year-end 2009, the OCC has issued 83 BSA/AML 
Matters Requiring Attention (‘MRAs’). The bank has a history of 
not identifying BSA/AML problems proactively. Instead, the bank 
has taken a reactive posture, choosing to focus its attention on 
correcting specific deficiencies identified by regulators without 

'™* Id. at 342-343. 
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taking comprehensive action to identify and correct deficiencies in 

the bank’s overall BSA/AML program.”*™’ 

A month later, on October 4, 2010, the OCC issued a Cease and Desist 
Order requiring HBUS to revamp its AML program.*^’** In response, 
HBUS committed to making major changes. 

At the time the OCC issued the October Cease and Desist Order, it 
had been conducting regular AML oversight of HBUS for six years, 
raising the issue of how such deep-seated AML deficiencies could have 
gone on at the bank without the regulator’s taking action. Part of the 
answer is that HBUS, like other international banks, presented the OCC 
with a number of AML challenges. It functioned as the U.S. nexus for 
one of the largest banks in the world. The HSBC network was not based 
in the United States, and its central focus was not on U.S. customers or 
U.S. businesses, but on other areas of the globe. HSBC affiliates 
operated in a number of jurisdictions which faced huge AML risks from 
terrorist financing, drug trafficking, tax evasion, and other law 
enforcement problems. The HSBC Group was also one of the largest 
participants in international wire transfer systems and a leader among 
global banks in moving large amounts of physical currency around the 
world, with all the attendant AML risks inherent in large cash 
transactions. HSBC also handled numerous high risk clients and high 
risk products. In addition, as OCC examinations disclosed over the 
years, it was a financial institution with inadequate AML resources; 
inadequate AML systems and controls; and inadequate AML leadership. 

HBUS itself was a large, complex, and growing financial 
institution with numerous business lines, products, and services, as well 
as millions of customers. It also had correspondent accounts for more 
than 80 HSBC affiliates as well as financial institutions around the 
world. From the time the OCC became HBUS’ primary regulator in 
2004, it oversaw HBUS’ AML program and conducted regular 
examinations throughout the bank. Year after year, those AML 
examinations exposed AML deficiencies. Each time problems were 
identified, HBUS promised to correct them and sometimes did. But 
those corrective actions were narrowly targeted and, instead of 
improving, the bank’s overall AML program deteriorated, resulting in 
the dramatic failures described in the September 2010 Supervisory 
Letter. 


1709 id^ 

See In re HSBC Bank USA. N.A. . Case No. AA-EC-10-98, Department of the Treasury 
Comptrolier of the Currency, Consent Order (10/4/2012), OCC-PSI-00904698. On the same 
day, the Federal Reserve issued a Cease and Desist Order against HBUS’ holding company, 
HSBC North America Holdings, Inc. (HNAH) to require it to strengthen its AML program. See 
In Re HSBC North America Holdings, Inc, , Case No. lO-202-B-HC, before the Board of 
Governors of the Federal Reserve System, Cease and Desist Order Issued Upon Consent 
Pursuant to the Federal Deposit Insurance Act as Amended (10/4/2012). 
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The focus of this section is to chronicle the OCC’s AML oversight 
efforts at HBUS and draw from that case history potential lessons 
regarding OCC examinations of AML controls at a large global bank; 
how AML problems can accumulate over years despite the OCC’s 
presence; and what can be done to strengthen the OCC’s AML 
oversight. Problems include the OCC’s decision to treat AML 
deficiencies as a consumer compliance problem rather than a 
management problem with safety and soundness implications; its 
practice of foregoing the citation of legal violations for the failure to 
comply with mandated components of a AML program; its use of 
narrowly focused AML examinations without also examining a bank’s 
overall AML program; its failure to make timely use of informal and 
formal enforcement actions to compel AML improvements; and its use 
of Supervisory Letters that sometimes muted examination criticisms or 
weakened recommendations for reforms. Actions to remedy these 
problems would strengthen the OCC’s AML oversight and help protect 
the U.S. banking system from being misused for terrorist financing, 
money laundering or other misconduct. 

A. Background 

(1) Key Anti-Money Laundering Laws 

Federal law defines money laundering as “the movement of illicit 
cash or cash equivalent proceeds into, out of, or through the United 
States [or] ... United States financial institutions.”'^” Federal anti- 
money laundering laws also apply to terrorist financing, including any 
legally obtained funds if intended for use in planning, committing, or 
concealing a terrorist act.'”^ These laws arose as a result of law 
enforcement investigations demonstrating that terrorists, drug 
traffickers, tax evaders, and other criminals were using financial 
transactions to execute their crimes, including by transferring funds 
across international lines, recharacterizing illicit proceeds as legitimate 
funds, hiding assets, and using financial and corporate secrecy laws and 
practices to block inquiries into their activities. U.S. AML laws are 
designed to prevent these wrongdoers from misusing the U.S. financiai 
system to commit their crimes. 

Three key laws lay out the basic AML obligations of U.S. financiai 
institutions, the Money Laundering Control Act of 1986, the Bank 
Secrecy Act of 1 970, and the USA Patriot Act of 2002, which amended 
both prior laws.”'^ 


'’"31 U.S.C. § 5340(2). 

See, e.g., 18 U.S.C. § 981(a)(i)(G) (civil forfeiture laws applicable to laimdered proceeds 
also apply to terrorist assets). 

For a more detailed discussion of U.S. AML laws, see “Anti-Money Laundering: Issues 
Concerning Depository Institution Regulator Oversight,” testimony of the General Accounting 
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The Money Laundering Control Act, enacted partly in response to 
hearings held by this Subcommittee in 1985, was the first law in the 
world to make money laundering a crime. It prohibits any person from 
knowingly engaging in a financial transaction which involves the 
proceeds of a “specified unlawful activity.”'^'"' The law provides a long 
list of specified unlawful activities, including, for example, terrorism, 
drug trafficking, fraud, and foreign corruption. The Bank Secrecy Act 
(BSA), as amended by the Patriot Act, imposes AML obligations on a 
designated list of financial institutions operating in the United States to 
ensure they do not facilitate money laundering or become conduits for 
terrorist financing. 

AML Requirements. The Bank Secrecy Act mandates that 
covered financial institutions establish an effective AML program that 
meets four minimum requirements: 

1) It has a system of internal controls to ensure ongoing 
compliance. 

2) It designates an individual responsible for managing AML 
compliance. 

3) It provides AML training for appropriate personnel. 

4) It requires independent testing of AML compliance.’^'^ 

These four components are sometimes referred to as the “pillars” 
of an effective AML program. The first requirement for a system of 
AML “internal controls” involves development of risk-based policies 
and procedures to detect and prevent money laundering.'^'^ At a large 
bank, these safeguards would include Know Your Customer (KYC) 
policies and procedures, including developing a customer identification 
program, conducting due diligence reviews, and assessing customer risk; 
a monitoring system to analyze account and wire transfer activity to 
detect suspicious activity; and a system for reporting suspicious activity 
to law enforcement. To ensure AML controls are implemented 
effectively, banks are also required to provide appropriate resources, 
infrastructure, and staff. 

The second requirement is to designate a qualified individual for 
coordinating and monitoring the bank’s day-to-day AML 
compliance.'^'^ The AML compliance officer must be knowledgeable 
about the law and have the time, expertise, authority, and resources 
needed to ensure bank compliance with AML requirements. The AML 
compliance officer should also have the authority to make regular 
reports to the bank’s board of directors or a board designated committee. 


Office, Report No. GAO'04-833T, (6/3/2004), before file U.S. Senate Committee on Banking, 
Housing, and Urban Affairs, at 4-6. http://www.gao.gov/new.items/d04833t,pdf 
18U.S.C. §§ 1956-57. 

See 31 U.S.C. § 5318(h)(1) and 12 C.F.R. Section 21.21(b)(1). All Federal bank regulators 
have adopted the same requirements within fiieir own regulations. 

'’“31 U.S.C. § 5318(h)(1)(A) and 12 C.F.R. Section 21.21(c)(1). 

31 U.S.C. § 53l8(h)(lXB) and 12 C.F.R. Section 21.21(c)(3). 
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The third requirement is for the bank to provide adequate training 
to all personnel with AML responsibilities.'^' AML training should be 
ongoing to ensure bank personnel are kept up-to-date with the law. The 
fourth requirement is for the bank to conduct independent testing of its 
AML program and controls to ensure compliance with the law and to 
identify and correct any AML deficiencies.'^'^ This function is typically 
performed by a bank’s internal audit group or by an outside auditor with 
AML expertise. 

Other AML Requirements. In addition to requiring covered 
financial institutions to establish effective AML programs, Federal AML 
laws include a number of other statutory requirements, including 
requiring banks that keep records outside of the United States to produce 
them within a specified period of time;'™ to obtain identifying 
information for persons seeking to open or maintain accounts,'’^' and 
requiring appropriate due diligence when opening and administering 
accounts for foreign financial institutions or senior foreign political 
figures. The Bank Secrecy Act also authorizes and the U.S. 
Department of Treasury has issued regulations requiring covered 
financial institutions and other businesses to file reports on large 
currency transactions and suspicious activities to guard against money 
laundering. 

(2) AML Oversight In General 

The Secretary of the Treasury is the primaiy Federal regulator 
charged with enforcing key Federal AML laws.'’^'' To help carry out 
those responsibilities, in 2003, the Secretary established the Executive 
Office for Terrorist Financing and Financial Crimes, headed by a Deputy 
Assistant Secretary. This office oversees the operation of the Financial 
Crimes Enforcement Network (FinCEN), a Treasury bureau which, 
among other duties, develops AML regulations and guidance, analyzes 
currency transaction reports and suspicious activity reports filed by 
financial institutions, and interacts with local, state. Federal, and 
international law enforcement as well as other financial intelligence 
units around the world. Treasury also oversees the Office of Foreign 
Assets Control (OF AC) which is primarily responsible for enforcing 
U.S. sanctions laws to detect and block financial transactions and assets 


31 U.S.C. § 53 18(h)(1)(C) and 12 C.F.R. Section 21.21(c)(4). 

'”’31 U.S.C. § 5318(h)(1)(C) and 12 C.F.R. Section 21.21(c)(2). 

'™31 U.S.C. § 5318(k)(2). 

'”‘31 U.S.C. §5318(1). 

31 U.S.C. §5318(i). 

See, e.g., 31 U.S.C. §§ 5313 and 5318(g); 31 C.F.R. §§ 103.11 and 103.21 et seq. 

See, e.g. 3 1 U.S.C. §§ 53 1 1 et seq. (Treasury Secretary charged with canying out key anti- 
money laundering laws) and § 5341 (Treasury Secretary given lead role in development of 
national anti-money laundering strategy). 
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belonging to identified terrorists, persons associated with weapons of 
mass destruction, drug traffickers, and rogue jurisdictions. 

Although FinCEN is the administrator of Federal AML regulations 
in the United States, it does not examine banks. That task is assigned to 
Federal bank regulators which are charged with monitoring bank 
compliance with AML laws through their examination procedures. Any 
AML violations they discover are reported to FinCEN which can, among 
other actions, impose civil monetary penalties on financial institutions 
for the violations. 

Significant responsibility for AML oversight, thus, rests with 
Federal bank regulators. The decisions they make with respect to AML 
policies and procedures, AML examinations, and safety and soundness 
ratings consequences for AML deficiencies will in large measure 
determine the importance that both regulators and financial institutions 
place on achieving effective AML controls. 

Oversight of Financial Institutions. At the end of 20 1 0, the 
United States had over 7,600 federally insured commercial banks and 
savings institutions.'^^® In addition, the United States had over 7,300 
federally insured credit unions.”^’ On the federal level, these financial 
institutions are overseen by four agencies: the Federal Reserve which 
supervises state-chartered banks that are part of the Federal Reserve 
System and certain financial holding companies; the Federal Deposit 
Insurance Corporation (FDIC) which supervises state-chartered banks 
that were not part of the Federal Reserve System; the Office of the 
Comptroller of the Currency (OCC) which supervises banks and savings 
associations with national charters, and certain U.S. affiliates of foreign- 
owned banks;'^^’ and the National Credit Union Administration 
(NCUA) which supervises Federal and state-chartered credit unions. In 
addition, state banking authorities supervise and examine state-chartered 
institutions. 


See FinCEN Enforcement Actions, http://www.fincen.gov/news_room/ea/ (“Under the Bank 
Secrecy Act (BSA), 3 1 U.S.C. 5311 et seq., and its implementing regulations at 3 1 C.F.R. 
Chapter X (formerly 3 1 C.F.R. Part 103), FinCEN may bring an enforcement action for 
violations of the reporting, recordkeeping, or other requirements of the BSA. FinCEN’s Office 
of Enforcement evaluates enforcement matters that may result in a variety of remedies, including 
the assessment of civil money penalties.”)- 

See the Federal Deposit Insurance Corporation’s (FDIC) Statistics at a Glance, (Fourth 
Quarter 2010). This includes 6,529 commercial bonks and 1,128 savings institutions. 
http://www.fdic.gov/bank, ■'statistica1/slats/2010dec/industry,html 

See the National Credit Union Administration’s (NCUA) 2010 Annual Report, “Insurance 
Fund Ten-Year Trends” chart, page 133, This figure includes 4,589 Federal and 2,750 state- 
chartered credit unions. http://www.ncua.gov/Legal/Documents/Reports/AR2010.pdf 

The FDIC also acts as a backup regulator for all financial institutions with Federal deposit 
insurance. 

Until recently, the Office of Thrift Supervision (OTS) supervised Federal savings 
associations and institutions, but it was abolished by the Dodd Frank Wall Street Reform and 
Consumer Protection Act. All OTS duties were officially transferred to the OCC on July 21, 
2011 . 


I 
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The primary responsibility of the Federal bank regulators is to 
ensure the “safety and soundness” of the financial institutions they 
supervise. One key mechanism they use to carry out that responsibility 
is to conduct safety and soundness examinations on a periodic basis and 
provide the results in an annual Report of Examination (ROE) to the 
Board of Directors of each financial institution. Safety and soundness 
examinations are conducted to assess the risk that an insured bank poses 
to the Federal Deposit Insurance Fund. All FDIC-insured institutions 
contribute to this insurance fund through assessments which are 
typically collected on a quarterly basis. The assessment amounts are 
based, in part, on a bank’s safety and soundness ratings. 

The largest U.S. financial institutions are supervised under a 
“continuous examination” program. Under this program, examiners are 
always on-site at the institution, as opposed to periodically arriving on- 
site, conducting an examination, and then departing for the next bank 
after finalizing the ROE. Examinations at smaller community banks are 
typically conducted on a 12- or 18-month exam cycle. Examiners are 
typically on-site at smaller community banks for only a few weeks. 

Interagency AML Examination Manual. In June 2005, the 
Federal Financial Institutions Examination Council (FFIEC) issued a 
joint AML Examination Manual.'™ This manual was developed by the 
Federal bank regulators, in collaboration with FinCEN, OF AC, and state 
banking agencies. It was developed to provide current and consistent 
AML examination procedures and guidance to examiners across the 
Federal banking agencies and the financial institutions they oversee. 

The manual has been updated three times to incoiporate regulatory 
changes and reflect feedback fi'om the banking industry and examination 
staff. The most recent version of the manual was released in April 
2010 .'’^' 

Safety and Soundness Examinations. Federal bank regulators 
conduct several different examinations at the financial institutions they 
supervise. The most important is the safety and soundness examination. 
Federal bank regulators conduct safety and soundness examinations to 
assess the risks that a bank poses to the Federal Deposit Insurance Fund 
(DIF) and to maintain public confidence in the integrity of the banking 

The FFIEC is a formal interagency body empowered to prescribe uniform principles, 
standards, and report forms for the Federal examination of financial institutions by the Federal 
Reserve, FDIC, OCC, NCUA, and the Consumer Financial Protection Bureau (CFPB), and to 
make recommendations to promote uniformity in the supervision of financial institutions. See 
FFIEC website, http://www.ffiec.gov/. In 2006, the State Liaison Committee (SLC) was added 
to the Council as a voting member. The SLC includes representatives from the Conference of 
State Bank Supervisors, the American Council of State Savings Supervisors, and the National 
Association of State Credit Union Supervisors. The CFPB became an FFIEC member in 2011. 
The Office of Thrift Supervision was also an FFIEC member, until the agency was abolished in 
2011 . 

See 4/29/2010 “BSA/AML Examination Manual,” Federal Financial Institutions 
Examination Council, 

http://www.ffiec.gOv/bsa_amMnfobase/documents/BSA_AML_Man_2010.pdf. 
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system. These examinations help prevent identified problems from 
deteriorating to the point of bank failures, the costs of which are often 
borne by the DIF. The DIF is funded by assessments that the FDIC 
charges banks. These assessments are derived from the level of insured 
deposits that a bank holds and the inherent risks that the bank poses to 
the DIF, which are calculated in part from a bank’s safety and soundness 
component ratings and composite rating. 

Safety and soundness examinations are designed to determine the 
financial condition of an institution, assess the effectiveness of its risk 
management practices, and aid in the development of effective and 
timely corrective actions. The examinations evaluate the bank’s 
adherence to a variety of laws and regulations, identify and assess key 
risks, and identify and assess any problems. 

CAMELS Ratings. Safety and soundness examinations are 
organized around a rating system called CAMELS, an acronym for the 
six components that are evaluated. The CAMELS rating system 
evaluates a financial institution’s; (C) capital adequacy, (A) asset 
quality, (M) management effectiveness, (E) earnings, (L) liquidity, and 
(S) sensitivity to market risk. Each component of the CAMELS rating is 
based upon a qualitative analysis of various factors comprising it. 
CAMELS ratings use a scale of 1 to 5, with “1” being the best rating and 
“5” the worst. 

The CAMELS component ratings also serves as the basis for a 
bank’s “Composite Uniform Financial Institution Rating,” often referred 
to as the “composite rating” or the overall “bank rating.” The 
composite rating also uses a scale of 1 to 5, and generally bears a close 
relationship to the component CAMELS ratings, although it is not 
simply an average of them. For composite ratings, 1 is the highest rating 
and signifies a safe and sound institution with no cause for supervisory 
concern, 3 signifies an institution with supervisory concerns in one or 
more areas, and 5 is the lowest rating, which signifies an unsafe and 
unsound bank with severe supervisory concerns. 

When the FDIC assesses bank insurance fees for a particular 
institution, it takes into consideration both the CAMELS component 
ratings and the composite rating. Lower ratings, signifying a higher risk 
institution and a greater threat to the Deposit Insurance Fund, can lead to 
a higher deposit insurance assessment,'^^ which in turn can affect net 
income. 

Specialty Examinations and Ratings. In addition to safety and 
soundness examinations. Federal bank regulators also conduct various 
specialty or secondary examinations targeting particular aspects of the 


See page 3 ~ sample deposit insurance assessment invoice, 
http://www.fdic.gov/deposit/insurance/assessments/EV2Sample.pdf. 
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institutions they supervise. These specialty examinations, which are 
separate and distinct from safety and soundness examinations, are 
important in their own right, and focus on such areas as information 
technology (IT), trust operations, compliance with the Community 
Reinvestment Act (CRA), and compliance with consumer protection 
laws.”^^ 

Each of these specialty examinations has its own unique rating 
system based upon an interagency agreement on what elements should 
he considered and how the rating should be calculated. For example, IT 
examinations produce ratings under a “Uniform Rating System for 
Information Technology”; trust examinations produce ratings under a 
“Composite Uniform Interagency Trust Rating” system; CRA 
examinations produce ratings under a “Community Reinvestment Act 
Rating” system; and consumer compliance examinations produce ratings 
under a “Uniform Interagency Consumer Compliance Rating” 
system.’”'' 

These ratings are typically presented in the annual Report of 
Examination provided to a financial institution by its primary regulator. 
They are typically included in a section which lists all of the ratings 
assigned to the bank during the year. The specialty examination ratings 
are calculated and presented separately from the CAMELS component 
ratings which give rise to the bank’s overall Composite Uniform 
Financial Institution Rating. In OCC Reports of Examination, for 
example, the ratings are usually presented in the following format: 


According to the OCC, typical issues addressed by these specialty examinations are as 
follows: 

• Information Technology (IT) Examinations - evaluate IT-related risks including 
operations, information security programs, and IT governance processes within supervised 
financial institutions and technology service providers. 

• Trust/ Asset Management Examinations ~ determine if an institution's policies or 
administration of trust accounts has resulted in a contingent liability or estimated loss that 
could damage the institution's capital. 

• Consumer Compliance Examinations - assess a financial institution's compliance with 
federal consumer protection laws and regulations. 

■ Community Reinvestment Act (CRA) Examinations - ensure compliance with the CRA, to 
include meeting the credit needs of the community that the financial institution serves, 
including residents of low- and moderate-income neighborhoods. 

See OCC website, “Examinations: Overview,” 

http://www.occ.gov/topics/examinations/examinations-overview/index-examinations- 

overview.html 

7/26/2006 OCC Report of Examination of HBUS for the examination cycle ending March 
3 1 , 2006, OCC-PSI-00422079, at 4. [Sealed Exhibit.] 
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Ratings 

Composite Uniform Financial Institution Rating 

Component Ratings: 

Capital 
Asset Quality 
Management 
Earnings 

Liquidity - Asset/Liability Management 
Sensitivity to Market Risk 

Uniform Rating System for Information Technology 

Composite Uniform Interagency Trust Rating 

Uniform Interagency Consumer Compliance Rating 

Community Reinvestment Act Rating.'’^* 

While specialty examination ratings do not automatically or 
routinely affect either the CAMELS component or composite ratings, if 
a specialty examination identifies significant problems that are extensive 
enough to potentially affect the financial condition of the bank, 
including through the imposition of large civil money penalties, 
reimbursable violations, or reputational risk, it may contribute to a 
downgrade of one or more of the CAMELS component ratings which, in 
turn, may affect the composite rating.'’^* Downgrades to safety and 
soundness ratings due to problems identified through specialty 
examinations are not common, however, and are reserved for extreme 
cases. 

AML Examinations. An examination focusing on AML 
compliance is considered a specialty examination. Each of the Federal 
banking agencies has examiners specially trained to conduct AML 
examinations. AML examinations do not, however, produce a separate 
specialty rating, since no interagency agreement has produced an AML 
rating system. Instead, at Federal banking agencies other than the OCC, 
AML examination findings are generally addressed as one of the safety 
and soundness considerations in the Report of Examination (ROE) and 
included in the development of the bank’s safety and soundness ratings. 
Typically, AML examination results impact the CAMELS management 
component rating, which may be downgraded if management fails to 
maintain an adequate AML program. 


See, e.g.. Federal Financial Institutions Examination Council, “Uniform Financial 
Institutions Ratings System,” 61 FR 245, at 67021 (12/19/1996), 
http;//www.gpo.gov/fdsys/pkg/FR-1996-12-19/pdf/96-32174.pdf 

(“Generally, the impact of specialty area examination findings are reflected in the composite and 
Management component ratings.”). 
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The CAMELS management component rating is designed to 
reflect the ability of bank management to adequately identify, measure, 
monitor, and control problems and manage risks.’’^’ Although AML 
compliance is just one factor in rating the management component, a 
bank’s failure to maintain an adequate AML program can expose a bank 
to significant reputational risk, remedial costs, and civil money 
penalties. When such factors are present. Federal bank regulators 
normally take them into account when assigning the management 
component rating. If the management component is downgraded, it may 
also in certain circumstanees lower the bank’s overall composite rating, 
with potentially severe impacts on the financial institution’s reputation, 
risk profile, and insurance assessment fees. 

In contrast to this approach, which is used by the Federal Reserve, 
FDIC, and NCUA, the OCC does not treat AML examinations as a 
safety and soundness matter and does not routinely take AML 
deficiencies into account when assigning a bank’s CAMELS 
management rating. Instead, the OCC treats AML examinations as a 
matter of consumer compliance and includes consideration of AML 
deficiencies when determining an institution’s consumer compliance 
rating. The OCC’s approach is explained more fully below. 

Violations of Law. In their supervisory programs, Federal bank 
regulators assign a high priority to the detection and prompt correction 
of violations of law. Such violations may involve statutory or regulatory 
requirements. Regulators typically list all significant violations of law 
(as opposed to isolated or technical violations) in the annual Report of 
Examination provided to a bank’s board of directors. The board of 
directors, in turn, is charged with initiating prompt and appropriate 
corrective action. 

Listing one or more statutory or regulatory violations in a Report 
of Examination is not uncommon. They may result from bank 
management’s unfamiliarity with the governing law, misinterpretation of 
the requirements, negligence, or willful noncompliance. The more 
egregious the nature of the violation, the more severe the repercussions 
may be. Willful noncompliance with statutory or regulatory 
requirements, for example, may result in civil money penalties against 
the bank or individual bank managers as well as removal actions against 
bank personnel, officers, or directors. Violations are also viewed as 
significant adverse reflections on bank management capabilities and 
may lead to a downgrade of the CAMELS management component 
rating. The underlying causes of the violation play a significant role in 
that assessment. 


See, e.g., Federal Financial Institutions Examination Council, “Unifonn Financial 
Institutions Ratings System,” 61 FR 245, at 67021 (12/19/1996), 
http;//\\ww.gpo.gov/fdsys/pkg/FR-1996"l2-19/pdf796-32174.pdf. 
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Enforcement Actions. If a bank regulator becomes concerned 
about the condition of a financial institution, it has a wide range of 
informal and formal enforcement actions that could be used to require 
corrective action. Informal actions are viewed as voluntary actions and 
include requesting that the financial institution issue a safety and 
soundness plan, board resolution, or commitment letter pledging to take 
specific correction actions by a certain date. Another informal action is 
a memorandum of understanding, which is a signed agreement by both 
the regulator and the board of directors addressing various actions that 
the financial institution will take to correct its problem areas. Informal 
actions are nonpublic and are not enforceable in court. On the other 
hand, formal enforcement actions are legal proceedings which can 
include issuing a consent order or a cease and desist order requiring the 
financial institution to stop an unsafe or unsound practice or to take 
affirmative action to correct identified problems; imposing a civil money 
penalty; suspending or removing personnel from the financial 
institution; suspending or banning personnel from the banking industry; 
revoking the bank charter; or referring misconduct for criminal 
prosecution. Formal actions are disclosed to the public and are 
enforceable in court. Failure to comply with an order can subject the 
bank to civil money penalties. 

With respect to AML enforcement, in July 2007, the Federal bank 
regulators issued joint interagency guidance entitled, “Interagency 
Statement on Enforcement of Bank Secrecy Act/Anti-Money 
Laundering Requirements.”'^^* This guidance sought to promote 
consistent implementation of Section 8(s) of the Federal Deposit 
Insurance Act and Section 206(q) of the Federal Credit Union Act, both 
of which require Federal bank regulators to conduct AML examinations 
and identify AML problems in Reports of Examination. Both sections 
also require Federal bank regulators to issue a cease and desist order in 
the event that a bank fails to provide or maintain an adequate AML 
program. The guidance affirms the Federal bank regulators authority 
and responsibility for enforcing AML requirements and use of cease and 
desist order to correct identified problems. 

(3) OCC AML Oversight in General 

Because it oversees the largest and most complex banks operating 
in the United States, some of which operate affiliates in high risk 
jurisdictions, maintain accounts for high risk clients, or offer high risk 
products vulnerable to money laundering and terrorist financing, the 
OCC plays a crucial role in ensuring bank compliance with U.S. AML 
laws. 


See 7/19/2007 “Interagency Statement on Enforcement of Bank Secrecy Act/ Anti-Money 
Laundering Requirements,” reprinted in 8/24/2007 FFIEC BSA/AML Examination Manual, at 
R-I to R-7, http;//www.ffiec.gov/%sa_amI_infobase/documents/BSA_AML_Man_2007.pdf. 
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OCC Organization. The OCC oversees about 2,000 nationally- 
chartered banks and savings associations and about 50 U.S. affiliates of 
foreign-owned banks.’’^^ In 2011, the OCC’s budget, which is paid for 
by assessments on the financial institutions it regulates, totaled about 
$875 million.'^'’'' As of 201 1, about 3,700 OCC employees were 
stationed in 66 offices nationwide, organized into four districts known as 
the Northeastern, Central, Southern, and Western districts, with agency 
headquarters in Washington, D.C.'^'” 

Several groups within the OCC contribute to AML oversight. 
Examiners with special expertise conduct the actual AML examinations, 
evaluate bank AML programs, and identify AML deficiencies. They 
provide their findings to the Examiner-In-Charge at a particular financial 
institution. At large banks, if AML deficiencies are identified, the 
Examiner-In-Charge works with the OCC Department of Large Bank 
Supervision to evaluate the AML examination findings and direct efforts 
to ensure bank compliance with the law. Bank supervision personnel 
also work with counsel in the Enforcement and Compliance Department 
and the Legal Department to determine whether AML enforcement 
actions are needed and, if so, what actions to t^e. 

During most of the years reviewed by the Subcommittee, the OCC 
was headed by John C. Dugan who served as the Comptroller of the 
Currency until his five-year term expired in 2010. In August 2010, he 
was succeeded by John Walsh who served as Acting Comptroller until 
April 2012, when Thomas Curry was confirmed by the Senate to serve 
as the new Comptroller of the Currency. The second in command 
during most of the years reviewed was First Senior Deputy Comptroller 
and Chief Counsel Julie Williams. The head of the Department of Large 
Bank Supervision, which oversees the largest nationally-chartered U.S. 
banks and U.S. branches of foreign banks was Michael L. Brosnan. One 
of his chief deputies was Grace Dailey who helped oversee HBUS, until 
the end of 2010, when she left that post for another, and was replaced by 
Sally Belshaw. Two other key OCC officials in AML enforcement were 
Daniel Stipano, Deputy Chief Counsel, and James Vivenzio, senior legal 
counsel for AML matters. In addition, the Director of the Enforcement 
and Compliance Department was Richard Steams. 

OCC Examinations Generally. Much of the OCC workforce is 
devoted to conducting or supporting safety and soundness examinations 


See 2011 OCC Annual Report, at I, chart entitled “National Banking System at-a-Glance,” 
http://u'ww.occ.gov/publications,/pub1ications-by-type/annual-reports/20 1 1 AnnualReport.pdf; 
OCC website, “About the OCC,” http://www.occ.gov/about/who-we-are/comptroller-of-the- 
cunency/bio-thomas-curry.html. 

2011 OCC Annual Report, at 1, chart entitled “OCC at-a-Glance,” 
http://www.occ.gov/publications/publications-by-type/annuai-reports/201 lAnnualReport.pdf. 

2011 OCC Annual Report, at 1, chart entitled “OCC at-a-Glance,” 
http://www.occ.gov/publications/publications-by-type/annual-reports/20] 1 AnnualReport.pdf 
.Id.; OCC website, “About The OCC,” http://www.occ.gov/about/who-we-are/djstrict-and-field- 
offices/index-organization.htmi. 
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of the banks regulated by the OCC. In general, for a large bank, the 
relevant OCC district office assigns an Examiner-in-Charge (EIC) and a 
team of examiners to work on-site at the bank, on a fulltime basis under 
a continuous examination program. 

Under the OCC’s continuous examination program, the EIC is 
assigned to a particular institution for five years. At the five-year mark, 
the EIC is then assigned to another bank. The EIC is assisted by a team 
of examiners that are also assigned to the bank on a full-time basis, but 
do not have similar five-year term limitations. Members of the 
examination team may rotate to other banks at various intervals as 
needed. Regardless, examiners work at the bank year-round and should 
have a firm and immediate grasp on any issues and problems affecting 
the bank. 

Supervisory Strategy. The EIC is responsible for developing an 
annual supervisory strategy. The supervisory strategy is a prospective 
work plan for examining the bank, based on perceived risks. The 
strategy addresses supervisory areas of interest, including what targeted 
examinations will be conducted throughout the coming year. Targeted 
examinations address what are called “specialty areas,” such as 
Information Technology, Consumer Compliance, Community 
Reinvestment Act, and Trust areas. The EIC develops the supervisory 
strategy, including strategies with respect to the specialty areas with 
input from examiners, called “team leads,” who have lead responsibility 
for conducting the examinations in those areas. At the OCC, AML 
compliance is not considered a separate specialty area, but is included 
within Consumer Compliance specialty examinations. The EIC 
ultimately presents the annual supervisory plan for approval to the 
deputy comptroller for Large Bank Supervision at OCC headquarters in 
Washington. 

Targeted Examinations. Based on the supervisory strategy, a 
series of specialized or “targeted examinations” is conducted throughout 
the year. OCC “Request Letters” are sent to a bank approximately 30 
days before the start of each targeted examination. Request Letters give 
the bank advance notice of the examination and include a list of 
requested items that the bank should assemble for the examiners to 
review at the start of the examination. 

The examiners then conduct an examination of a specific area of 
the bank and write a “Conclusion Memorandum” summarizing their 
findings for the EIC. The examiners may also contribute to any related 
Supervisory Letter that the EIC sends to bank management and any 
relevant portion of the annual Report of Examination provided to the 
bank’s board of directors. 
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Supervisory Letters are used by the OCC officially to inform a 
bank of the findings of a specialty examination and issues that warrant 
management’s attention. For large banks under continuous examination, 
the OCC typically uses Supervisory Letters to provide detailed 
information to bank management about each specialty examination 
completed throughout the year. In addition to describing the 
examination findings, the Supervisory Letter can cite an apparent 
violation of law or a “Matter Requiring Attention” (MRA), meaning it 
requires the attention of the bank’s senior management. Both violations 
and MRAs require prompt corrective action by the bank.”'*^ A 
Supervisory Letter may also include one or more “recommendations” to 
enhance bank performance or compliance in a particular area. Under 
OCC regulation and practice, “recommendations” do not require 
corrective action by bank management.'^''^ OCC personnel told the 
Subcommittee that the Supervisory Letters written by EICs should 
accurately reflect the findings and criticisms in the conclusion 
memoranda written by the examiners. 

Before issuing a Supervisory Letter, the EIC is required to forward 
a draft of the letter to the OCC’s Senior Deputy Comptroller in 
Washington for review. If the Supervisory Letter cites an AML 
violation or MRA requiring corrective action, it is referred to the Large 
Bank Review Committee (LBRC), which is comprised of three senior 
staff with AML expertise. The LBRC members are the senior legal 
counsel with AML expertise from the Legal Department, the Director 
for Bank Secrecy Act and Money Laundering Compliance, and the 
Director for Enforcement and Compliance. The LBRC was established 
in response to problems associated with the Riggs Bank AML 
examinations nearly ten years ago and is intended to ensure that OCC 
AML experts review field examiners’ work and promote consistency in 
AML enforcement across large national banks. Until recently, it was 
optional for the LBRC to have the examiner’s Conclusion Memorandum 
upon which the draft Supervisory Letter is based, but the LBRC has 
recently begun to require both before it will undertake a review of the 
draft letter. 

Report of Examination (ROE). On an annual basis, for each 
large bank, the OCC issues a Report of Examination (ROE), 
summarizing the condition of the bank. The ROE normally includes all 
of the bank’s ratings arising from examinations of the bank’s safety and 
soundness and specialty areas, as well as all cited violations of law and 


Subcommittee interviews of Joseph Boss (1/30/2012) and James Vivenzio (3/15/2012). Mr. 
Vivenzio told the Subcommittee, “An exam cited with an MRA is a failure” on the part of the 
bank, 
id. 

Subcommittee interview of Joseph Boss (1/30/2012) and Elsa de la Garza (1/9/2012). 
Subcommittee interview of James Vivenzio (3/15/2012). 

1746 
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significant MRAs. Depending on the circumstances, the issues noted in 
Supervisory Letters provided to bank management throughout the year 
may or may not be referenced in the ROE. The ETC sends the ROE with 
a cover letter to the bank’s board of directors so that it has a written 
record of the regulator’s concerns. In addition, on an annual basis, the 
EIC attends a board meeting and presents the consolidated examination 
findings contained in the ROE to ensure the Board is fully informed 
about the bank’s ratings, financial condition, and any deficiencies. 

AML Examinations. Like other Federal bank regulators, the 
OCC treats AML examinations as a specialty or targeted examination, 
and employs examiners with specialized AML expertise to conduct 
them. Upon completing an AML examination, the examiner is required 
to submit a Conclusion Memorandum to the Examiner-ln-Charge of the 
bank describing the examination findings, any apparent violations of 
law, and possible recommendations, MRAs, or enforcement actions. 

The Examiner-In-Charge then sends a Supervisory Letter to the bank 
summarizing the AML examination findings and presenting any 
violations, MRAs, or recommendations. 

At the end of the year, when the OCC readies the annual Report of 
Examination (ROE) for the bank and summarizes examination findings 
made during the year, the OCC does not treat AML deficiencies as a 
safety and soundness matter. It does not discuss AML problems in the 
ROE’s analysis of safety and soundness issues, nor does the OCC 
routinely take AML deficiencies into account when assigning the bank a 
CAMELS component rating for management or its overall composite 
rating. 

Instead, unique in the Federal Government, the OCC subsumes 
AML issues within its consideration of consumer compliance issues.”'*’ 
The ROE discusses AML compliance in a section entitled, “Consumer 
Compliance” and combines that discussion with consideration of the 
bank’s compliance with consumer protection and civil rights laws. In 
addition, the OCC takes AML deficiencies into consideration when 
assigning a bank’s consumer compliance rating, even though the 
Uniform Interagency Consumer Compliance Rating System does not 
include AML considerations when specifying how to calculate that 
rating. 

Consumer compliance examinations normally cover a bank’s 
compliance with consumer protection laws, such as laws requiring 
accurate disclosures of fees and interest rates, understandable mortgage 


See 9/2007 “Comptroller’s Handbook - Bank Supervision Process,” Appendix D, at 89, 
http://www.occ.gov/pubIications/publications-by-type/comptroners- 
handbook/_pdf/1:)anksupervisionprocess.pdf^ (“However, the OCC does incorporate into the 
consumer compliance rating examination findir^ pertaining to compliance with the Bank 
Secrecy Act (BSA), anti-money laundering (AML), and Office of Foreign Asset Controi 
(OF AC).”). See also 2006-2010 OCC Reports of Examination for HBUS. [Sealed Exhibits.] 
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and credit card disclosures, and avoidance of unfair or deceptive 
practices. They also examine a bank’s compliance with civil rights laws, 
such as prohibitions against discrimination against persons on the basis 
of race, religion, national origin, or other prohibited categories.’^''* The 
examinations test, for example, the adequacy of a bank’s operating 
systems to track compliance with consumer protection laws, the 
documentation it uses for consumer products, and the content of files 
related to such products as mortgages, consumer loans, and credit cards. 
Those considerations are key to ensuring bank compliance with 
consumer protection and civil rights laws, but do not include and have 
no relevance to compliance with AML requirements to guard against 
money laundering and terrorist financing. 

Like CAMELS ratings, consumer compliance ratin|s use a scale of 
1 to 5, with “1” being the best rating and “5” the worst.'^ ^ The 
consumer compliance rating is calculated and presented separately in the 
OCC’s ROE, and typically has no impact on a bank’s component 
CAMELS ratings or its overall composite rating and, thus, no impact on 
an evaluation of the bank’s safety or soundness. A bank’s consumer 
compliance rating typically comes into play if a bank wants to open a 
new branch or expand into a new area of consumer lending; the OCC 
generally will not approve such an application, unless the bank has a 
consumer compliance rating of 1 or 2, showing that it is treating its 
customers fairly.”^' Those considerations are not relevant, however, to 
AML compliance issues. Additionally, there is no logical reason why 
poor AML compliance should lower a bank’s consumer compliance 
rating when the two have virtually nothing in common. 

An internal OCC review raised these same concerns. In 2005, 
following the Subcommittee’s report on the OCC’s inadequate AML 
oversight of Riggs Bank, the OCC’s Quality Management Division 
issued an internal report evaluating the OCC’s AML supervision 


The OCC has identified a long list of relevant laws, including the Truth in Lending Act, Fair 
Credit Billing Act, Consumer Leasing Act of 1 976, Fair Credit Reporting Act, Equal Credit 
Opportunity Act, Fair Debt Collection Practices Act, and Electronic Fund Transfers Act. See 
“Comptroller’s HandbookError! Main Document Only. - Consumer Compliance 
Examination,” Appendix A, “Uniform Interagency Consumer Compliance Rating System,” 
http;//www.occ.gov/publications/publications-by-type/comptrollers- 
handbook/_paginate^overview/dcfault.htm?startat=overOOO 13.htm. 

See “Comptroller’s Handbook - Consumer Compliance Examination,” Appendix A, 
“Uniform Interagency Consumer Compliance Rating System,” 
http://www.occ.gov/pubIications/publications-by-type/comptrollers- 
handbook/_paginated/overview/default.htm?startat=over0001 3.htm. 

OCC officials told the Subcommittee that, in some circumstances, the consumer compliance 
rating could be taken into account when evaluating a bank’s CAMELS management rating, 
although that was not typical. Subcommittee interview of James Vivenzio (3/15/2012) and 
Joseph Boss (1/30/2012). 

See, e.g., 12 C.F.R. Section 5.i3(a)(2); branch application for national banks, at 7, 
http://www.occ.gov/static/iicensing/form-branch-reio-app-v2.pdf; Branches and Relocations, 
Comptrollers Licensing Manual, at 4, http://vvww,occ.gov/publications/publications-by- 
type/licensing-manuals/branches.pdf. 
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program. That report found that the interagency consumer 

compliance rating system was not designed to and did not address AML 
issues. It noted that the rating was “geared to more traditional consumer 
protection regulations, such as Regulation Z and Regulation B, hut is 
silent relative to BSA/AML compliance issues.”’’^^ The report also 
noted: “Since the consumer compliance rating system was developed as 
a FFIEC initiative, OCC cannot modify the ratings outside of FFIEC.” 
The report recommended that the OCC work with the FFIEC to try to 
change the ratings system to incorporate AML issues, hut seven years 
later, the ratings system still excludes consideration of AML issues, 
perhaps because no agency other than the OCC attempts to combine 
consumer compliance and AML concerns into a single rating. 

AML Violations. In addition to subsuming AML concerns within 
its consumer compliance rating system, the OCC also has a unique 
approach to citing AML violations in its Supervisory Letters and 
Reports on Examination (ROE). 

Like other Federal bank regulators, the OCC often includes a list of 
apparent violations of law in its annual Reports of Examination. Those 
violations span a wide range of banking laws and regulations, including, 
for example, consumer compliance eoneerns.'^^'* In the AML area, 
however, the Subcommittee has learned that the OCC has adopted a 
practice of limiting the types of AML violations it will cite either in a 
ROE or Supervisory Letter. 

Currently, all Federal bank regulators, including the OCC, will cite 
an apparent violation of law in a Supervisory Letter or ROE if the 
regulator determines that a fmaneial institution’s entire AML program 
has failed. For the OCC, that citation would be an apparent violation of 
31 U.S.C. § 5318(h)(1) and the OCC implementing regulation, 12 C.F.R. 
Section 2 1 .2 1 (b)( 1 ). On the other hand, if the OCC were to determine 
that a bank failed to comply with one of the four mandated components 
of an effective AML program - described earlier as internal controls, an 
AML compliance officer, AML training, and independent testing - the 
Subcommittee has been told that, contrary to all other Federal bank 
regulators, the OCC generally will not cite a violation of one of the 
individualized program components, even though each component has 
its own statutory basis. For example, if a bank failed to provide 
adequate AML internal controls. Federal bank regulators other than the 


5/18/2005 “Bank Secrecy Act/ Anti-Money Laundering Supervision,” prepared by OCC 
Quality Management Division, HSBC OCC 2495056. 
http://www.aba.com/Solutions/Compliance/Documents/ 

Cd8a83ee7a934b4ab75e7 Ia4fae68 1 3aBSAAMLOCCQMD.pdf. 

Id. at 7. 

7/26/2006 OCC Report of Examination for HBUS, OCC-PSI-00422079, at 2-3 (citing 
violations of the Equal Opportunity Act and Consumer Protections for Depository Institution 
Sales of Insurance regarding disclosures). [Sealed Exhibit.} 
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OCC would cite the bank for violating 31 U.S.C. § 5318(h)(1)(A). In 
contrast, the OCC routinely forgoes the citation of violations of the 
individual AML program components, instead typically designating 
such a deficiency as a Matter Requiring Attention (MRA) by the 
bank.'”^ 


To examine the difference in the approach of the OCC versus other 
Federal banking agencies, the Subcommittee reviewed five years of 
reports compiled by the U.S. Treasury’s Financial Crimes Enforcement 
Network (FinCEN) which, among other matters, track the AML 
statutory violations cited by the agencies.'™ Over the five year period 
from 2007 to 201 1 , the FinCEN reports show that the OCC conducted 
about 6,600 examinations and cited pillar violations only 16 times. In 
comparison, the Federal Reserve conducted about 4,800 examinations 
and cited pillar violations 1 59 times. The FDIC conducted about 12,800 
examinations and cited pillar violations 714 times. The OCC approach 
is out of alignment with that of its peers. 

Treating the failure of an AML pillar component as an MRA rather 
than an AML violation sends a more muted message about the 
importance of the AML deficiency and the need to correct it in a prompt 
manner. A matter requiring “attention” simply does not have the same 
urgency as a statutory “violation.” In addition, citing a violation of law 
when one critical component of a bank’s AML program is inadequate 
sends a strong message to management that its AML program is 
deficient, does not meet minimum statutory requirements, and requires 
remediation to ensure compliance with all four statutory requirements. 

AML Enforcement Actions at Large Banks. When the OCC 
identifies AML deficiencies at a bank, it can use informal or formal 
enforcement actions to compel the bank to correct the deficiencies and 
strengthen its AML controls. 

Informal actions include nonpublic commitment letters, board 
resolutions, or memoranda of understanding in which the bank makes 
written commitments, with fixed deadlines, to take specific actions. To 
take an informal action against a large bank, an Examiner-in-Charge 
must obtain the approval of the Large Bank Supervision Department in 


One OCC senior legal counsel specializing in AML matters told the Subcommittee that the 
OCC “will not cite pillar violations” and instead lists them as MRAs which are not enforceable 
in court. He said that the OCC uses the same approach when reporting AML examination 
findings to FinCEN, describing the OCC’s reporting as “cleaner” and not “cluttered with 
component violations” like the other agencies. Subcommittee interview of .lames Vivenzio 
(3/15/2012). 

See “Federal Banking Agency Bank Secrecy Act Compliance Examination: Consolidated 
Quarterly Report,” (2001-201 1), prepared by FinCEN, using data supplied by the OCC, Federal 
Reserve, FDIC, NCUA and the Office of Thrift Supervision, PSI-FinCEN-04-0063-296 [Sealed 
Exhibit.]; 7/2012 chart, “Bank Secrecy Act Pillar Violations 2007-201 1,” prepared by the 
Permanent Subcommittee on Investigations. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00545 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



532 


VerDate Nov 24 2008 


358 

Washington. While these agreements are not enforceable in court, they 
can provide quick and effective tools to produce reforms. The OCC, 
however, disfavors the use of informal actions in AML cases, and has 
taken only eight informal enforcement actions against large banks for 
AML deficiencies since 2005.'^^^ 

To take a formal enforcement action against a large bank, such as a 
Cease and Desist Order, the Examiner-in-Charge must submit a 
recommendation to the OCC’s Washington Supervision Review 
Committee (WSRC).’’^* The WSRC is comprised of senior managers in 
the agency and acts as an advising body to the Senior Deputy 
Comptroller. It was established to promote consistency in the agency’s 
application of formal enforcement actions. To present a 
recommendation, the Large Bank Supervision Department and the Legal 
Department prepare pertinent examination information and a 
memorandum for the WSRC. Counsel from the Enforcement and 
Compliance Division also participates. The WSRC ultimately 
determines whether a program violation can be supported and cited, 
which would also require the OCC to issue a Cease and Desist Order. 

According to the OCC, from 2005 to 2011, the OCC issued 43 
Cease and Desist Orders against both large and smaller sized banks with 
AML deficiencies, compared to 2 by the Federal Reserve and 52 by the 
FDIC, and assessed SI 24 million AML-related civil money penalties, 
accounting for 62% of the total penalty assessments by Federal banking 
agencies.'”* At the same time, the statistics also indicate that the OCC 
is not resolving AML problems at an early stage but, as with HBUS, 
may be allowing AML problems to accumulate until they necessitate 
severe enforcement action. 

The interagency guidance on AML enforcement provides all 
Federal banking agencies with guidelines on the use of formal 
enforcement actions to ensure bank compliance with AML laws, but 
does not offer any guidance on the use of informal actions. Among 
other provisions, the guidance states that if a Supervisory Letter contains 
an identical AML violation or MRA that was not corrected since the 
prior examination, typically referred to as a “repeat” violation or MRA, 
the agency must issue a formal enforcement action to require corrective 
action.'’^ Under a 2004 Memorandum of Understanding between 
FinCEN and Federal bank regulators, FinCEN must be notified of. 


Subcommittee briefing by OCC legal counsel (7/13/2012). 

See, e.g., “Process for Taking Administrative Enforcement Actions Against Banks Based on 
BSA Violations.” OCC 2005-45, Attachment, Appendix A to OCC 2004-50, OCC-PSl- 
00176030. 

Subcommittee briefing by OCC legal counsel (7/14/2012). 

See 7/19/2007 “Interagency Statement on Enforcement of Bank Secrecy Act/ Anti-Money 
Laundering Requirements,” in the Federal Financial institutions Examination CounciFs Bank 
Secrecy Act/ Anti-Money Laundering Examination Manual, Appendix R, at R-4 (“Failure to 
correct a previously reported problem with the BSA Compliance Program”). 
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among other things, all AML-related formal and informal enforcement 
actions taken with respect to a particular bank.'^*' 

B. OCC Oversight of HBUS 

HBUS is located within the OCC’s Northeastern District which is 
currently headed by Deputy Comptroller Toney Bland. The OCC 
Examiner-in-Charge of HBUS was Anthony DiLorenzo from 2004 until 
2008, when his term expired, and he was replaced by Sally Belshaw. 

Ms. Belshaw served as the HBUS Examiner-in-Charge until December 
2010, when she was promoted to Deputy Comptroller for Large Bank 
Supervision.’’^^ The current OCC Examiner-In-Charge at HBUS is Kris 
Mclntire. 

(1) Chronology of OCC AML Oversight of HBUS 

The OCC has been the primary regulator of HBUS since July 
2004, when it inherited oversight of a bank already subject to a formal 
enforcement action to strengthen its AML program. HBUS has been 
criticized at times for poor AML controls for over the past decade, but 
until 2010, the OCC failed to take any enforcement action to compel the 
bank to implement an effective AML program. 

Inheriting an AML Problem. Over the past 30 years, HBUS, 
through its predecessor banks, has changed its bank charter three times, 
switching between OCC and Federal Reserve oversight in 1980, 1993, 
and 2004.'™ The first switch took place in 1980, when HSBC acquired 
51% control over Marine Midland Bank in New York. Marine Midland 
Bank was then a state-chartered bank, a member of the Federal Reserve 
System, and subject to oversight by both the New York State Banking 
Department and the Federal Reserve. In connection with the 1980 
acquisition, however, it converted its charter to a national bank subject 
to oversight by the OCC. By 1987, HSBC had assumed 100% control of 
the bank. In 1990, the OCC downgraded the bank’s CAMELS 
composite rating, which remained unchanged through 1993.'™ On 
December 31, 1993, Marine Midland switched back to a state-chartered 
bank in New York subject to Federal Reserve supervision. After its first 
examination, the Federal Reserve upgraded its rating.”*^ 


See Memorandum of Understanding between FinCEN and bank regulators, 
http://vAvw.ffiec.gOv/bsa_aml_infobase/documents/FmCEN_DOCs/Memo_Understand_Sept04. 
pdf. 

See 12/13/2010 “OCC Announces Changes to the Its Large Bank Supervision Leadership 
Team,” OCC press release NR 2010-140, http://www.occ.gov/news-issuances/news- 
releases/2010/nr-occ-201 0-140.html. 

See the Federal Reserve’s National Information Center, 
http://vAvw.ff{ec.gov/nicpubweb/nicweb/InstitutionHistory,aspx?parID_RSSD=413208&parDT_ 
END=99991231. 

See 1/19/1990 and 5/31/1993 OCC targeted examinations. [Sealed Exhibits.] 

See 3/31/1994 Federal Reserve Bank of New York examination conducted jointly with the 
New York State Banking Department. [Sealed Exhibit] 
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Six years later, in 1999, Marine Midland Bank acquired two more 
banks and renamed itself HSBC Bank USA, N.A. (HBUS). In 2003, 
HBUS was cited by both the Federal Reserve and New York State 
Banking Department for maintaining an inadequate AML program.”** 
Regulators cited fundamental, wide-ranging problems, including 
ineffective monitoring of wire transfers and monetary instruments, 
ineffective recordkeeping and reporting of currency transactions, 
inadequate customer due diligence and enhanced due diligence, and a 
failure to report suspicious activities. The Federal Reserve noted that 
AML deficiencies identified in prior examinations had not been 
corrected, that bank management was reactive rather than a proactive 
with respect to its AML program, and that the compliance function had a 
lack of influence as evidenced by ongoing, uncorrected problems.”*’ 

On April 30, 2003, both regulators entered into a formal agreement with 
the bank requiring it to “upgrade and improve” its AML internal 
controls.”** The agreement required; 

“o Development of a compliance program, 
o An effective system and methodology related to monitoring 
efforts, 

o A system for evaluating suspicious transactions, 
o A customer due diligence program, and 
o The development and implementation of appropriate risk 
assessments.””*’ 

On March 22, 2004, while this formal enforcement action was still 
unfolding, HBUS announced its intention to once more seek a national 
bank charter from the OCC. On July 1, 2004, after acquiring Republic 
Bank Delaware, HBUS changed its charter a third time and again 
became a national bank subject to oversight by the OCC. As a condition 
to approval of its new national charter, HBUS agreed to comply with the 
provisions of the 2003 agreement requiring AML improvements. 

HBUS, thus, began its tenure with the OCC operating under an 
agreement requiring it to address a host of AML deficiencies. 

Terminating the AML Agreement Despite 30 MRAs. The OCC 

produced its first Report of Examination (ROE) for HBUS less than a 
year later.”™ The ROE covered examinations conducted through March 
31, 2005. It noted as the first Matter Requiring Attention of the bank its 
obligation to implement the AML requirements in the 2003 agreement 
and concluded that the bank had made significant progress. The ROE 
stated that HBUS had already “developed a written Anti-Money 

See 12/31/2002 Federal Reserve Bank ofNew York examination conducted jointly with the 
New York State Banking Department. [Sealed Exhibit.] 

■*id. 

1768 Report of Examination of HBUS, for the examination cycle ending March 31, 2005, 

OCC-PSI-00107637, at 10-11 (describing the formal agreement). [Sealed Exhibit.] 

Id. at 10. 

1770 Id_ 
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Laundering (AML) program, including a system of internal controls” 
and established an “AML Oversight and Control Group . . . responsible 
for maintaining enterprise wide AML policies and procedures, 
identifying red flags and establishing transaction monitoring criteria.” It 
stated that the bank had “[ijmplemented controls [that] provide for 
effective monitoring of various transactions throughout all departments 
of the bank ... for both non-customers and customers ... designed to 
identify unusual and/or suspicious activities.” It stated that HBUS had 
“enhanced monitoring abilities through the Customer Activity 
Monitoring Program (CAMP) system.” The ROE also stated that HBUS 
had established a “written Customer Due Diligence program” which 
included procedures to “ensure the identification and timely, accurate, 
and complete reporting of all known or suspected violations of law 
against or involving the bank, to law enforcement and supervisory 
authorities.” It said that HBUS had also “created risk rating criteria to 
identify categories of customers whose transactions and banking 
activities pose heightened risk of money laundering and other illegal 
activities.” It noted that the bank operated an Investigative Control and 
Reporting Office and a Financial Intelligence Group to conduct 
enhanced due diligence. 

The ROE concluded; “OCC examiners reviewed compliance with 
the agreement, and found the bank to be in technical compliance with 
the requirements.” It said that termination of the formal agreement 
would be considered following targeted AML examinations of certain 
high risk areas in the bank.'^^' Given the breadth and depth of the AML 
problems depicted in the 2003 agreement signed less than a year earlier 
and the relatively short time that the bank had to correct its AML 
deficiencies, the ROE’s positive statements were surprising. 

Over the next year, until early 2006, OCC AML examiners 
completed seven AML examinations at HBUS. The examinations 
reviewed multiple HBUS departments with higher risk activities, 
including Embassy Banking, Global Banknotes, Foreign Correspondent 
Banking, wire transfers, and International Private Banking. Each of the 
examinations identified significant AML deficiencies. The problems 
included noncompliance with the bank’s AML policies (4 of 7 exams), 
weak monitoring procedures (5 of 7), weak customer due diligence 
procedures (5 of 7), inadequate written policies requiring revision (6 of 
7), and untrained staff (5 of 7). For example, the examination of the 
Global Banknotes department found that customer information was 
missing from a number of files and that a number of banknotes clients 
were not being monitored at all.'^’^ The examination of the bank’s wire 
transfer operations found that monitoring was being conducted on a 


™ Id. at II. 

' 6/20/2005 OCC Supervisory Letter to HBUS on Global Banknote Examination, OCC-PSI- 

00107505. [Sealed Exhibit] 
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manual rather than automated basis, and identified one trust account that 
“had a significant amount of wire transfer activity in a short period of 
time and involved wire transfers to entities and/or individuals &om high 
risk geographies,” had undergone no monitoring, and whose 
accountholder had not received an enhanced due diligence review.'^^^ 
The examination of the Embassy Banking department found over a 
dozen incidents of suspicious activity involving one embassy account 
over eight months, yet the bank had failed to close the account, despite 
an HBUS policy requiring closure in that circumstance.'^^'' The 
International Private Bank examination found 540 high risk accounts 
that needed annual reviews that had yet to be completed; account 
reviews whose conclusions were not consistently supported; and high 
risk bearer share accounts whose shares were not under bank control and 
posed a risk that the bank was unaware of the true account owners.' 

When viewed together, the examinations identified systemic AML 
problems, a situation consistent with the extensive AML enforcement 
action instituted by the Federal Reserve and New York Banking 
Department. Many of the problems cited in the OCC examinations, 
including weaknesses in customer due diligence and monitoring, were 
prominent features of the 2003 agreement. In response to the AML 
examination findings, the OCC Examiner-in-Charge sent Supervisory 
Letters which, together, identified 30 Matters Requiring Attention 
(MRAs) requiring corrective action by HBUS.'™ Despite issuing over 
30 MRAs in just over 12 months, on February 6, 2006, the OCC 


1773 1/23/2006 OCC Supervisory Letter to HBUS on Wire Transfer Examination, OCC-PSI- 
00107522. [Sealed Exhibit.] 

11/23/2005 OCC Conclusion memorandum “BSA/AML Examination - HSBC USA 
International Private Bank,” OCC-PSI-01258252; 1/30/2006 OCC Supervisory Letter to HBUS 
on Embassy Banking Examination, OCC-PSl-00 1 07529. [Sealed Exhibits.] 

1 /3 1 /2006 OCC Supervisory Letter, “International Private Banking BSA/AML 
Examination,” OCC-PSI-00107537-542. [Sealed Exhibit.] 

The 30 MRAs required corrective action to address weak AML monitoring procedures, weak 
AML due diligence, inadequate AML training, and inadequate AML policies. Monitoring 
problems were noted, for example, in all four Supervisory Letters issued in January 2006. See 
1/17/2006 OCC Supervisory Letter to HBUS on Foreign Correspondent Banking, OCC-PSI- 
00000295-301, at 299-300 (Monitoring is weak and is not detecting patterns of activity “below 
system parameters” and monitoring wire transfers is a “manual process and therefore subject to 
inefficiencies and potential errors”); 1/23/2006 OCC Supervisory Letter to HBUS on Wire 
Transfers, OCC-PSI-001 07522-528, at 526 (“{T]he effectiveness of automated monitoring 
through CAMP is diminished in the absence of effective investigations of alerts that the system 
generates.”); 1/30/2006 OCC Supervisory Letter to HBUS on Embassy Banking, OCC-PSI- 
00107529-536, at 534 (“Embassy Banking Compliance management must ensure that high-risk 
and Special Category of Client (SCC) accounts are monitored and reviewed on a consistent and 
frequent basis.”); 1/31/2006 OCC Supervisory Letter, “International Private Banking BSA/AML 
Examination,” OCC~PSI-00107537-542, at 540-541 (“Management must establish standards for 
CAMP alert reviews that require well-documented reasons for conclusions ... . [E]xisting policies 
and procedures governing PUPID do not provide for adequate identification, monitoring and 
controlling of the risk inherent in such activity.... [Tjhere are no procedures in place to ensure 
activity logs are kept current on a scheduled basis. To effectively manage, monitor and report the 
potential risks associated with PUPID activity, logs must be revised to distinguish funds transfers 
payable to the account holder initiating the transfer, from those payable to a third-party non- 
account holder.”). 
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determined that the condition of the AML agreement had been met and 
terminated the agreement. 

AML Deficiencies Continue. On July 26, 2006, the OCC 
provided HBUS with another annual Report of Examination covering 
the period up to March 31, 2006.'™ In the section entitled, “Matters 
Requiring Attention,” the ROE included AML matters as an MRA, hut 
provided this mixed message about the state of HBUS’ AML program: 

“During the year, we identified a number of areas lacking 
consistent, vigilant adherence to BSA/AML policies, and provided 
management with supervisory letters addressing specific areas in 
need of strengthening. Bank policies are acceptable. Management 
responded positively and initiated steps to correct weaknesses and 
improve conformance with bank policy. We will validate 
corrective action in the next examination cycle.”’’’’ 

Later in the report, in the section discussing the bank’s “Consumer 
Compliance Rating,” the ROE stated that HBUS had “a satisfactory 
BSA compliance program,” that its controls were generally effective, 
and “no violations of law were noted.” It also stated; “However, each 
examination resulted in MRAs, typically non-adherence to internal 
policies and procedures .... This recurring pattern is listed as a Matter 
Requiring Attention in this Report of Examination.””*’ The ROE also 
criticized an internal group dedicated to testing AML compliance, the 
Compliance Review Unit, which, according to the ROE, was 
understaffed, performed weak analysis, and needed to be revamped. 

HBUS’ typical response to these examinations was to develop 
AML policies and procedures in response to the specific AML problems 
identified by the OCC. Those policies and plans often were narrowly 
targeted, and later examinations found that bank personnel sometimes 
failed to implement or comply with them. 

A year later, on July 24, 2007, the OCC’s annual Report of 
Examination contained a more negative assessment.”*' This report 
covered examinations conducted through March 3 1 , 2007. The letter 
transmitting the ROE stated; 

“A number of business areas continue to lack vigilant adherence to 
BSA/AML policies. Supervisory letters issued during the year 
highlighted a number of thematic deficiencies in the execution of 

7/26/2006 OCC Report of Examination of HBUS, for the examination cycle ending March 
31, 2006, OCC-PSI-00422079, at 5. [Sealed Exhibit] 

1778 7/26/2006 OCC Report of Examination of HBUS, for the examination cyele ending Mareh 
31, 2006, OCC-PSl-00422079. [Sealed Exhibit] 

Id. at 2. 

'"Id. at 12. 

t78i 7/24/2007 OCC Report ofExaminationofHBUS, for the examination cycle ending March 
31, 2007, OCC-PSI-00304077, [Sealed Exhibit.] 
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BSA/AML policies and procedures at the business level. 
Management continues to respond positively to correct weaknesses 
noted, and to improve conformance with bank policy. However, it 
remains critical that sound policies adopted by the Board and 
management are executed consistently in the business lines.”*^*^ 

In the report itself, the section entitled, “Matters Requiring Attention,” 
included this MRA: 

“During the past yetir, examiners identified a number of common 
themes in that businesses lacked consistent, vigilant adherence to 
BSA/AML policies. Bank policies are acceptable; however, the 
execution of these policies in the various business lines requires 
strengthening. Management continues to respond positively and 
initiated steps to improve conformance with bank policy.”'**^ 

The MRA, which called for “strengthening” the “execution” of AML 
policies in “the various business lines,” provided a general instruction to 
pay more attention to AML compliance. 

A second MRA was more specific and issued a warning about the 
need to strengthen AML controls on HBUS pouch services, meaning 
bank services to clear monetary instruments from abroad, including bank 
checks, money orders, and travelers cheques. The MRA stated that 
pouch services “facilitate easy movement of funds, and are favored by 
persons who transfer illegal and terrorist funds.” It noted that pouch 
services were being provided by multiple HBUS business lines. The 
ROE described the pouch examination as having “resulted in serious 
concerns related to weak policies, procedures, systems and controls ... 
inferior to BSA/AML controls in other areas of the bank.” The ROE 
also stated that “remedial attention is warranted,” and warned that 
ongoing inadequate AML controls over pouch activities “could 
potentially subject the bank to undue reputation risk and/or lead to 
BSA/AML violations.””*^ 

By the end of 2007, the OCC completed 21 AML examinations, 
many of which identified serious AML problems.”*® Many of these 
examinations identified the same serious problems noted in earlier 
examinations, some of which cut across business lines. The 
examinations include AML issues in the London Banknotes office, 
Corporate and Institutional Banking, Retail Banking, Pouch Services, 
and Investment Banking. The examination that identified the most 
serious AML deficiencies, and which was included as an MRA in the 


Id. at 2. 

1784 y 

Id. See also the discussion of the bank’s Consumer Compliance Rating, at 1 2. 

Eight of the 2 1 examinations were limited to following up on corrective actions promised 
earlier, all of which were found to have been carried out. 
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annual ROE, related to pouch services which seemed to be operating 
without any AML controls. The pouch examination cited insufficient 
AML policies and procedures, a lack of monitoring for suspicious 
activities, inadequate AML controls and training, and inadequate 
independent testing of pouch services for AML compliance. 

Examples of potentially suspicious activity included sequentially 
numbered travelers cheques endorsed by the same exchange house and 
processed through several cash letters; a transaction that included a 
starter check for $105,000; and $130,000 in sequentially numbered 
travelers cheques presented in bearer form with the payee line left 
blank.’’** OCC examiners initially recommended that a formal 
enforcement action be taken to effect corrective action in the pouch area, 
but no formal or informal action was taken.”*’ 

The 21 examination reports and the Supervisory Letters that 
followed identified numerous AML deficiencies, including 
noncompliance with bank policy, poor monitoring, weak to nonexistent 
due diligence reviews, inadequate policies requiring revision, and 
untrained staff Altogether, from February 2006 to December 2007, the 
Supervisory Letters identified another 34 AML MRAs, but no violations 
were identified or enforcement actions taken. 

AML Deficiencies Displaced by Financial Crisis. On July 15, 
2008, the OCC issued its annual Report of Examination for HBUS, 
summarizing examination activity conducted through March 31, 
2008.”’° Despite referencing a troubling AML examination involving 
the bank’s Embassy Banking department, described below, for the first 
time since 2004, the ROE did not contain any MRA related to AML 
concerns. This development may have been due, in part, to the 


1787 2/23/2007 OCC “Conclusion memorandum for HSBC Middle Market BSAyAML 
Examination,” OCC-PS1-OI263216; 4/10/2007 OCC Conclusion memorandum “BSA/AML 
Examination - HSBC, USA, NA - Pouch Activities”, OCC-PSI-00899202 (reviewing pouch 
activities at the Internationa! Private Bank, Domestic Private bank, retail banking, and Payments 
and Cash Management business units). [Sealed Exhibits.] 

id. at 208. 

Subcommittee interview of Joseph Boss (1/30/2012), Elsade la Garza (1/9/2012), and 
Anthony DiLorenzo (3/22/2012). Upon receipt of the recommendation, the Examiner-in-Charge 
asked the AML examiners to prepare an analysis of whether the proposed enforcement action, a 
Cease and Desist Order, met OCC enforcement standards. The AML examiners concluded that, 
despite the serious AML deficiencies, the problems in the pouch area did not rise to the level of a 
violation of law and would be applied to a bank with a high composite rating for safety and 
soundness, and so did not meet OCC standards for issuing a Cease and Desist Order. See 
6/14/2007 OCC memorandum, OCC-PSI-01 298625; 7/3/2007 OCC memorandum OCC-PSI- 
0087773 1 . [Sealed Exhibits.] One examiner told the Subcommittee that although the pouch 
activity did not meet OCC enforcement standards, he felt a Cease and Desist Order was 
nevertheless warranted at the time. Subcommittee interview of Joseph Boss (1/30/2012). The 
deputy head of Large Bank Supervision told the Subcommittee that she did not recall being 
informed about the enforcement recommendation or seeing the Conclusion Memorandum that 
laid out the problems in the pouch area at HBUS. Subcommittee interview of Grace Dailey 
(6/15/2012). 

1790 07/15/2008 OCC Report of Examination of HBUS, for the examination cycle ending March 
3 1 , 2008, HSBC OCC 3601119. [Sealed Exhibit.] 
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deepening financial crisis then sweeping the U.S. financial system, 
raising questions about virtually every major financial institution. 

HBUS’ AML issues may have been displaced by OCC efforts to analyze 
the bank’s safety and soundness, including each of its CAMELS 
components. Nevertheless, the ROE did reference ongoing AML 
concerns at the bank. 

The OCC letter transmitting the ROE included this paragraph 
about AML issues: 

“Although BSA/AML internal systems and controls are generally 
effective, the examination of the Government and Institutional 
Banking (GIB) operations disclosed a number of significant . . . 
compliance concerns. Management developed a plan to address 
the issues, and we are presently validating that the actions taken 
are addressing our concerns.”' ’’ 

Although the ROE contained no MRA related to AML concerns. In 
the section discussing HBUS’ composite rating, the ROE again 
referenced the examination that uncovered serious AML deficiencies in 
the GIB department: 

“Our examination of BSA/AML practices in the Government and 
Institutional Banking (GIB) department during the first quarter of 
2008 resulted in a number of concerns including: inconsistent 
adherence to internal policies and procedures, inadequate systems, 
the need to strengthen controls, and inconsistent monitoring 
processes. Management is aware of the deficiencies and developed 
a plan to address the issues. We are in process of validating that 
the corrective action plan addresses our concerns 
satisfactorily 

Although these AML deficiencies were discussed in the composite 
rating section, there is no indication they affected the rating which 
remained unchanged from the prior year. 

AML issues were discussed a third time in the section of the ROE 
analyzing HBUS’ Consumer Compliance Rating. For the first time, this 
section included a lengthy discussion of the high AML risks incurred by 
HBUS’ banking operations. The ROE stated: 

“BSA/AML examinations were conducted in Middle Market, 
Government and Institutional Banking, Corporate Trust, 

Investment Banking, Customer Activity Monitoring Program, and 
London Banknotes follow-up. . . . 


1791 

1792 


Id. at 2. 
Id. at 3. 
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HBUS is the largest Embassy banking services provider. The bank 
is also active in the precious metals, jewelry, garment, and Middle 
Eastern carpets industries. HBUS has numerous accounts to 
Politically Exposed Persons and Money Service Businesses. The 
bank ranks in the top three banks in CHIPS and SWIFT wire 
transfer volume, and is a leader in global foreign correspondent 
relationships. As the U.S. dollar clearing bank for the Global 
HSBC network, HBUS maintains numerous relationships with 
institutions worldwide. ... The bank does business with numerous 
customers in both High Intensity Drug Trafficking Area and High 
Intensity Money Laundering and Related Financial Crime Area 
locations. HBUS provides pouch services through several business 
units. Historically, pouch services are vulnerable to money 
laundering risk.”'™ 

Despite this recitation of the AML risks facing HBUS, the ROE stated 
that the bank’s AML controls were “generally effective, with no 
violations noted.” It also stated that “certain areas within GIB required 
strengthening.”'’^'' 

Embassy Banking Examination. The ROE’s multiple references 
to GIB, the Government and Institutional Banking department that 
housed the bank’s Embassy Banking services, were included, because in 
January 2008, former GIB employees alerted the OCC to a host of 
problems in the Embassy Banking unit. HBUS had dramatically 
increased its Embassy Banking business, after the closure of Riggs Bank 
and the decision by Wachovia Bank to exit the business. By January 
2006, the bank had over 2,500 embassy accounts with $485 million of 
deposits under management,'™ and the business continued to grow. 

The former employees described numerous problems, including 
apparent employee misconduct, inappropriate business transactions, 
noncompliance with bank policy, inadequate account monitoring, and 
erroneous and misleading regulatory and internal reports. 

Over the next few months in 2008, an OCC examination confirmed 
the allegations.”^’ The examination found, for example, that GIB had 
allowed two high risk embassy accounts involving Libya and Saudi 
Arabia to operate outside of restrictions specified in Memoranda of 


lU. at tJ. 

See 1/30/2006 OCC Supervisory Letter regarding HBUS Embassy Banking, OCC-PSI- 
00107529-736, at 529-530; “HSBC to Open D.C. Branch, Pursue Embassy Clients," Washington 
Post Terence O’Hara (10/5/2004)(quoting Riggs spokesperson: “As a service to our remaining 
embassy clients, Riggs is working closely with HSBC to ensure a smooth transition.”), 
http://www.washingtonpost.com/ac2/wp-dyn/A7285-20040ct4?language=printer. 

1/30/2006 OCC Memorandum,“4Q05 Embassy Banking Examination,” OCC-PSI- 
00107529; 1/30/2006 OCC Supervisory Letter to HBUS, OCC-PSI-00107529. [Sealed Exhibit.] 
10/8/2008 OCC Memorandum, “Royal Embassy of Saudi Arabia (RESA) March 2008 
Examination Conclusions,” OCC-PSI-01434609; 4/3/2008 OCC Memorandum “Libyan 
Relationship Review,” OCC-PSl-01434593; 5/20/200S OCC Memorandum, “Government and 
Institutional Banking,” OCC-PSI-00899215. 
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Understanding (MOU) established for each Embassy relationship. The 
examination found unacceptable levels of risk, inadequate account 
monitoring, and suspect transactions. One example involved a $20 
million wire transfer that was variously explained as needed to pay the 
expenses of Libyan prisoners in the United States and elsewhere, or for 
“legal expenses and consultation that will lead to the establishment of a 
bilateral agreement with the US for cooperation on judicial affairs that 
related to future prisoner transfers.””^* The examination reported that 
when HBUS Compliance asked an Embassy Relationship Manager for 
information about one of the high risk accounts, it received insufficient 
explanations and, in some cases, the Relationship Manager took up to 
four months to obtain client responses. 

In addition, the examination found that Embassy Banking had been 
opening new accounts without notifying HBUS AML Compliance, 
which was against bank policy and led to unmonitored account activity. 
The OCC determined that two of five accounts opened for one high risk 
embassy relationship had not been disclosed to AML Compliance. It 
found that over 45 letters of credit for other Embassy Banking clients, 
ranging in amounts from a few thousand dollars to $3 million, were also 
undisclosed. Another problem was that Embassy Banking was 
executing transactions for persons who were not clients - so-called 
PUPID transactions that were Payable Upon Proper Identification - 
without logging in some of the transactions and without screening the 
transaction beneficiaries against OFAC’s SDN list, in contravention of 
U.S. law. Still another problem was that Embassy Banking personnel 
had identified multiple instances of suspicious activity involving some 
accounts, but had not closed the accounts, despite an HBUS policy 
requiring closure under those circumstances. The OCC also identified a 
backlog of over 3,000 unreviewed alerts, some dating back to 2007, 
relating to potentially suspicious transactions in Embassy accounts. 

The OCC examiner concluded that GIB’s “AML program is not 
effective in identifying and mitigating risk, especially considering the 
nature of its clientele and the types of products and services it 
provides.”'’^® The examiner recommended issuance of a Cease and 
Desist Order requiring immediate corrective action and prohibiting new 
Embassy Banking accounts until AML controls were in place. The OCC 
decided, however, not to issue a Cease and Desist Order or take any 
other informal or formal enforcement action with respect to the Embassy 
Banking accounts.'*™ In May 2008, HBUS submitted an action plan to 


4/3/2008 OCC Memorandum ‘‘Libyan Relationship Review,” OCC-PSl-0 1434593, at 5. 
5/20/2008 OCC Memorandum, ‘‘Government and Institutional Banking,” OCC-PSI- 
00899225. 

isoo AML examiner told the Subcommittee he was not given any reason for OCC’s inaction 
in this matter, but was simply told there would be no enforcement action. He said it was his 
understanding that the Examiner-in-Charge had discussed the matter with the deputy head of 
Large Bank Supervision in Washington before telling him; ‘‘Grace said there would be no 
C&D.” Subcommittee interview of Joseph Boss (1/30/2012). The Examiner-in-Charge told the 
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the OCC and began addressing the AML deficiencies at GIB. A later 
examination was conducted to determine whether the GIB commitments 
were carried out and found that they were. In July 2008, the Report of 
Examination sent to HBUS acknowledged the AML deficiencies 
uncovered in Embassy Banking, but did not treat them as a Matter 
Requiring Attention by the HBUS board. 

AML Deficiencies Continue Amid Law Enforcement Inquiries. 

On July 6, 2009, the OCC sent HBUS the annual Report of Examination 
covering the period up to March 31, 2009.’*“' Like the prior year’s 
ROE, it contained no Matter Requiring Attention related to AML issues. 
The letter transmitting the ROE noted, however, that AML concerns 
were ongoing nonetheless: 

“Compliance with BS A/AML remains a high priority and a key 
reputation risk. As part of the ‘compliance transformation project,’ 
this area is also undergoing significant change. The company has 
high-risk clients and businesses and the current leadership needs to 
be strengthened. Plans are underway to address this concern.”'*®^ 

This letter was the first to be signed by Sally Belshaw, who had replaced 
Anthony DiLorenzo as the OCC Examiner-in-Charge at HBUS, upon 
conclusion of Mr. DiLorenzo’s five-year term. It was the fifth in a row 
to identify AML compliance as a high priority issue. 

For the first time, the ROE contained a “Risk Assessment 
Summary” table which included a reference to AML issues. The table 
indicated that AML risk was “High,” AML risk management was 
“Satisfactory,” and the aggregate AML risk at HBUS was “High” and 
“Stable.”'*® 

Later in the report, in the section discussing the bank’s “Consumer 
Compliance Rating,” the ROE stated that HBUS’ compliance risk was 
“high due to the bank’s lines of business which offer several products 
historically associated with money laundering.” It repeated much of the 
language from the last ROE describing the bank’s high risk businesses 
and customers. It also indicated that HBUS needed to strengthen its 
AML leadership: 

“Although the BSA/AML program is effective overall, we recently 
highlighted the need to strengthen leadership in the area. When the 


Subcommittee that he did not recall talking to a superior about the matter, but thought he 
“probably did because it was a significant issue.” Subcommittee interview of Anthony 
DiLorenzo (3/22/12). The deputy head of Large Bank Supervision did not recall having a 
discussion about a Cease and Desist Order involving Embassy Banking at HBUS. Subcommittee 
interview of Grace Dailey (6/15/12). 

6/07/2009 OCC Report of Examination of HBUS, for the examination cycle ending March 
3 1 , 2009, OCC-PSI-00270034. [Sealed Exhibit.] 

Id. at 2. 
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BSA Director resigned in 2007 the role of the HBUS Compliance 
Director was expanded to include oversight of the BSA/AML 
program. The current Compliance Director has been in place since 
second quarter 2008. In addition to BSA responsibility in the U.S., 
the Compliance Director also has responsibility for Canada, 
Mexico and the Securities businesses. We believe that a complex, 
high-risk institution like HBUS needs a BSA/AML Officer who is 
highly qualified and experienced and have recommended that such 
a person be dedicated to tbe function. A search is underway.”'***'^ 

The discussion of AML leadership was prompted by the 2007 
departure of HBUS’ AML head Teresa Pesce after four years on the job, 
followed by the departure of the head of HBUS Compliance, Carolyn 
Wind after seven years on the job. After Ms. Pesce left, Ms. Wind had 
served as both Compliance and AML head. Leslie Midzain was then 
hired to serve in both roles as well, serving as the bank’s AML head 
even though her background was in Canada and she had no U.S. AML 
experience. In 2010, the OCC would ask for her replacement due to her 
lack of AML expertise and would also criticize the weak AML 
leadership shown by the regional Compliance head, Janet Burak. In 
addition to AML leadership problems, the ROE noted that HBUS 
Compliance was undergoing a reorganization, and that the Compliance 
Review Unit, originally dedicated to AML independent testing, was also 
being reorganized and its mission expanded to other compliance issues. 

During 2008, the OCC completed six more examinations, one of 
which focused on reviewing corrective actions to prior problems. Of the 
remaining five, one involved additional work on the AML deficiencies 
at GIB’S Embassy Banking unit.'*®* Another focused on AML issues 
affecting the Payments and Cash Management (PCM) department which 
helped provide a variety of cash services to clients, including 
correspondent accounts.'*®^ The PCM examination found fundamental 
flaws in its AML controls, including inadequate monitoring, poor review 
of account alerts, and suspicious transactions involving money service 
businesses. The PCM examination found, for example, that PCM 
“systems and controls are less than satisfactory and do not provide an 
appropriate level of monitoring for suspicious and unusual activity for 
all of the activities in the business unit.” One example involved an 
account alert which found that a U.S. money service business was 
sending wire transfers through its HBUS correspondent account to an 
Ethiopian bank for credit to an account it held at that bank, in effect 
sending money to itself. The alert was reviewed, PCM personnel 


8/14/2008 OCC Memorandum, “Government and Institutional Banking Update,” OCC-PSI- 
00899227; 9/4/2008 OCC Supervisory Letter to HBUS on GIB examination, OCC*PSl- 
00107607. [Sealed Exhibit] 

1806 12/7/2007 OCC Memorandum, “BSA/AML Examination - Payment and Cash 
Management,” OCC-PSI-OI263586. [Sealed Exhibit] 
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determined more information was needed, but the alert was closed and 
the transactions continued. 

Similar problems had been identified in a 2006 OCC examination 
of foreign correspondent banking which resulted in an MRA requiring 
PCM to conduct a review of its money service business accounts. As a 
result of the 2008 examination, OCC examiners recommended three 
MRAs, one of which directed PCM to conduct a review of its money 
service business accounts, which appears to be a “repeat MRA” from the 
2006 examination. Several months later, the OCC Examiner-in-Charge 
sent a Supervisory Letter to HBUS including the three MRAs, but did 
not characterize the request for an account review as a “repeat MRA” 
that would necessitate an enforcement action, instead referring to 
“PCM’s delay in initiating a special review for Money Services 
Businesses (MSB) type of entities, as required by a previous MRA, has 
resulted in increased risk.”'®”’ 

A third examination in 2008, focused on HBUS Compliance 
Review Unit (CRU) which was dedicated to reviewing AML compliance 
at the hank. The examination found its work satisfactory but also 
directed HSBC’s internal audit unit to test the CRU’s workpapers for 
reliability and directed the CRU to conduct an immediate review of the 
PCM department which had not undergone an internal AML review for 
over three years.'®”® Additional examinations focused on AML issues at 
Card Services'®”” and Banknotes offices in Singapore and Hong 
Kong.'®'” 

In 2009, the OCC conducted eight more AML examinations. 

Three followed up on the problems uncovered in connection with 
HBUS’ pouch activities, Embassy Banking and PCM services.'®" 
Additional examinations assessed HBUS’ OFAC compliance'®'’ and 
AML controls involving correspondent banking'®'® and private 
banking.'®'^' Those examinations identified additional AML problems. 


1807 4/21/2008 OCC Supervisory Letter HSBC-2007-24, “Payment and Cash Management 
BSA/AML Examination,” OCC-PSI-00 107597. [Sealed Exhibit.] 

4/9/2008 OCC Supervisory Letter to HBUS on CRU examination, OCC-PSI-OOl 07594. 
[Sealed Exhibit.] 

2/1 1/2008 OCC Memorandum, “Card Services Compliance Examination,” OCC-PSI- 

00938171. 

6/2/2008 OCC Memorandum, “Singapore/Hong Kong Banknotes Examination,” OCC-PSI- 
00107603. 

1/22/2009 OCC Supervisory Letter HSBC-2008- 16, “Pouch Service BSA/AML 
Examination,” OCC-PSI-001076i5; 6/24/2009 OCC Supervisory Letter HSBC-2009-10, 

“Globa! institutional Banking BSA/AML Examination,” OCC-PSI-00107628. [Sealed Exhibits.] 
1/20/2009 OCC Supervisory Letter HSBC~2008-41, “Office of Foreign Asset Control 
Examination,” OCC-PSI-00000434. [Sealed Exhibit.] 

3/3/2009 OCC Supervisory Letter HSBC-2008-34,“CoiTespondent Banking BSA/AML 
Examination,” OCC-PSI-00107618. [Sealed Exhibit] 

3/18/2009 OCC Supervisory Letter HSBC-2008-32, “Private Banking BSA/AML 
Examination,” OCC-PSI-00000445; 9/19/2008 OCC Memorandum “HSBC BSA/AML Private 
Bank Exam-File Review-Draft,” OCC-PSl-01274467. [Sealed Exhibits.] 
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For example, the private banking examination concluded: “HSBC’s 
Private Bank BSA/AML does not adequately manage the risks 
associated with DPB-NY/CA [Domestic Private Bank offices in New 
York and California] and IPB-NY [International Private Bank in New 
York].”'*'^ Supervisory Letters sent to HBUS described the AML 
problems, some of which had been detected in a 2006 examination of 
private banking, but made no mention of repeat MRAs that would 
require an enforcement action. 

Altogether in 2008 and 2009, the Supervisory Letters identified 12 
more MRAs in the AML field, but no informal or formal enforcement 
actions were taken. These 12 MRAs were on top of the 71 MRAs 
identified from 2005 to 2007. 

In the spring of 2009, a new development intensified OCC’s focus 
on AML problems at HBUS. The OCC was contacted by two Federal 
law enforcement agencies regarding separate Federal investigations into 
possible money laundering through accounts at HBUS. The first 
contact, in June 2009, was from the U.S. Department of Homeland 
Security’s Immigration and Customs Enforcement (ICE) unit 
investigating possible laundering of illegal drug proceeds.'*'^ The 
second contact, around August or September 2009, was from a U.S. 
Assistant Attorney General in West Virginia investigating a Medicare 
fraud.'*” 

Senior OCC officials in Washington arranged to meet with the ICE 
representatives. On September 1, 2009, the meeting took place in 
Washington and was attended by the OCC Deputy General Counsel 
Daniel Stipano, Deputy Controller in charge of Large Bank Supervision 
Grace Dailey, OCC senior legal counsel with AML expertise James 
Vivenzio, the OCC AML examiners at HBUS, and the ICE 
representatives.'*'* After the meeting concluded and the ICE 
representatives left, OCC personnel continued to discuss supervision of 
HBUS. According to a memorandum summarizing the meeting, the lead 
AML examiner at HBUS informed the other meeting participants that, 
during his tenure at the bank, HBUS had been the subject of 83 AML- 
related MRAs, and he had twice recommended issuance of a Cease and 
Desist Order to compel the bank to strengthen its AML controls.'*'® 


1*15 Id 

See 9/29/2009 email exchanges between OCC Jim Vivenzio, OCC Joseph Boss, OCC Teresa 
Tabor, OCC Sally Belshaw, and others, “HSBC,” OCC-PSI-00928756. 

Subcommittee briefing by OCC (3/15/2012). 

See 9/29/2009 email exchanges between OCC Jim Vivenzio, OCC Joseph Boss, OCC Teresa 
Tabor, OCC Sally Belshaw, and others, “HSBC,” OCC-PSl-00928756-758. 

'^'^9/1/2009 Memorandum to Files from OCC Examiners Joseph Boss and Elsa de la Garza, 
OCC-PSI-0 1416833. See also Subcommittee interviews of Elsa de la Garza (1/9/2012), Joseph 
Boss (1/30/2012), and James Vivenzio (3/15/2012). 
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According to the meeting memorandum, Mr. Stipano “stated that he was 

unaware of the recent history of HBUS and that he wanted a thorough 
■ ,,1820 
review. 

After this meeting, the OCC directed its AML examiners to draw 
up an investigative plan and expand an ongoing AML review to 
encompass a comprehensive review of the entire AML program at 
HBUS. On September 3, 2009, the OCC sent a letter to HBUS 
informing it that a regularly scheduled AML examination of the 
Banknotes department that started in July and for which field work was 
completed in August 2009, was being expanded.'®^’ Additional staff 
was added to the AML team. 

Expanded AML Examination. For the first time since the OCC 
inherited HBUS from the Federal Reserve, it directed its AML 
examiners to conduct a holistic review of HBUS’ AML program, instead 
of focusing on AML issues in particular banking services or 
departments. The AML examiners quickly found fundamental problems 
related to the specific AML deficiencies identified over the years. This 
examination would continue throughout 2010. 

In March 20 1 0, the OCC issued its first AML-related Supervisory 
Letter that cited HBUS for a violation of law, for failing to file 
Suspicious Activity Reports (SARs) in a timely manner. The 
Supervisory Letter stated that its AML examination had found that the 
bank had a backlog of over 17,000 alerts, in four business units, 
identifying potentially suspicious activity that had not been investigated 
to determine whether a SAR should be filed. The OCC determined 
that 98% of those alerts were generated in the “High Risk Monitoring 
Group,” and 14% were six months or older. The OCC gave the bank 
a deadline of June 30, 2010, to clear the backlog and instructed the bank 
to develop a risk-based system for reviewing and resolving those alerts. 
In addition to the backlog of alerts, OCC examiners had found 
significant backlogs in the bank’s handling of AML-related subpoenas 
and Section 3 14(a), and 3 14(b) requests for information from other 
banks, though those items were not specifically discussed in the 
Supervisory Letter. 


1820 9/0^2009 Memorandum to Files from Examiners Joseph Boss and Elsa de la Garza, at OCC- 
PSl-01416833. [Sealed Exhibit.] 

On 9/21/2009, the OCC sent HBUS a request letter for an extensive amount of new 
information on 25 Latin America-based institutions. There would be eight additional requests 
for more information through early February 20J0, See 2/6/20 10 HBUS email from Janet Burak 
to Brendan McDonagh, OCC-PSI-00787479. 

3/10/2010 OCC Supervisory Letter HSBC 2010-03, “B^klog of Monitoring Alerts and 
Enhanced Due Diligence Requests,” OCC-PSI-00851542. [Sealed Exhibit.] 

Id. 

4/28/2010 Report of Examination ofHBUS, for the examination cycle ending December 31, 

2009, OCC.PSI-00899872, at 7. [Sealed Exhibit] 

See “Background Information on HSBC’s Alert Backlog as of the week of February 8, 

2010, ” prepared by OCC, OCC-PSI-01358494. 
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Shortly after delivering the Supervisory Letter, the OCC 
Examiner-in-Charge for HBUS Sally Belshaw and the head of Large 
Bank Supervision Grace Dailey met with the HSBC Group CEO 
Michael Geoghegan and the HNAH and HBUS CEO Brendan 
McDonough on April 20, 2010. In that meeting, the OCC officials 
informed the bank officials that the agency had identified serious AML 
deficiencies throughout the bank. According to a memorandum 
prepared by Ms. Belshaw summarizing the meeting, the discussion 
included the following: 

He [Mr. Geoghegan] asked when I thought things went bad. Grace 
and I described the spotty history of the bank relative to 
BSA/AML compliance. The bank converted to a national charter 
with a Formal Agreement (Fed) that they addressed. We also noted 
the regular and frequent citing over the years of MRAs in almost 
every examination we conducted. In those cases, management 
reacted to our findings and took corrective action. This, however, 
culminated in a systemic concern that we ultimately characterized 
as ineffective management (BSA/AML officer last year and now 
the compliance program overall). We believe that over the years, 
the people and program did not advance to keep pace with the risk. 
Systems enhancements are only now being achieved (and moved 
up in light of our concerns). Talent left the organization and was 
not replaced by people with sufficient technical skills to lead. 
SuccessioriTiench strength for the compliance area is now 
inadequate. MIS has not evolved to permit early identification of 
risks/concerns. The backlog issue is a symptom of these 
management weaknesses. . . . 

We discussed several areas in some specificity including HBUS’ 
policies/practices with respect to monitoring of affiliate activity 
(should be to same, not lesser, standard than other correspondents 
as is currently the case). We highlighted findings of weakness in 
KYC in several areas: bank notes, wire activity, domestic & 
international customers. We highlighted our recent 
concems/questions about managemenfs ability to address the 
backlog problem (and violation) given weaknesses we are seeing 
in data integrity in reports, quality of alert dispositioning, and the 
lack of independent review/oversight of that process. Our 
supervisory letter requires that backlogs be completely corrected 
by June SO*. We emphasized that not only must the number be 
addressed, but they must be effectively dispositioned (qualified 
reviewers guided by appropriate policy/process, adequate 
documentation, appropriate/timely SARs filed), and an ongoing 
system of controls must be in place to ensure the process is 
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sustainable. We will be requiring qualified, independent 
verification of that as part of the process.'*^* 

2010 Report on Examination. On April 28, 2010, three months 
earlier than normal, the OCC delivered its annual Report of Examination 
(ROE) to HBUS, covering the period up to December 31, 2009.'*^’ Like 
the Supervisory Letter, this ROE cited HBUS for violating the Bank 
Secrecy Act due to its failure to file timely SARs, the only violation 
listed.'*^* The letter transmitting the ROE stated: 

“Perhaps most disconcerting, we have identified significant 
weaknesses in compliance, particularly in Bank Secrecy Act/Anti- 
Money Laundering (BSA/AML), that are likely to have costly 
financial and reputation implications. Management is responding 
to the concerns we are raising, but was not effective in preventing 
these weaknesses from becoming serious problems. ... An 
extended examination is revealing serious breakdowns and 
violations. We will likely be requiring additional action to address 
this concern.”’ 

In addition, for the first time, the ROE discussed HBUS’ AML 
problems in the context of HBUS’ CAMELS management rating, 
although the rating remained unchanged from the prior year. The ROE 
noted that HBUS was the subject of several ongoing investigations that 
could damage its reputation, and the OCC was “increasingly concerned 
with weaknesses in compliance (particularly BSA/AML) risk 
management,” including “the quality of BSA/AML monitoring and 
compliance.” The ROE stated that the ongoing AML examination “is 
revealing weaknesses that have impacted our overall assessment of the 
program and its management.”'*'”’ 

The ROE also discussed the AML problems in the section on 
HBUS’ Consumer Compliance Rating and disclosed that it was lowering 
that rating as a result. The ROE stated: 

“[W] are lowering our assessment of the quality of compliance risk 
management from satisfactory to weak .... The high level of 
BSA/AML/OFAC risk associated with HBUS’ business activities 
is a significant factor in our assessment. ... In addition to the high 
level of risk presented by its business activities, HBUS has a high 
quantity of risk based upon significant indications that the bank is 
not in compliance with all laws and regulations. . . . Based upon 
our work to date, we have identified deficiencies relating to 


1 826 4/20/2010 OCC Memorandum, “Meeting w/Michael Geoghegan and Brendan McDonough,” 
OCC-PSI-00905522. 

1827 4/28/2010 Report on Examination of HBUS, for the examination cycle ending December 31, 
2009, OCC-PSI-00899872 [Sealed Exhibit.] 

Id, at 7. 

Id. at transmittal letter. 

Id. at 3-4. 
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HBUS’ transaction monitoring, analysis of customer due diligence 
information, adherence to the USA PATRIOT Act; and fding of 
Suspicious Activity Reports (SARs). . , . We are changing our 
assessments of both HBUS’ BSA/AML program and its overall 
compliance management program from satisfactory to weak. 

These changes are based upon our concerns regarding (1) the lack 
of effective compliance oversight provided by the head of 
HNAH/HBUS’ compliance department, (2) the ineffective results 
to date of HBUS’ project to implement a new model for its 
compliance structure and process, and (3) the deficiencies that we 
have identified to date during our expanded examination of 
HSBC’s Global Banknotes business and the concerns raised by 
multiple external parties.”'*^' 

The OCC lowered HBUS’ Consumer Compliance Rating even though it 
did not identify any problems related to bank compliance with consumer 
protection or civil rights laws. The OCC’s actions contravened the 
interagency agreement on how to calculate this rating, which required a 
focus on consumer protection and civil rights laws, not AML 
requirements. 

Although its Consumer Compliance Rating was lowered, the 
bank’s safety and soundness ratings remained unchanged. Neither the 
CAMELS management component rating nor the overall composite 
rating were lowered. These unchanged ratings meant that the bank 
would also not incur any added Federal deposit insurance fees, despite 
its elevated AML risk. 

On April 15, 2010, the OCC’s Washington Supervision Review 
Committee approved an Order of Investigation “concerning potential 
violations of law and unsafe and unsound conduct in connection with the 
BSA/AML policies and practices of HSBC Bank USA, N.A.”'**^ The 
issuance of the Order was based on the preliminary findings of the 
expanded AML examination, which by that point had identified 
evidence of a backlog of alerts that had not been processed for 
suspicious activity reporting; failure to adequately monitor foreign 
affiliates; and failure to adequately monitor wire transfer transactions for 
customers in countries designated “standard” or “medium” risk by the 
bank. 

On September 13, 2010, the OCC issued the 31-page Supervisory 
Letter described earlier, outlining a long list of significant AML 
problems at HBUS.'*^’ The Supervisory Letter also cited the bank for a 


Q4/9/2010 OCC Memorandum, “Order of Investigation - HSBC Bank USA, N.A., New 
York, NY”, OCC-PSI-00899481. 

1833 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/ Anti-Money 
Laundering ('BSA/AML’) Examination- Program Violation (12 U.S.C. § 1818(s); 12C.F.R. § 
21.21,” OCC-PSI-00864335, [Sealed Exhibit] 
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violation of the Bank Secrecy Act statute for failing to maintain an 
effective AML program. The letter informed HBUS that “the hank’s 
compliance program and its implementation are ineffective, and 
accompanied hy aggravating factors, such as highly suspicious activity 
creating a significant potential for unreported money laundering or 
terrorist financing.”'* '' In addition, the letter stated: 

“Since the OCC terminated the Formal Agreement in February 
2006, the hank has had a high number of MRAs and the OCC 
continues to identify serious deficiencies in the hank's BSA/AML 
compliance program. Over the past two years, the examination 
scopes have included many of same areas that are of concern at 
this examination. The OCC has issued twelve MRAs during this 
period, many of which address similar issues compared to its 
current concerns, including the adequacy of compliance leadership, 
alert management, and monitoring systems. 

In October 2010, six years after becoming HBUS’ primary Federal 
regulator, the OCC issued its own formal enforcement action, a Cease 
and Desist Order requiring corrective action on many of the same 
problems identified by the Federal Reserve seven years earlier in 

2003 , ’836 

Federal Reserve Ratings. The OCC was not the only Federal 
banking regulator that examined HBUS. Because HBUS had federally 
insured deposits, the FDIC acted as a secondary regulator. In addition, 
the Federal Reserve was responsible for regulating HBUS’ holding 
company, HSBC North America Holdings (HNAH) as well as an Edge 
Act Corporation that HBUS owned in Florida. The Subcommittee did 
not attempt to review the oversight exercised by these two other 
regulators. The Subcommittee did note, however, that as of 2009, the 
Federal Reserve Bank of Chicago maintained a lower rating for 
HNAH’s risk management, in part because of the AML problems at 
HBUS. 

The 2009 Federal Reserve report stated: “[T]he primary driver for 
the overall rating is the unsatisfactory BSA/AML program. BSA/AML 
risk is currently the highest inherent Legal and Compliance risk for 
HNAH.”'*^^ The Federal Reserve report stated that the bank’s 
compliance program had focused “inward on alignment with Group, cost 
reduction, and centralization without sufficient focus on implementing 
and maintaining good risk identification, control, measurement, and 
management processes.”'*’’* It also noted that “HNAH’s strategic plan 


iu. cll JJJ. 

See In re HSBC Bank USA. N.A.. Case No. AA-EC-10-98, Department of the Treasury 
Comptroller of the Currency, Consent Order (10/4/2012), OCC-PSI-00904698. 

See Federal Reserve Bank of Chicago report as of December 31, 2009, BOG-SR-001368, at 
1. [Sealed Exhibit.] 
at 2. 
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was to focus on customers and business lines with international 
connections, which present higher levels of BSA/AML and OFAC 
risks.” According to the Federal Reserve; 

“[T]he significant weaknesses and issues identified by regulators 
on the BSA/AML program underscores senior compliance 
management’s inability to self-identily compliance risks and to 
note significant control deficiencies in a timely fashion. While the 
inabilities of senior compliance management [are] a primary driver 
for the downgrade’*^^ of board and senior management oversight 
rating, the lack of a sound risk management function that 
adequately includes compliance risk is also a contributor.”' 

In October 2010, on the same day and in coordination with the 
OCC, the Federal Reserve issued its own formal enforcement action 
with respect to FTNAFI, requiring it to strengthen its “firmwide 
compliance risk management program,” including with respect to AML 
compliance, and ensure that HBUS complied with the OCC order.'*"" 

(2) Six Years of AML Deficiencies 

An OCC presentation providing an “AML Retrospective (2001- 
2011)” includes a chart showing that, from January 2005 to March 2010, 
the OCC issued 85 AML-related Matters Requiring Attention to the 
HBUS Board of Directors, which was a third more AML-related MRAs 
than the next closest major bank.'*"'^ An experienced OCC AML 
examiner told the Subcommittee: “I thought I saw it all with Riggs, but 
HSBC was the worst situation I’d ever seen.”'*"** 

The following chart summarizes many of the OCC-issued MRAs 
related to AML problems at HBUS. It shows that the examinations 
repeatedly revealed critical AML problems across HBUS business units, 
many of which offered high risk products, had high risk clients, or 
engaged in high risk activities vulnerable to money laundering and 
terrorist financing. Twenty-one of the examinations identified problems 


This targeted examination did not result in a downgrade at the overall holding company 
level. 

at 5. 

See In Re HSBC North America Holdings. Inc. , Case No. 10-202-B-HC, before the Board of 
Governors of the Federal Reserve System, Cease and Desist Order Issued Upon Consent 
Pursuant to the Federal Deposit Insurance Act as Amended (10/4/2012). 

See undated presentation, “BSA Officer Roundtable: Bank Secrecy Act Policy and Legal 
Update,” by John Wagner, OCC Director of BSA/AML Compliance, and James Vivenzio, OCC 
Senior Attorney for BSA/AML, chart entitled, “BSA/AML MRA: Large Banks; Full 
Information System Extract (LBIS),” OCC-PSI-OI768523. See also Subcommittee interviews of 
Elsa de la Garza, Joseph Boss, and James Vivenzio (confirming HBUS had an unusually high 
number of MRAs compared to other banks); 9/13/2010 OCC Supervisory Letter HSBC-2010-22, 
“Bank Secrecy Act/ Anti-Money Laundering (‘BSA/AML’) Examination - Program Violation 
(12 U.S.C. § 1818(s); 12 C.F.R. § 21.21),” OCC-PSI-00864335 at 9 (“Since the OCC terminated 
the Formal Agreement in February 2006, the bank has had a high number of MRAs”). [Sealed 
Exhibit.] 

Subcommittee interview of Joseph Boss (1/30/2012). 
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with the hank’s AML monitoring systems, including in its wire transfer, 
pouch, foreign corresponding hanking, international and domestic 
private hanking, retail hanking, credit cards. Embassy banking. 
Banknotes, and Payment and Cash Management operations. Inadequate 
customer due diligence and client information were similarly identified 
in multiple business lines and services. Noncompliance with hank 
policy was another common problem. Inadequate staffing and AML 
training were also repeatedly identified, as were weaknesses in internal 
reviews of AML compliance. Later on, weaknesses in AML leadership 
at the hank were also identified. When AML examiners were allowed to 
undertake a broader analysis of the AML program, they identified 
additional fundamental problems involving backlogs, inappropriate 
assessment of country and client risk, favored treatment of HSBC 
affiliates, and massive gaps in monitoring. 

For more than six years, from July 2004 until April 2010, despite 
compiling a litany of AML deficiencies, the OCC never cited HBUS for 
a violation of law, never took a formal or informal enforcement action, 
and turned down recommendations to issue Cease and Desist Orders 
targeting particularly egregious AML problems, even though the same 
problems surfaced again and again. The OCC’s failure to compel HBUS 
to remedy the AML deficiencies repeatedly identified by its examiners 
over a six-year period indicates that systemic weaknesses in the OCC’s 
AML oversight model require correction. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00567 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm 00568 Fmt6601 Sfmt6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 


Matters Requiring Attention (MRAs) and Recommendations In OCC Supervisory Letters for HSBC Bank USA, N.A. 

January 200 5 - July 2009 


] 

Intun^ CORbvi Pfflsr Hni« 

TralningPillar 

independerrt: Testing 
Pillar 

BSA Officer 


Sof BSA 

Supv. Letter 
Date 

Business Line/ Area Examined 

#MRAs 

8Rec. 

Bank Not Following 

Weak MoiAoiSiq 
P rocedures 

Weak CDD/EDO 
Procedures 

Insuff. Staff 
Levets 

Backlogs 

Noted 

Policies Need 
Revision 

StaH Needs 
Training 

Independent Testing 
Probiems 

BSA Officer 

OFAC Issues 



1/26/2005 

4Q04iJSA Patriot Act Exam 

6 

0 

X 


X 








S 


6/20/2005 

1Q05 Global Banknote Exam 

6 

0 

X 


X 








12 


8/9/2005 

Embassy Banking Exam 

0 

0 











12 


1/17/2006 

3005 Foreign Corresu. Banking Exam 

7 

0 

X 





X 





19 


1/23/2006 

3005 Wire Transfer Exam 


0 



X 





K 



24 


1/30/2006 

4005 Embassy Banking Exam 


0 











28 


1/31/2006 

3005 Intn'l Private Banking Exam 


0 



X 


X 

X 





35 

Provisions of the 2003 Written ARreement were terminated 2/6/2006 with Hte above similar/svstemicfindioes from the first seven BSA/AMt pvams. 


4/12/2006 

1Q06 Domestic Private Banking Exam 


0 



X 








38 


4/27/2(XS6 

1006 GIB Esm 













38 

10 

6/14/2006 

1006 Comoliance Review Unit (CRUS Exam 













42 

11 

7/13/2006 

1006 Trade Services Operations 





X 








42 

12 

9/26/2006 

2006 London Global Banknote Exam 

3 

0 

X 


K 








45 

13 

10/19/2006 

Retail Services Compliance Exam 

1 

0 











46 

14 

12/1/2006 

Metrls Exam (Credit Cards) 


0 



X 








SI 

15 

1/8/2007 

Taxpayer Financial Services Compliance Exam 

0 

2 











SI 

16 

3/8/2007 

Corporate and Institutional Banking Exam 





X 





X 


X 


17 

3/19/2007 

3006 GIB Exam 

3 













18 

3/27/2007 

3006 Retail Banking Exam 








X 





61 

19 

3/29/2007 

4006 CAMP Review 


0 











62 

20 

5/22/2007 

OCC VIsIt to India 













62 

21 

6/17/2007 

CAMP Follow-up 

0 

0 











62 

22 

6/20/2007 

1007 Corporate Trust Exam 

0 

0 











62 

23 

8/6/2007 

2Q07 Internal Audit and CRU Foliow-uo Exam 










X 



62 

24 

8/21/2007 

3007 London Banknote Follow-up Exam 













62 

25 

8/21/2007 

3007 GIB Foilow-uo Exam 

0 

0 











62 

26 

9/13/2007 

Pouch Services and Middle Market Exam 

s 

0 

X 





X 





67 

27 

9/21/2007 

investment Banking Exam 

3 

0 



X 








70 

28 

9/21/2007 

Taxpayer Financial Services Follow-up Exam 

1 

0 

X 











29 

10/15/2007 

Retail Services Compliance Exam 













71 

30 

2/11/2008 

Card Services Compliartce Exam 













71 

31 

4/9/2008 

1008 Audit and CRU Exam 













73 

32 

4/21/2008 

4007 PCM Exam 













76 

33 

6/2/2008 

Singapore/Hong Kong Banknotes Exam 













76 

34 

7/10/2038 

Taxpayer Financial Services Compliance Exam 


0 











77 

35 

9/4/2008 

2008 and 3Q08 GIB Exam 

2 





X 

X 

X 





79 

36 

1/20/2009 

4008 OFAC Exam 


1 




X 







79 

37 

1/22/2009 

3008 Pouch Foilow-op Exam 

0 

0 












38 

3/3/2009 

4008 Correspondent Banking Exam 

0 

2 




X 







79 

39 

3/18/2009 

4Q08 Private Banking Exam 

2 

1 


X 




X 





81 

40 

3/18/2009 

4008 PCM Exam 

0 





X 







81 

41 

5/27/2009 

Taxpayer Financial Services Compliance Exam 

0 












81 

42 

6/24/2009 

2009 GIB Follow-up Exam 

1 







X 





82 

43 

7/7/2009 

Compliance Management Exam 

1 

0 














TOTALS 

83 

30 

10 

19 

13 

8 


21 

11 


1 
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C. OCC Systemic Failures 

The OCC’s failure for six years to take action to force correction of 
fundamental problems in HBUS’ AML program allowed those problems 
to fester and worsen. Five key weaknesses in OCC oversight 
contributed to its those failures: (1) treating AML deficiencies as a 
consumer compliance issue instead of a management issue; (2) 
unnecessarily restricting citations of AML program violations; (3) 
failing to match narrowly focused AML examinations with broader 
reviews; (4) failing to make better use of formal and informal 
enforcement actions in the face of continuing AML problems; and (5) 
issuing Supervisory Letters that sometimes did not accurately convey the 
AML problems identified in examinations. AML problems that surfaced 
even after bank commitments to cure identified problems was also a 
common thread. 

(1) Treating AML Deficiencies As A Consumer 
Compliance Issue 

The OCC is the only Federal bank regulator that does not address 
AML problems within the context of a bank’s safety and soundness 
considerations and ratings, instead treating them as a matter of consumer 
compliance. This approach raises at least three concerns. First, 
combining AML and consumer compliance concerns undermines and 
confuses the consumer compliance rating. AML compliance issues are 
unrelated to consumer protection and civil rights laws and should have 
no bearing or impact on a bank’s consumer compliance rating. Inserting 
AML considerations into the rating process also directly contravenes the 
Uniform Interagency Consumer Compliance Rating System specifying 
how that rating is supposed to be calculated and what it is supposed to 
signify.'*'*'* In the case of HBUS, the OCC ended up lowering its 
consumer compliance rating in 2010, without citing any evidence that 
the bank was failing to comply with consumer protection or civil rights 
requirements. 

Secondly, failing to maintain an effective AML program is more 
properly viewed as a management issue that should contribute to a 
bank’s CAMELS management rating and, ultimately, the bank’s 
composite rating. Federal banking agencies have agreed, for example, 
that a bank with a “2” CAMELS management rating means that 
“significant risks and problems are effectively identified, measured. 


See “Comptroller’s Handbook ~ Consumer Compliance Examination,” Appendix A, 
“Uniform Interagency Consumer Compliance Rating System,” 
http://www.occ.gov/pubIications/pubHcations-by-type/comptroliers- 
handbook/_paginated/overvlew/defauit.htm?staitat=ovei00013.htm. Compare with FDIC, 
http://www.fdic.gOv/regujations/Iaws/rules/5000-1700Jitnil; Federal Reserve Bank, 
http://ww’w.fedpartnership.gov/bank'Iife-cycle/topic-index/bank-rating-system.cfm; Consumer 
Financial Protection Bureau, 

http://www.consumerfinance.gov/guidance/supervision/manual/examinations/. 
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monitored, and controlled” by bank management.'*'*^ In contrast, a bank 
with a “3” management rating signifies “management and board 
performance that needs improvement or risk management practices that 
are less than satisfactory given the nature of the institution’s fiduciary 
activities.” A 3 rating also means that the “capabilities of management 
or the board of directors may be insufficient for the size, complexity, 
and risk profile of the institution’s fidueiary activities. Problems and 
significant risks may be inadequately identified, measured, monitored, or 
controlled.”'*'** These descriptions of the significance of the CAMELS 
management rating are directly applicable to management efforts to 
ensure an effective AML program. 

Interagency agreement on the significance of a bank’s overall 
composite rating is also compatible with this approach. Federal banking 
agencies have agreed that a composite rating of “2” means that a bank is 
“in substantial compliance with laws and regulations,” that “overall risk 
management practices are satisfactory,” and “there are no material 
supervisory concerns and, as a result, the supervisory response is 
informal and limited.”'*'*’ A “3” composite rating means banks: 

“exhibit some degree of supervisory concern in one or more of the 
component areas. These financial institutions exhibit a 
combination of weaknesses that may range from moderate to 
severe; however, the magnitude of the deficiencies generally will 
not cause a component to be rated more severely than 4. 
Management may lack the ability or willingness to effectively 
address weaknesses within appropriate time frames. Financial 
institutions in this group generally are less capable of withstanding 
business fluctuations and are more vulnerable to outside influences 
than those institutions rated a composite 1 or 2. Additionally, 
these financial institutions may be in significant noncompliance 
with laws and regulations. Risk management practices may be less 
than satisfactory relative to the institution’s size, complexity, and 
risk profile. These financial institutions require more than normal 
supervision, which may include formal or informal enforcement 
actions.” '*'** 

These categories fit seamlessly with management issues related to AML 
concerns. 

Currently, Federal banking agencies other than the OCC routinely 
consider AML deficiencies as one factor in assigning a bank’s 


See Uniform Interagency Management Component Ratings: 
http;//www.occ.gov/pubHcations/publications-by-type/coinptroiIers- 
handbook/_paginated/banksupervisionprocess/defauit.htm?startat=bank001 08.htm 

1846 

See Uniform Financial Institutions Rating System, discussed in 9/2007 “Comptroller’s 
Handbook - Bank Supervision Process,” http://www.occ.gov/publicalions/pubHcations-by- 
t;^pe/comptroilers-handbook/_pdf/banksupervisionprocess.pdf, at 55. 
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management rating and may downgrade that rating if management fails 
to maintain an adequate AML program. The management component 
rating is a reflection of management’s ability to adequately identify, 
measure, monitor, and control problems and significant risks. The 
failure to maintain an adequate AML program exposes a bank to 
significant reputational risks, potentially large civil money penalties, and 
criminal prosecution. When such factors are present, it makes sense for 
a bank regulator to weigh them when assigning the bank’s management 
rating. If the management component is downgraded, it may also in 
certain circumstances lower the overall composite rating, with 
potentially severe impacts on the financial institution’s reputation, risk 
profile, and insurance assessment fees. 

In the case of HBUS, after documenting widespread and serious 
AML deficiencies, citing the bank for two violations of law, noting the 
potential for large civil money penalties, and criticizing both bank 
management and the board of directors for failing to provide an adequate 
AML program, the OCC downgraded the bank’s consumer compliance 
rating, but not its CAMELS management rating. The bank’s composite 
rating was also unaffected. The result is that HBUS executives and 
directors escaped any CAMELS consequences for their poor AML 

1849 

management, 

A third, related problem is that because consumer compliance is a 
specialty examination area with its own, separate rating system, a lower 
consumer compliance rating will rarely impact a bank’s composite 
rating. The OCC Reports of Examination make it clear that the 
consumer compliance rating is not a contributing factor that has a 
routine impact on a bank’s composite rating. HBUS was also aware that 
its composite rating was generally insulated from the problems with its 
AML performance, as indicated in a February 2010 email from the 
HNAH compliance head Janet Burak to top HNAH and HBUS 
executives Brendan McDonagh and Irene Domer. At a time when 
HBUS was in the midst of an intensifying AML examination which 
would ultimately lead to a Cease and Desist Order, Ms. Burak wrote: 

“1 met with the OCC today. ... Sally [Belshaw, the OCC 
Examiner-in-Charge] also indicated that they are considering 
downgrading their assessment of Compliance Risk Management 
... although [Sally] indicated that if they make that decision it will 
not impact the Bank’s composite CAMELS rating . . . and would 
not likely impact the Management rating component.”'®^'* 


A related problem is that because the Federal Reserve downgraded HBUS’ holding company 
due to the AML problems at HBUS, HNAH executives ended up incurring lower ratings for 
HBUS’ AML management failures, but HBUS executives did not. 

isso 2/24/2010 email from HNAH Janet Burak to HBUS Brendan McDonagh and Irene Domer, 
HSBC OCC 3405315. 
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This email demonstrates that bank officials were aware of how the 
process for rating AML performance had little real impact on the safety 
and soundness ratings that carried important consequences. It suggests 
that if AML problems had CAMELS consequences on a routine basis, 
they might have greater significance for management. 

The OCC Reports of Examination on HBUS occasionally discuss 
the bank’s AML problems in the part of the report analyzing its 
management rating or composite rating, perhaps because the issue is 
relevant to those discussions. But the OCC confined the impact of the 
bank’s AML problems to lowering HBUS’ consumer compliance rating 
and not its CAMELS management or composite ratings which remained 
unaffected. 

The OCC’s peculiar treatment of AML concerns as a consumer 
compliance issue has multiple negative consequences. National banks 
that fail to maintain adequate AML programs may end up receiving 
more favorable safety and soundness ratings than they deserve, because 
the consumer compliance ratings have almost no impact on their 
management or composite ratings. They may also receive lower 
consumer compliance ratings than they deserve for the opposite reason. 
Another consequence is that the bank’s deposit insurance assessments 
remain at a lower level than they should, as a result of safety and 
soundness ratings that do not fully reflect their AML risks. Treating 
AML concerns as a management issue would mitigate those negative 
consequences and create a stronger incentive for national banks to focus 
on their AML obligations. To strengthen its AML oversight, the OCC 
should bring its practice into alignment with all other Federal bank 
regulators, remove AML considerations from its consumer compliance 
ratings, and consider AML issues in the context of the CAMELS 
management component. 

(2) Restricting Citations of AML Program Violations 

A second peculiarity in OCC AML oversight is its failure to cite 
violations of law in its Supervisory Letters and annual Reports of 
Examination when a bank fails to comply with one of the four statutorily 
mandated components of an effective AML program - described earlier 
as internal controls, an AML compliance officer, AML training, and 
independent testing - even though each of the four program components 
has its own statutory basis. Instead, the OCC has adopted a practice 
of not citing violations of the individual AML program components, 
instead treating any such deficiency as a Matter Requiring Attention 
(MRA) by the bank.’*^^ 


See 31 U.S.C. § 5318(h)(l)(AHD). 

One OCC senior legal counsel specialiang in AML matters told the Subcommittee that the 
OCC “will not cite pillar violations” and instead lists them as MRAs which are not enforceable 
in court. He said that the OCC uses the same approach when reporting AML examination 
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Although MRAs require corrective action by bank management, 
they are separate and distinct from violations of law. OCC guidance 
provides that MRAs should address bank practices that “deviate from 
sound fundamental principles and are likely to result in financial 
deterioration if not addressed,” or that “result in substantive 
noncompliance with laws,”'*^^ MRAs are intended to target weak 
policies and practices before they result in violations, and provide an 
interim step before finding a bank in violation of the law. At the same 
time, because MRAs signify matters that require the “attention” of 
management, they do not carry the same legal weight and urgency as 
violations of law. While they play an important role in AML oversight 
by focusing bank officials on emerging AML problems, if they take the 
place of statutory violations, MRAs can end up misleading a bank about 
the seriousness of an AML deficiency, delay remedial action, and allow 
an AML problem to fester. Citing a bank for noncompliance with the 
law, on the other hand, carries more severe consequences if left 
unaddressed. It also sends a much stronger message to bank 
management about the need for prompt corrective action, and lends 
more weight to any subsequent formal or informal enforcement action in 
the event the problem continues. 

The OCC’s practice of not citing a bank for violating the 
individual statutory requirements for an effective AML program meant 
that OCC examiners were effectively limited to using only MRAs to 
compel reform of an identified problem. In the case of HBUS, OCC 
AML examiners repeatedly identified instances in which HBUS failed to 
comply with one or more of the four pillar requirements of an effective 
AML program. HBUS often responded by addressing some of the 
narrow problems identified, but not the broader underlying 
programmatic deficiencies, perhaps because the problems were 
identified in the more neutral language of an MRA rather than as a 
violation of law. 

AML Compliance Officer. In one case, in 2009, the OCC 
determined that the HBUS AML head was not qualified for the position, 
a rare personnel decision prompted by the bank’s deteriorating AML 
program. Having a qualified AML compliance officer is one of the four 
critical requirements of an effective AML program and is mandated by 


findings to FinCEN, describing the OCC’s reporting as '‘cleaner” and not “cluttered with 
component violations” like the other agencies. Subcommittee interview of James Vivenzio 
(3/15/2012). As indicated earlier, annual reports compiled by FinCEN show that, for the five 
year period from 2007 through 201 1, OCC examiners cited only 1 6 pillar violations in more than 
6,600 AML examinations. That total represents more than 10 limes fewer violations than the 
nearest Federal bank regulator, despite the OCC’s having conducted nearly 1,800 more AML 
examinations. See 2007-201 1 Federal Banking Agaicy Bank Secrecy Act Compliance 
Examination, “Consolidated Quarterly Reports,” PSI-FinCEN-04-0063-296. [Sealed Exhibit] 
OCC’s “Examiner’s Guide to Problem Bank Identification, Rehabilitation, and Resolution,” 
page 24. http://www.occ.gov/publications/publications-by-type/other-publications- 
reports/prbbnkgd.pdf 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00573 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



560 


VerDate Nov 24 2008 


386 

statute and regulation.'®^'' An OCC AML examiner wrote the following 
about the problem: 

“Over the past three years, HBUS has had three BSA/AML 
Officers. Ms. Lesley Midzain is the current Board designated 
BSA/AML Officer for HBUS. She has held this position since 
April 2008. She has limited BSA/AML knowledge and industry 
experience and is not considered qualified for the position of 
BSA/AML Officer. This finding is based on numerous interviews 
by both OCC HSBC resident staff and other OCC large bank staff 
She has not enhanced her knowledge of U.S. law related to 
BSA/AML through formal training, other than internal web based 
training. It should be noted that even with limited knowledge of 
U.S. law and regulation, Ms. Midzain has assumed responsibility 
for both BSA/AML and Compliance. 

We communicated to the HBUS President and to Ms. Janet Burak, 
Chief Compliance Risk Officer that Ms. Midzain does not possess 
the technical knowledge or industry experience to continue as the 
BSA/AML Officer. Ms. Midzin’s knowledge and experience with 
BSA/AML risk is not commensurate to that of other BSA/AML 
positions held at other large national banks.”’*®^ 

The FFIEC AML Examination Manual states that “the 
appointment of a BSA compliance officer is not sufficient to meet the 
regulatory requirement if that person does not have the expertise, 
authority, or time to satisfactorily complete the job.”’®®^ The OCC 
viewed HBUS as a large complex financial institution with numerous 
high risk aspects that required a fully qualified AML expert to 
administer the bank’s AML program. 'To express the urgent need for the 
bank to hire a qualified AML director, the OCC could have cited HBUS 
for violating the law, but chose instead to issue a Supervisory Letter 
listing the issue as an MRA.'*^^ The bank responded by keeping the 
targeted official as its head of compliance, hiring a new AML director, 
and requiring that new AML director to report to the compliance head 
with no AML expertise. The new AML director left after about nine 
months.'®^® 

AML Internal Controls over Pouch Services. In another 
instance, in January 2007, an OCC examination identified serious AML 

See 31 U.S.C. § 5318(hXlXB) and 12 C.F.R. Section 21.21(cX3). 

5/15/2009 OCC Memorandum, “Compliance Management Exam,” OCC-PSI'0i438U5. 

1856 4/29/2012 FFIEC BSA/AML Examination Manual, “BSA/AML Compliance Program - 
Overview - BSA Compliance officer,” at 36, 

http://www.ffiec.gOv/bsa_aml_infobase/documents/BSA_AML_Man_2010.pdf. 

1857 7 / 7/2009 OCC Supervisory Letter 2009-01 “Compliance Management Examination.” OCC- 
PSI-00107631. 

5878 6/14/2006 OCC Supervisory Letter HSBC-2006-16, “Compliance Review Unit 
Examination,” OCC.PSl-00000341 (deeming problems with the independent testing pillar 
component inadequate to justify citing a legal violation]). (Sealed Exhibit] 
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problems with HBUS’ pouch services, which appeared to be operating 
with virtually no compliance with AML standards. Pouch services 
involve clearing U.S. dollar monetary instruments such as travelers 
cheques, bank cheques, and money orders. The AML problems included 
a lack of monitoring for suspicious activity, insufficient policies and 
procedures, and a lack of AML controls. As a result, the OCC 
broadened its examination to pouch services at other HBUS business 
units, including the PCM, International Private Banking, Domestic 
Private Banking and retail banking departments. That examination 
uncovered additional significant AML deficiencies that had been 
identified in examinations of other business lines, involving pillar 
program components such as lack of AML internal controls, training, 
and independent testing, with systemic implications.'*^’ The 
examination concluded with respect to HBUS pouch services: 

“The results of this examination combined with the history of past 
examinations (i.e. significant number of MRAs) are an indication 
that program goals and objectives have not been met The board 
needs to establish a program with defined elements for policies and 
procedures, systems and controls, training and independent audit to 
ensure unwarranted risk is being identified, monitored and 
mitigated to an acceptable level.”'**'’ 

The OCC examiners recommended that a formal enforcement 
action be brought against the bank to compel immediate correction of 
the problems in pouch services. However, after researching OCC 
standards for bringing enforcement actions, the examiners determined 
that, to issue a Cease and Desist Order, the agency was required, in part, 
to cite a violation of law.'**' Although OCC written guidance states that 


4/10/2007 OCC Memorandum “BSA/AML Examination - HSBC, USA, NA - Pouch 
Activities,” OCC-PSI-00899202 at 202 and 204 (reviewing pouch activities at the International 
Private Bank, Domestic Private bank, retail banking, and Payments and Cash Management 
business units). 

'®^Md.at9. 

’**'’*6/14/07 OCC Memorandum from Joseph Boss to Anthony Dilorenzo, “Pouch Exam,” OCC- 
PSl-0 1 298625; 7/3/07 OCC memorandum from Elsa de la Garza to Anthony Dilorenzo, 
“BSA/AML Examination - HSBC, USA, NA - Pouch Activities,” OCC-PSI-0087773 1 . See 
also OCC Policies and Procedures Manual 5310-3 (Rev). The June 14, 2007 memorandum 
described the OCC’s enforcement standards as follows: 

“There are two types of enforcement actions prescribed by the OCC. They are ‘informal actions’ 
and ‘formal actions.’ PPM 5310-3 (Rev.) describes the criteria for considering whether or not an 
enforcement action should be taken against a financial institution. Generally, the nature, extent, 
and severity of the bank’s problems will dictate the necessity for an action. The nature, extent 
and severity of a bank’s problems can range from identified weaknesses that arc considered 
narrow in scope and correctible to significant and substantial problems and weaknesses that 
jeopardize the safe and sound operation of the bank. In all instances a number of other factors 
must be taken into consideration before the imposition of an action. Some of those factors are: 

• Overall rating of the financial institution. 

• Financial condition of the financial institution. 

• Past cooperativeness of management. 
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one criteria for a formal enforcement action is whether: “[t]he bank lacks 
a BSA compliance program that covers one or more of the required 
program elements (interna! controls, training, audit, responsible 
personnel),” OCC personnel told the Subcommittee that the OCC had 
interpreted this language to allow a violation of law to be cited only for a 
complete program failure, and not when a single pillar or even multiple 
pillars of an AML program are inadequate.'*'’^ The examiners 
determined that they could not conclude that HBUS’ entire AML 
program was ineffective at that time. Accordingly, despite the 
significant AML deficiencies found in connection with HBUS pouch 
services, the OCC examiners concluded they could not cite a violation of 
law and so withdrew their request for a formal enforcement action. 
Instead the OCC included a single MRA on pouch services in a Report 
of Examination sent to the bank in July 2007,'*'’^ and five MRAs in a 
Supervisory Letter sent to the bank two months later. 

The OCC’s decision not to cite violations of law or take formal or 
informal enforcement action to correct severe AML deficiencies that 
contravene key AML statutory requirements makes no sense. An 
effective AML oversight effort must be able to act in just such 
circumstances, and premise an enforcement action on any statutory 
requirement, including that financial institutions have AML internal 
controls, an AML compliance officer, AML training, and independent 
testing, without having to find that virtually all four statutory 
requirements are being violated at the same time. 


• Management’s ability and willingness to correct identified problems in appropriate 
timeframes .... 

The examiner also identified the standards used to assess whether or not a violation may be cited: 

“As stated earlier, in order for the OCC to take any form of enforcement action, certain criteria 
must be considered. This also applies in considering citing a violation under 1 2 CFR 21.21. For 
citing a violation of 12 CFR 21.21 the following must be evident: 

• The bank lacks a BSA compliance program that covers one or more of the required 
program elements (internal controls, training, audit, responsible personnel); 

• Fails to implement a written BSA compliance program; 

• Exhibits significant BSA compliance program deficiencies coupled with aggravating 
factors such as evidence of widespread, blatant structuring or money laundering, 
insider complicity, repeat failures to file currency transaction reports or suspicious 
activity reports, or other substantia! BSA violations; or 

• Fails to respond to supervisory warnings concerning significant BSA compliance 
program deficiencies.” 

Subcommittee interviews of OCC James Vivenzio (3/15/2012), Joseph Boss (1/30/2012), 
and Elsa de la Garza (1/9/2012). 

1863 7/24/2007 OCC Report of Examination of HBUS, for the examination cycle ending March 
31, 2007, OCC-PSI-00304077. [Sealed Exhibit] 

iS64 9 / 13 / 2 Q 07 OCC Supervisory Letter HSBC-2007-01, “Pouch Services and Middle Market,” 
OCC-PSI-00000391. [Sealed Exhibit] One exmniner informed the Subcommittee that, even 
though they determined the AML deficiencies in HBUS’ pouch services did not meet the OCC’s 
enforcement guidelines, he still felt that an enforcement action should have been initiated. 
Subcommittee interview of Joseph Boss, (1/12/12 and 1/13/2012). 
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Federal bank regulators other than the OCC routinely cite 
violations of law when a bank fails to comply with one or more of the 
pillar components of an AML program. By declining to do the same, 
the OCC is diluting the importance of the four components; it is 
essentially sending a message that a bank can lack one or more of the 
components as long as its entire AML program is not compromised. In 
addition, by restricting itself to MRAs rather than citations of legal 
violations, the OCC is unnecessarily diluting its ability to send a strong 
message that a bank needs to promptly correct a program element, such 
as an inadequate AML compliance officer or a set of missing AML 
controls. By limiting its examiners to using MRAs instead of citing 
statutory violations, the OCC is, in effect, allowing particular problems 
to fester, as happened in the HBUS case. In addition, by restricting 
citation of individualized program violations, the OCC is impairing the 
ability of examiners to pursue formal enforcement actions, which is 
exactly what happened in the case of the HBUS pouch activities. 

Finally, failing to identify violations of laws and regulations may 
mislead or confuse bank management. Violations are addressed 
prominently in the Reports of Examination and Supervisory Letters. A 
bank’s directors and managers should be aware of apparent violations of 
law, given their potentially punitive nature and the bank’s responsibility 
to initiate appropriate corrective action. Violations that are instead 
reduced to MRAs may mislead a bank by omitting references to specific 
laws or regulations; downplay the importance of the targeted activity; 
and insulate the bank’s ratings from downgrades that would spur 
corrective action. Examiners evaluate bank ratings, including the 
CAMELS management rating and its consumer compliance rating on a 
number of factors, including management’s compliance with laws and 
regulations, its responsiveness to previously reported violations of law, 
MRAs, and audit findings. Removing violations from that equation 
enables a bank to obtain more favorable ratings than it may deserve. To 
strengthen its AML oversight, the OCC should bring its practice into 
alignment with all other Federal bank regulators and allow examiners to 
cite violations of law when a bank fails to comply with one or more of 
the four statutorily mandated components of an AML program. 

(3) Using Narrowly Focused Exams 

A third AML oversight practice of concern involves the use of 
narrowly focused AML examinations that don’t also include an 
examination of a bank’s overall AML program. At HBUS, the OCC 
designed an AML supervisory strategy to examine the institution over a 
three year cycle using targeted examinations. HBUS had 32 different 
business units with varying degrees of AML risk, all of which were to be 


See 2007-201 1 Federal Banking Agency Bank Secrecy Act Compliance Examination, 
“Consolidated Quarterly Reports,” PSl-FinCEN-04-0063-296. [Sealed Exhibit.] 
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examined. The plan called for business units with the highest AML 
risks to be examined first. According to the examiners, the mandate was 
to examine all 32 business units over a three-year cycle, taking 8 to 10 
weeks to examine a business unit from start to finish, using Supervisory 
Letters to communicate examination results.'*** According to the plan, 
OCC examiners would not return to a previously examined area until it 
had examined all 32 business units, and the adequacy of management’s 
corrective actions for any MRAs would be reviewed once the entire 
institution had been examined. 

The OCC had to depart from this plan given the significant AML 
risks uncovered at some business units. '**^ In addition, with only two 
full-time AML examiners dedicated to HBUS, and given the complexity, 
breadth, and volume of its high risk activities, the OCC had difficulty 
meeting the three-year objective but strived to achieve it.'*** The result 
was a series of narrowly focused, targeted examinations. As each 
examination concluded, a Supervisory Letter was issued with MRAs or 
recommendations addressing the AML issues at each specific business 
unit. 


This examination approach, which failed to provide any 
mechanism for also taking a holistic view of the bank’s AML program, 
raised at least three issues in the HBUS setting: it impeded 
understanding of fundamental problems with the bank’s AML program 
and allowed systemic problems to fester, it required duplicative efforts, 
and it made verification of corrective action more difficult. First, the 
narrow focus of the individual examinations at HBUS made it difficult 
for OCC examiners to understand the bank’s AML program as a whole, 
to detect systemic problems, or make the case for correcting them. 
Instead, the OCC continued to review individual business units on a 
serial basis, addressing the AML problems uncovered in each 
examination. As a result, the OCC requested and HBUS provided 
narrow corrective actions, allowing more systemic problems to go 
unaddressed for years. In addition, it required OCC examiners to address 
similar AML problems in multiple business units on a repetitive basis. 

HSBC Affiliate Issues Missed. The limitations of this approach 
can be seen in the way in which targeted reviews of key bank areas, such 
as correspondent banking and the Payments and Cash Management 
(PCM) department, missed major AML deficiencies involving HSBC 
affiliates. It was only in 2010, when OCC AML examiners were 

Subcommittee interview of Joseph Boss (1/30/2012), and Elsa de la Garza (1/9/2012). 

The OCC revisited, for example, the Global Banknotes unit in 2005, 2006, 2007, 2008, and 
2009 and targeted exams of Embassy Banking in 2005, 2006 (three times), 2007, 2008, and 
2009. 

AML examiners told the Subcommittee that two additional full time AML examiners were 
needed to meet the three-year cycle at HBUS, but that staff dedication would have been 
disproportionate to AML examination staffing at other large national banks. While they were 
assisted at times by other examiners, the vast bulk of the AML examinations at HBUS were 
carried out by two OCC AML examiners. 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00578 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



565 


VerDate Nov 24 2008 


391 

allowed to take a broad-based review of HBUS’ AML program, that the 
examiners focused on the fact that HSBC affiliates played a large role in 
HBUS’ correspondent banking and PCM businesses, but were not 
subjected to the same AML controls as other clients. The OCC 
examiners discovered, for example, that HBUS did not conduct any due 
diligence review of HSBC affiliates or attempt to evaluate their AML 
risks. The OCC examiners also discovered that HBUS had stopped 
monitoring all banknotes business with HBSC affiliates for a three-year 
period, from mid-2006 to mid-2009, even though those transactions 
involved billions of dollars of cash and high risk countries like 
Mexico.'*’® The OCC also learned that HBUS failed to conduct routine 
account monitoring for dozens of affiliates located in lower risk 
countries. Still another problem was that OCC examiners determined 
that HBUS was using an inappropriate process to assess country risk, 
and was assigning low risk ratings to countries such as Mexico, that 
should have been designated high risk. Narrowly focused exams, 
without more, simply didn’t identify affiliates as an important AML 
concern that cut across multiple business lines. 

AML Staffing Issues Fragmented. A second example involves a 
series of three AML examinations conducted by the OCC in early 2009, 
disclosing insufficient staffing to conduct AML monitoring activities in 
three critical business units, OF AC compliance, Correspondent Banking 
and the Payments and Cash Management (PCM) department. OCC 
examiners looked at each business unit individually and the Examiner- 
in-Charge issued three different Supervisory Letters that questioned the 
bank’s staffing levels and resource commitment in each unit for AML 
purposes.'*” By conducting three different examinations with no 
overarching analysis of AML staffing issues across the bank, the OCC 
failed to identify inadequate AML staffing as a systemic issue and deal 
with it in an efficient and effective basis. Instead, each Supervisory 
Letters focused on a single business line or functional area under review, 
with no cross references to the other areas having the same problem, at 
the same time. The recommendations contained in two of the 
Supervisory Letters, issued in March 2009, contained nearly identical 


See 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
Laundering (‘BSA/AML") Examination - Program Violation (12 U.S.C. § 1818(s); 12 C.P'.R. § 
21.21),” OCC-PSI-00864335. [Sealed Exhibit] 

In the summer of 2009, OCC examiners learned for the first time that affiliates’ banknotes 
activity was not monitored when examining banknotes activity involving an HSBC affiliate in 
Mexico. The key law enforcement meeting took place the next month, and the banknotes 
examination was then expanded to look at other AML issues. The banknotes monitoring 
problem was included in the Supervisory Letter issued a year later identifying a host of AML 
problems at HBUS. See 8/12/2009 OCC memorandimi, “Banknotes Issues,” OCC-PSI- 
00917881-882. 

1871 1/20/2009 OCC Supervisory Letter HSBC-2008-41, “Office of Foreign Asset Control 
Examination,” OCC-PSI-00000434; 3/3/2009 OCC Supervisory Letter HSBC-2008-34, 
“Correspondent Banking BSA/AML Examination,” OCC-PSI-00107618; 3/18/2009 OCC 
Supervisory Letter HSBC-2008-40 “Payment and Cash Management BSA/AML Examination,” 
OCC-PSI-00I07624. [Sealed Exhibits.] 
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wording, including the same misspelled word.**^^ As a result, the 
staffing issues were addressed in a fragmented manner in three different 
recommendations rather than in a single MRA focusing on the broader 
problem. 

It was not until 2010, after the OCC directed its AML examiners in 
September 2009, to undertake a more holistic analysis of HBUS’ AML 
program that staffing was examined in a broader way. On March 3, 
2010, an OCC Supervisory Letter discussing the discovery of an HBUS 
backlog of over 1 7,000 unreviewed alerts noted that staffing concerns 
had been raised three times in 2009, and identified it as a Matter 
Requiring Attention by the HBUS Board: 

“In the past, HSBC has had other baeklogs, and we have expressed 
concerns over the course of our supervision about the levels of 
staffing and the qualifications of personnel assigned to eomplete 
reviews. ... 

In three Supervisory Letters last year, we expressed concerns about 
the levels of staffing dedicated to BSA/AML/OFAC compliance. 
These letters include the supervisory letter issued on January 20, 
2009 at the conclusion of our OF AC examination, the supervisory 
letter issued on March 3, 2009 at the conclusion of the 
correspondent banking examination, and the supervisory letter 
issued on March 1 8, 2009 at the conclusion of the Payment and 
Cash Management examination.”'*’'’ 

Even then, however, the MRA on staffing was narrowly targeted: 
“Management must ensure that a sufficient number of qualified 
professionals are engaged to address the 2,488 alerts within the High 
Risk Monitoring Unit that were generated six or more months ago.” Six 
months later, when the OCC concluded its broad-based examination of 
the HBUS AML program as a whole and issued a 3 1 -page Supervisory 
Letter analyzing key problems, inadequate and unqualified AML 
staffing was finally presented as a systemic problem across the bank.'*’^ 

We Didn’t Know What We Had. One of the OCC AML 
examiners immersed in the HBUS AML examinations for years told the 
Subcommittee that, upon learning of various law enforcement concerns 
about HBUS in September 2009, “we’d been doing all of these targeted 


Compare 3/3/2009 OCC Supervisory Letter HSBC-2008-34, “Correspondent Banking 
BSA/AML Examination,” OCC-PSI-00107618, at 619. with 3/18/2009 OCC Supervisory Letter 
HSBC-2008-40 “Payment and Cash Management BSA/AML Examination,” OCC-PSI- 
00107624, at 625. [Sealed Exhibits.] 

1873 7/7/2009 OCC Supervisory Letter HSBC-2010-03,“Backlog of Monitoring Alerts and 
Enhanced Due Diligence Requests,” OCC-PSI-0085I542. [Sealed Exhibit.! 

1878 jd 

1875 9/13/2010 OCC Supervisory Letter HSBC-2010-22, “Bank Secrecy Act/Anti-Money 
LaunderingCBSA/AML’) Examination-Program Violation (12 U.S.C. § 1818(s): 12C.F.R. § 
21.21),” OCC-PSI-00864335, at 337-338. [Sealed Exhibit.] 
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examinations and we didn’t know what we had.”’*^'’ It apparently took 
that jolt from law enforcement for OCC senior personnel to authorize the 
OCC AML examiners to develop a broad-based plan to look at the 
HBUS AML program as a whole, tie various problems together, and 
identify the most important AML deficiencies requiring correction. 
While the narrowly focused AML reviews were important to examine 
particular business units and identify specific issues within those offices, 
such examinations were incomplete and ineffective without a broad- 
based look at the bank’s AML program as a whole to identify 
fundamental and cross-cutting issues critical to an effective AML effort. 

Still another problem created by the narrowly focused AML 
examinations was that they complicated efforts by OCC examiners to 
verify that corrective actions mandated in OCC MRAs were 
implemented before closing out an MRA. One issue was that examiners 
weren’t supposed to return to re-examine the relevant business unit until 
much later, theoretically after completing a three-year review of all 32 
HBUS units. In reality, the examiners had to ignore that aspect of the 
examination plan to verify that corrective action was taken. But even 
then, validation of the effectiveness of the remedies often required 
duplicative, repetitive efforts since many of the same problems had to be 
analyzed in multiple, individual business units. In addition, while 
HBUS and the OCC examiners were focused on AML problems in 
individual business lines and services, fundamental problems began to 
build up, including backlogs of unreviewed alerts, collections of 
unmonitored accounts, and overly favorable treatment of HSBC 
affiliates. 

The HBUS case history provides ample evidence that a stovepipe 
AML supervisory strategy that focuses solely on serial examinations of 
individual business lines or services without also examining a bank’s 
AML program as a whole creates a fragmented and inefficient view of a 
bank’s AML program, wastes resources, encourages piecemeal 
corrective actions, fails to identify fundamental problems which are 
allowed to fester, and diminishes the usefulness of AML examination 
findings and corrective actions. To strengthen its AML oversight, the 
OCC should require its AML examiners to combine narrowly focused 
AML examinations with at least an annual examination of key elements 
of the bank’s AML program as a whole. 

(4) Failing to Use Enforcement Actions 

The HBUS case history, like the Riggs Bank case history before it, 
betrays an ongoing reluctance by the OCC to use either informal or 
formal enforcement actions to compel AML improvements, even when a 
bank is cited for years for significant AML problems. 


Subcommittee interview of Joseph Boss (1/30/2012). 
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The OCC identified serious AML deficiencies at HBUS for six 
years in a row, with the most AML-related MRAs of any bank it 
supervised, without considering or initiating a nonpublic, informal 
enforcement action. The reluctanee to use informal enforcement actions 
appears to be a cultural preference rather than the result of any guidance 
or policy. As mentioned earlier, the OCC disclosed to the Subcommittee 
that it has taken only eight informal enforcement actions against large 
banks for AML deficiencies since 2005.’*’’ This approach is especially 
disconcerting in the HBUS case, since the bank expressed a willingness 
to work with the regulator to implement reforms. Informal remedies - 
which include requesting that the finaneial institution issue a safety and 
soundness plan, board resolution, commitment letter, or memorandum of 
understanding pledging to take specific correction actions by a certain 
date - offer useful tools that provide an interim step before a formal 
enforcement order that is public and carries legal penalties. These tools 
can be effective, but were not even considered by the OCC in the HBUS 
AML context. 

The HBUS case history also discloses a reluctance on the part of 
the OCC to use formal enforcement actions to correct AML deficiencies. 
Two examples involve AML examiners’ who twice recommended 
issuing a Cease and Desist Order against HBUS after finding severe 
AML deficiencies in the bank’s pouch activities and Embassy Banking 
unit, but no enforcement action followed. In the case of the pouch 
activities, as discussed earlier, despite overwhelming evidence of 
substantial AML deficiencies, two OCC AML examiners agonized over 
whether they could make the case for an enforcement action and 
ultimately reversed their initial recommendation for a Cease and Desist 
Order. In the case of the Embassy Banking unit, as discussed earlier, 
again despite overwhelming evidence of the bank’s failure to implement 
effective AML controls, an OCC examiner was told point blank by his 
superiors, with no further explanation, that no Cease and Desist Order 
would be issued. The failure of OCC officials to seriously consider a 
formal enforcement action in either of these two extreme cases 
demonstrates an enforcement problem. 

The OCC’s AML enforcement guidance is clear in stating: “Even 
when the facts do not support citation of a BSA compliance program 
violation, the OCC may take a formal or informal enforcement action to 
ensure action.”'*’* In addition, the OCC website explains: 

“The OCC may take enforcement actions for violations of laws, 

rules or regulations, final orders or eonditions imposed in writing; 


Subcommittee briefing by OCC legal counsel (7/13/2012). 
lars “Process for Taking Administrative Enforcement Actions Against Banks Based on BSA 
Violations,” OCC 2005-45 Attachment Appendix A to OCC 2004-50. OCC-PSl-00176030. 
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unsafe or unsound practices; and for breach of fiduciary duty by 

institution-affiliated parties (lAP).”'*^ 

These statements seem to provide the regulatory foundation and 
flexibility needed for the OCC to act quickly to address serious AML 
deficiencies, yet the HBUS case history demonstrates that the OCC 
remains hesitant to act, even in the face of severe AML problems and 
even after years of AML MRAs on record. To strengthen its AML 
oversight, the OCC should give strong direction to its examiners about 
the availability of enforcement options and create new mechanisms to 
require bank supervisory, enforcement, and legal personnel to review the 
need for formal or informal enforcement actions at banks with severe or 
longstanding AML deficiencies. 

(5) Issuing Weak Supervisory Letters 

A final Issue involves the OCC’s use of Supervisory Letters. The 
HBUS case history indicates these letters do not always accurately 
convey examination findings or the need for corrective action. 

Supervision Letters are the means by which an OCC Examiner-in- 
Charge officially informs a bank of examination findings, apparent 
violations of law, and MRAs warranting management attention. 
Violations and MRAs require corrective action by bank management; 
“recommendations” do not. In theory, OCC examination findings and 
changes to resolve AML deficiencies should be conveyed accurately in 
the related OCC Supervisory Letters sent to bank management; in 
reality, the HBUS case history showed that some Supervisory Letters 
muted criticisms or weakened recommended reforms. 

PCM Examination. One striking example of the discrepancies 
that arose between examination findings and Supervisory Letters 
involved the 2007 examination of HBUS’ Payment and Cash 
Management (PCM) operations. PCM specialized in global cash flow 
coordination, using such tools as wire transfers, cash letters, and 
controlled disbursement services. The volume of PCM activity at 
HBUS, given the bank’s size, global reach, and appetite for risk, was 
huge both in terms of dollars and number of transactions. In 2009, for 
example, PCM processed 30.2 trillion wire transfers involving $94.5 
trillion.’**" 

In December 2007, the OCC completed an examination of AML 
controls in PCM operations and found that the bank was not adequately 
monitoring PCM transactions.^**^ The OCC examination noted 

http://www.occ.gov/topics/laws-regulations/enforcement-actions/index-enforcement' 

actions.html 

1880 9/13/2010 OCC Supervisory Letter HSBC-2010-22, "Bank Secrecy Act/ Anti-Money 
Laundering (‘BSA/AML’) Examination -Program Violation (12 U.S.C. § 1818{s); 12 C.F.R. § 
21.21 ),” OCC-PSI-0086433 5 . [Sealed Exhibit.] 

1881 12/7/2007 OCC memorandum “BSA/AML Examination - Payment and Cash 
Management,” OCC-PSI'01263586, 
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fundamental flaws in the bank’s AML controls and monitoring systems 
to identify suspicious activity as well as actions to clear alerts without 
adequately reviewing the circumstances and filing required SARs. It 
also recited several examples of suspicious activity and criticized the 
bank’s Compliance Review Unit which is supposed to conduct 
independent testing of HBUS’ AML controls but had not reviewed the 
PCM operations in three years. The examination findings included the 
following: 

• “Systems and Controls are less than satisfactory and do not 
provide an appropriate level of monitoring for suspicious and 
unusual activity for all of the activities in the business unit. 

• In reviewing customer activity, there were several accounts 
which wtirranted additional monitoring and/or in which 
monitoring practices were inadequate.” 

The examination also identified three MRAs that should be brought to 
the attention of HBUS’ board of directors.'**^ 

The Supervisory Letter signed by the OCC Examiner-in-Charge 
and sent to HBUS was issued four months later, on April 21, 2008, and 
conveyed a very different message about PCM operations, in part 
because HBUS had begun to correct the identified problems. The 
Supervisory Letter stated that the examination of PCM operations found 
that “the quality of risk management systems is satisfactory”; 
“compliance with legal and regulatory requirements is satisfactory”; and 
“the quality of PCM compliance risk management is satisfactory.” It 
continued: “Policies and procedures are adequate; however, control 
systems needed to detect and report suspicious activity warrant 
improvement.”'**^ These mild statements made in the spring of 2008, 
are worlds apart from the blunt examination findings issued in 
December 2007. Despite its language, the Supervisory Letter did 
include the three MRAs which, together, implied a significant 
breakdown in the bank’s internal controls. 

Embassy Banking Examination. A second example involved 
HBUS’ Embassy Banking examination. As discussed earlier, in January 
2008, after being contacted by two former employees, OCC conducted 
an examination and confirmed a wide array of troubling practices in the 

Id. 

The three MRAs were: "1) management needs to improve client monitoring and analysis in 
order to obtain an accurate view of potential risk. When an alert is generated, a more thorough 
review of available information needs to be initiated; 2) management must ensure that CRU 
[Compliance Review Unit] appropriately identifies and accurately reports on all issues, including 
MRAs. In addition, MRA follow-up by CRU needs to address all corrective action and include 
testing to determine the adequacy of actions taken; and 3) management needs to ensure that 
decisions related to not filing SARs are documented and maintain this information in a log.” Id. 
1884 4/21/2008 OCC Supervisory Letter HSBC-2007-24, “Payment and Cash Management 
BSA/AML Examination,” OCC-PSI-00107597. [Sealed Exhibit.] 

‘^^^Id.ati. 
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Embassy Banking unit. They included significant internal control 
problems, suspicious activity involving two high risk embassy accounts, 
noncompliance with bank policy, inadequate due diligence and 
monitoring, transactions being conducted without OFAC screening - 
describing, in short, some of the most egregious AML deficiencies 
recorded in any HBUS AML examination. *** On May 20, 2008, the 
OCC examiner completed a Conclusion Memorandum with the 
examination findings, stating that the Embassy Banking’s “AML 
program is not effective in identifying and mitigating risk, especially 
considering the nature of its clientele and the types of products and 
services it provides.”'**’ The memorandum recommended issuance of a 
Cease and Desist Order to ensure immediate remediation of the AML 
risks. The OCC examiner also discussed the recommendation for a 
formal enforcement action with the Examiner-in-Charge, but was 
informed that no Cease and Desist Order would be issued. HBUS was 
verbally informed of the examination findings and immediately began 
work to address the problems. In July, a follow-up examination looked 
at the bank’s remedial efforts and found that progress had been made.'*** 

On September 4, 2008, a Supervisory Letter summarized the 
March and July examinations was sent to HBUS.'**’ The letter’s mild 
tone failed to convey any of the egregious AML deficiencies or 
suspicious activity uncovered during the examinations, using instead 
bland language that conveyed minimal concern or urgency. The letter 
began: 

• “The quality of risk management is satisfactory, but needs 
improvements in certain areas. 

• Compliance with legal and regulatory requirements is 
satisfactory and no violations of law or regulation were cited at 
this examination. 

• We noted several deficiencies in the GIB BSA/AML program 
that warrant the immediate remedial attention of senior 
management.”'*’" 

The letter continued with a string of positive statements: “Management 
is competent and capable.” “The automation of existing systems and 
controls, together with current staff levels, will ensure a timely and 


“ See also earlier discussion; 5/20/2008 OCC Memorandum, “Government and Institutional 
Banking,” OCC-PSl-00928614; 10/8/2008 OCC Memorandum “Royal Embassy of Saudi Arabia 
(RESA) March 2008 Examination Conclusions”, OCC-PSI-01434609; 4/3/2008 OCC 
Memorandum “Libyan Relationship Review,” OCC-PSI-01434593. 

5/20/2008 OCC Memorandum “Government and Institutional Banking”, OCC-PSI- 
00899215. 

See 8/14/2008 OCC Conclusion Memorandum, “Government and Institutional Banking 
Uodate,” OCC-PSI-00899227. 

^ 9/4/2008 OCC Supervisory Letter HSBC-2008-07, “Government and Institutional Banking 
BSA/AML Examination,” to HBUS, OCC-PSl-00107607. [Sealed Exhibit.] 

Id. at OCC-PSl-00 1 07607-608. 
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efficient process for monitoring accounts “Currently, monitoring 
remains backlogged; however, management has developed a plan to 
bring the monitoring up to date.” “Current systems and controls are 
satisfactory.” “Compliance Risk is stable.” 

The Supervisory Letter continued: 

“Our current review has noted a marked improvement to GIB’s 
BSA/AML program from the second quarter of 2008 examination. 
Management has implemented corrective action in most of the 
areas of concern. The new GIB Compliance manager has 
implemented numerous objectives to ensure that potential risk is 
readily identified and mitigated to acceptable levels. 

There are still some issues with system and controls, resources and 
alert monitoring; however, based on the current review those 
deficiencies are noted as MRAs.”'*’’ 

The Supervisory Letter then reduced the AML examiner’s request for a 
formal enforcement action against the bank to two narrow MRAs asking 
HBUS to: (1) “develop plans with milestones to further define and 
automate the risk identification and monitoring functions,” and, in the 
interim, “continue to enhance methods to reduce weaknesses associated 
with manual intervention” and prevent “unauthorized changes” to a 
spreadsheet with account information; and (2) cure a backlog of 1,800 
alerts, some dating back to 2007, by September 1 5, 2008.'*® 

The September Supervisory Letter simply did not convey the 
urgency or severity of the examination findings from several months 
earlier regarding AML problems in the Embassy Banking department. 

In addition, while it presented two MRAs requiring corrective action, its 
mild tone and lack of detail may make bringing an enforcement action 
difficult if the bank fails to remedy the identified problems in a timely 
fashion. 

AML Staffing Problems. A third example of discrepancies 
between examination findings and the Supervisory Letters that follow 
involved staffing issues. 

In 2006, two OCC Supervisory Letters included MRAs that 
required HBUS to increase AML staffing in its Embassy Banking unit to 
monitor transactions'*®^ and in its Compliance Review Unit to conduct 
internal reviews of the bank’s AML controls. In 2007, another 
Supervisory Letter again included an MRA about increasing AML 

Id. at 609. 

Id. at 610. 

1/30/2006 OCC Supervisory Letter to HBUS, OCC-PSI-00107529, at 534-35. [Sealed 
Exhibit.] 

6/14/2006 OCC Supervisory Letter HSBC-2006-16, “Compliance Review Unit 
Examination,” OCC-PSI-0000034I. [Sealed Exhibit] 
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staffing in the Embassy Banking unit.**’^ Two years later, in 2009, OCC 
AML examiners conducted examinations of HBUS’ OF AC Compliance 
unit. Correspondent Banking, and PCM department, and identified 
staffing issues at all three. In February 2009, the OCC examiners wrote 
an internal memorandum to the file recording a disagreement with their 
supervisor concerning staffing. In the memorandum, the examiners 
identified inadequate AML staffing as “a repetitive issue that is of 
concern” that “should be elevated to an MRA instead of a 
recommendation for the Correspondent Banking (March 3, 2009 
Supervisory Letter) and Payment and Cash Management examinations 
(March 18, 2009 Supervisory Letter).”'*’® The memorandum also noted 
that the two OCC examiners had discussed the issue with the OCC 
Examiner-in-Charge who disagreed with the examiners’ assessment, 
because “there are no violations being cited and staffing is a 
management decision.” The memorandum concludes: “Based on our 
growing concerns regarding Ms. Midzain’s qualifications to hold the 
position as BSA/AML officer, her lack of concern with our 
recommendations and a slow deterioration of the bank’s BSA/AML 
Program, [we] will recommend to EIC Belshaw that we complete a 
Compliance Management examination to assess BSA management as 
soon as possible.” 

The Examiner-in-Charge sent out three Supervisory Letters related 
to the examinations that had been conducted. Each reduced the 
requested MRA down to a recommendation that “management should 
consider a review of current and immediate staffing.” At that point, the 
OCC had identified staffing problems in five business units through six 
exams over a period of four years, but the most recent Supervisory 
Letters treated the need to increase AML staffing as a recommendation 
rather than an MRA requiring corrective action. While it is the function 
of an Examiner-in-Charge to make the ultimate decision on MRAs and 
recommendations, this example demonstrates a clear division between 
the Examiner-in-Charge and her staff and a refusal to take strong action 
by the more senior OCC official. 

In Washington, the OCC’s Large Bank Review Committee, which 
reviewed about six draft Supervisory Letters per year for HBUS and 
sometimes had a copy of the underlying examinations, also noted 
occasional discrepancies between the examination findings and draft 
Supervisory Letters. In addition, some LBRC members began to notice 
after the fact that some examinations had revealed more significant 
AML problems and criticism of HBUS operations than were conveyed 
by the approved Supervisory Letters to HBUS management. As a result, 
the LBRC now requires both the AML examiner’s Conclusion 


!S95 3/19/2007 OCC Supervisory Letter HSBC-2006-30, “Government and Imstitutiona! Banking 
BSA/AML Examination," OCC-PSI-00107567, at 569-570. [Sealed Exhibit.) 
im 2 / 5/2009 OCC Memorandum to files, “Staffing issue ~ Correspondent Banking,” OCC-PSI- 
00899201 . 
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Memorandum and the Examiner-in-Charge’s draft Supervisory Letter 
before it will begin a review of the draft letter.’*^’ This change should 
help reduce the discrepancies and ensure senior OCC officials have a 
more complete view of AML problems at the banks being examined. 

D. Analysis 

AML laws are not intended to protect bank customers or the bank; 
they safeguard the U.S. financial system and the nation as a whole. As 
the regulator of nationally chartered banks, which are among the largest, 
most complex, and global of U.S. banks, the OCC plays a critical role in 
ensuring AML compliance. It is the OCC that needs to ensure the U.S. 
affiliates of global banks function as well-guarded gateways that keep 
out risk rather than invite it in. 

To fulfill its AML obligations, the OCC needs to strengthen its 
AML oversight and revamp its AML supervisory and enforcement 
approach to bring them into closer alignment with other Federal bank 
regulators. Five reforms are key. First, it should treat AML deficiencies 
as a matter of safety and soundness, not consumer protection, and ensure 
ineffective AML management is taken into consideration when 
assigning a bank’s CAMELS management and composite ratings. 
Second, the OCC should allow its examiners to cite violations of law for 
individual pillar violations as well as program-wide violations. Third, 
the OCC should ensure that narrowly focused examinations are 
considered in tandem with examinations that take a holistic view of a 
bank’s AML program. Fourth, the OCC should make more use of 
informal enforcement actions and reconsider its standards for issuing 
formal enforcement actions to compel AML reforms. Finally, the OCC 
should instruct its Examiners-In-Charge to accurately reflect AML 
examination findings, without turning them into such mild 
recommendations that they mislead bank management into thinking their 
AML programs are functioning well, when they are not. Many OCC 
examiners see the problems; it is OCC supervisors and enforcement that 
need to act to strengthen the OCC’s AML oversight efforts. 


Subcommittee interview of James Vivenzio (3/15/2012). 
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35 

Prowtsions of the 2003 Written Asreement were terminated 2/6/2006 writh the above similar/systemic findinRS from the first seven BSA/AMt exams. 

a 

4/12/2006 

1Q06 Domesitc Pnvate Banking Exam 


0 


X 

X 








38 

9 

4/27/2006 

1006 GIB Exam 


1 











38 

10 

6/14/2006 

1Q06 Compliance Review Unit {CRU> Exam 


0 











42 

11 

7/13/2006 

1Q05 Trade Services Operations 


3 



X 








42 

12 

9/26/2006 

2006 London Global Banknote Exam 


0 


K 

X 








45 

13 

10/19/2006 

Retail Services Compliance Exam 


0 


X 









46 

14 

12/1/2006 

Metris Exam (Credit CardsI 


0 


X 

X 



X 





51 

15 

1/8/2007 

Taxoaver financial Services Compliance Exam 


2 











51 

16 

3/8/2007 

Corporate and Institutional Banking Exam 


1 

X 


X 



X 





SS 

17 

3/19/2007 

3006 GIB Exam 


0 


X 


X 


X 





58 

18 

5/27/2007 

3006 Retail Banking Exam 


7 


X 

X 



X 





61 

19 

3/29/2007 

4Q06 CAMP Review 


0 











62 

20 

5/22/2007 

OCC Visit W India 


0 


X 









62 

21 

6/17/2007 

CAMP Eo»ow-uo 

0 

0 











62 

22 

6/20/2007 

1Q07 Corporate Trust Exam 

0 

0 











62 

23 

8/6/2007 

2007 Internal Audit and CRU follow-up Exam 

0 

1 








X 



62 

14 

8/21/2007 

3007 London Banknote foHow-oo Exam 

0 

0 











52 

25 

6/21/2007 

3007 GIB f(^iow-up Exam 

0 

0 











62 

26 

9/13/2007 

Pouch Services and Middle Market Exam 


0 

X 

X 




X 





67 

27 

9/21/2007 

Investment BankWig Exam 


0 



X 



X 





70 

28 

9/21/2007 

Taxoaver finanti^ Services Foflow-op Exam 


0 

X 










71 

29 

lO/lS/2007 

Retail Swvices Compliance Exam 


1 











71 

30 

2/11/2008 

Card Services CompBance Exam 


3 


X 




X 





71 

31 

4/9/2008 

1008 Audit and CRU Exam 

2 

1 











73 

32 

4/21/2008 

4Q07 PCM Exam 

3 

0 


X 




X 

X 




76 

33 

6/2/2008 

Singapore/Hong Kong Banknotes Exam 

D 

2 











76 

34 

7/10/2008 

Taxoaver Finarrcial Services Compliance Exam 

1 

a 











77 

35 

9/4/2008 

2008 and 3CW8 GIB Exam 

2 

0 

X 

X 

X 

X 

X 

X 





79 

36 

1/20/2009 

4008 OFAC Exam 

0 

1 




X 







79 

37 

1/Z2/Z009 

3QOT Pouch Foliow-op Exam 

0 

0 











79 

38 

3/3/2009 

4008 Correspondent Banking Exam 

0 

2 




X 







79 

39 

3/18/2009 

4Q08 Private Banking Exam 

2 

1 


X 




X 





81 

40 

3/18/20CS 

4008 PCM Exam 

0 

1 




X 







81 

41 

5/27/2009 

Taxpaver Financial Services Compliance Exam 

0 

0 











81 

42 

6/24/2009 

2009 GIB Fpilpw-up Exam 

1 

3 


X 




X 

X 




82 

43 

7/7/2009 

Compliance Manntement Exam 

1 

0 









X 


83 



TOTALS 

83 

30 

10 

19 

13 

8 

2 

21 

11 



1 



Prepared by the U.S. Senate Permanent Subcommittee on InvesHgations, July 2012. 
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HBMX Compliance Failures 

“There is no recognisable compliance or money 
laundering function” 


2005 


“Fabricated records of certain mandatory anti- 
money laundering meetings” 


“What is this, the School of Low Expectations 
Banking?” 


“There were allegations of 60% to 70% of 
2008 laundered proceeds in Mexico [going] through 
HBMX” 

“What I find most frustrating is the way in which 
2008 new issues constantly emerge however much time 
is spent with HBMX.” 


2009 “[Ijnherent AML risk in Mexico is still very high” 


Prepared by the U.S. Senate Permanent Subcommittee on Investigations, July 2012 
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Disclosed v. Undisclosed Iranian U.S. Dollar Payments 
Sent by HSBC Foreign Affiliates to U.S. Banks, Including HSBC Bank USA 


10000 

9000 

8000 



2003 2004 2005 2006 2007 


Original Source: Deloitte March 29, 2012 presentation, HSBC OCC 8966143. 
Prepared by U.S. Senate Permanent Subcommittee on Investigations, July 2012 
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Excerpts from emails of David Bagiev 
re HBUS awareness of Iranian transactions, 2003-2004 

“I am not sure that HBUS are aware of the fact that HBEU are already 
providing clearing facilities for four Iranian banks, presumably including 
USD clearance.” 

-HSBC email, 10/21/2003, Exhibit 46, HSBC OCC 88733947 


“The complexity of the OFAC regulations, and the fact that HBUS were 
unaware that any arrangements existed with Iranian Banks, has made 
speedy resolution of this issue difficult.” 

-HSBC email, 03/1 1/2004, Exhibit 52, HSBC OCC 8873986 


“I suspect that HB US are not aware that payments may be passing 
through them. Do not believe that we can allow this situation to continue 
very much longer. . .” 

-HSBC email, 04/19/2004, Exhibit 53, HSBC OCC 8873994 
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RATINGS USED IN OCC REPORT OF EXAMINATIONS 

Composite Uniform Financial Institution Rating 

Component Ratings: 

Capital 
Asset Quality 
Management 
Earnings 

Liquidity - Asset/Liability Management 
Sensitivity to Market Risk 

Uniform Rating System for Information Technology 
Composite Uniform Interagency Trust Rating 
Uniform Interagency Consumer Compliance Rating 
Community Reinvestment Act Rating 


Prepared by U.S. Senate Permanent Subcommittee on Investigations, July 2012 
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31USC § 5318(h) 

“(h) ANTI-MONEY LAUNDERING PROGRAMS.— 

“(1) IN GENERAL. — In order to guard against money laundering through 
financial institutions, each financial institution shall establish anti-money 
laundering programs, including, at a minimum — 

“(A) the development of internal policies, procedures, and controls; 

“(B) the designation of a compliance officer; 

“(C) an ongoing employee training program; and 

“(D) an independent audit fiinction to test programs.” 
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HSBC to testify at U.S. Senate hearing 

:OJui2012 


In this letter to all employees, Group Chief Executive Stuart Gulliver explains why we have been asked to testify 
about past compliance failures and what we have done since to strengthen compliance and risk management. 

Dear Colleague, 

I am writing to you today as you may have seen reports that HSBC has been asked to testify before the U.S. Senate's 
Permanent Subcommittee on Investigations (PSI) on Tuesday 17 July. 

The hearing relates to ongoing investigations by the PSI into our compliance with U.S. regulations including Anti- 
Money Laundering laws, the Bank Secrecy Act and the Office of Foreign Assets Control sanctions. 

While we have previously disclosed these proceedings in our Annual Report and Accounts, the PSI hearing \mII be 
the first time that the details of these investigations are made public. It will certainly be the first time that the majority 
of employees have heard about these issues and i realise it will be a disappointment to you and your teams. 

While we have been cooperating with the relevant U.S. authorities since 2010 to improve the way we manage risk 
and ensure compliance, the PSI hearing may attract significant attention. It is also likely that there will be further 
enforcement actions from other U.S. authorities over the coming months. 

I wanted to ensure that you and your teams had enough information about these issues to be able to answer the 
questions that you may be asked by your customers, colleagues, friends and family. 

While we do not yet know the full details of the PSI investigation, the hearing on 17 July will undoubtedly reveal that 
In the past we fell well short of the standards that our regulators, customers and investors expect. 

During the hearing, we will acknowledge and apologise for our past mistakes. Between 2004 and 2010, our anti- 
money laundering controls should have been stronger and more effective, and we failed to spot and deal with 
unacceptable behaviour. 

It is right that we be held accountable and that we take responsibility for fixing what went wrong. As well as answering 
the subcommittee’s questions, we will explain the significant changes we have already made to strengthen our 
compliance and risk management infrastructure and culture. 

First, with a new strategy and leadership team, we have put In place a structure that makes HSBC easier to manage. 
The creation of four global businesses and ten global functions to replace a federated structure allows a coordinated 
and consistent approach to every part of our business, including compliance. 

Second, we have decided to apply high and consistent global standards wherever we work. The Group Standards 
Committee co-chaired by Group Chief Legal Officer Stuart Levey and Group Chief Risk Officer Marc Moses is 
working towards ensuring that the highest standards required in any part of the business will apply to every part of the 
business. 


Third, we are driving a change in culture so that our conduct matches our values. We have integrated our values into 
performance management, judging senior leaders on what they achieve and how they achieve it. because both 
matter to our reputation and share price. 


Permanent Subcommittee on Investigations 
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Alongside these changes, we wii) continue to Invest in a best-in-dass compliance function. We have increased the 
amount spent on compliance globally from US$200m in 2010 to US$400m today. Some 3,500 colleagues now work 
in HSBC compliance worldwide, with more than 1,000 of them In the U.S. 

There is no doubt that the coming weeks and months will be challenging, as past practices and compliance failures in 
certain parts of the firm come under serious scmtiny from regulators, investors, media, customers and employees. I 
know this will be a disappointment to the vast majority of you who have worked so hard to build and maintain our 
reputation throughout the turbulence of the past few years, and for that I apologise. I can also assure you that we will 
also keep you fully informed of these matters via the global staff website and other internal channels. 

While we cannot undo past mistakes, we wilt be judged on how we respond to this issue and demonstrate that we 
have learnt from it. You have my commitment that we will face up to our past mistakes, show our stakeholders what 
we have done to address the problems, and never let up in our absolute commitment to ensuring that every part of 
the firm meets the highest global standards and lives up to our values in the future. As the illicit actors seeking to 
exploit the financial system are constantly adapting their approach, we will need to be tireless in our own efforts to 
stop them. 

We will do this not just because regulators and authorities expect it of us, but more importantly, because we expect 
and demand it of ourselves. 

This is a fundamental part of achieving our strategy and becoming the world's leading international bank and remains 
a top priority for the Board and senior management team. 

Stuart Gulliver 
Group Chief Executive 

Contact Global 
Communications 

Pierre Goad Charles Naylor Global Co-Heads of Communications 

Larry Campbell Head of Publishing and Knowledge Management 

Jezz Farr Global Head of Communications, Global Banking and Markets 

Medard Schoenmaeckers Global Head of Communications, Global Private Banking 

Tim Harrison Global Head of Communications, Commercial Banking 

Malcolm Waiits Global Head of Communications, Retail Banking and Wealth Management 

Susanna Wilson Head of Communications, Corporate Sustainability 

Phil Askham Global Head of Globa! Functions Communications 

Margrit Chang Regional Head of Media Relations, Asia Pacific 

Andy Berry Regional Head of Media Relations, UK and Europe 

Jo Alexander Regional Head of Employee Communications. UK and Europe; Head of Group COO Communications 

Enrique de la Madrid Regional Head of Communications. Latin America and Mexico 

Lisa Sodeika Regional Head of Communications, North America 

Tim Doyne Regional Head of Communications, Middle East and North Africa 
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GCL 1 2001 4 - HSBC Gfobai Standards 

Background 

A year ago. we srfeulated a cJe^ strategy ?o be the wodd’s teacfiogWatnatonaJ bank. In order to make the fstm more cohere and 
b^ter connected, y/e established Giobai ^stnesses and Globai Fttficfiona and gave U>em the authority to manage the ‘Rrm on a Global 
basts wth con^lent poficles, standards and processes. V*s also an^laJed a ssl of HSBC vaEues to guide our behaviour. 

Our abSfty to achieve our ambibwi utlVnatety depends on our reputaUon, not just for finandaJ strength, but afeo for trustworthiness and 
integdty. Too often, we have falien short of our own and that itiusl change. We now have tha structure to help us reduce 

complexity and run the firm more ettecfively' on a giobai basts, ixitstoi^ure is not enough. To preserve and enhance wr ropulation, we 
must also lead our industry in formulattng and implernsntsng global standards and contfds to ensure that our conAid matches our 
vakres. 

What does tills mean in practice? 

Amongst other things, this meims we must: 

• adopt and enforce adherence to a slr^te standard globaBy tiiai is determined by tiw highest staiKiaid we. must apply 
anywhere. Often, this wtH mean adhering globally to US regulalOfy stendards, but to die extent another jurbdiction requires 
higher Btandards, then that jurisdiGbon's requirem«>ta most shape-our global standard 

• mawmise the sbareng of information for risk management purposes amongst Group compa.nies and emw^st Global Businesses 
zBid Functions 

• spptya gtpbaSlycohsatent appraadt to knowing and retaining our customers. When wacorrdude that arty customer or potential 
customer poses an unaccep^ble ra^etionat risk (or otherwise does not meet our sianda.'ds), we should e»t or avoid the 
relationship globally 

• ensure th^ our banking services are not used to facSitale ta* evasion anywhere or to hide ttie proceeds of corruptroh or crime 

• malntasn ethical sates praettoes' 

Settirtg and implementing ^r>dards and controls is not solely the }<* of our control tundions sudi as Risk, l^gal, Rnance and Internal 
Audit. All of us - across ail businesssa. aD geographies, and all levels of tire firm - have a personal, reaponstoility to make this happen. 
While the Grwp is made up of rnany leg^d entities arowd the wof W. we have only one c^sutatiaft amd we are all guardians ot ft. 

Steering Cranmittee on HSBC Globe) Starvdards 

T?iis wSI be an ongomg and continuous etiort, impactirig all c4 our busir^ess.es oil over tire wortd. As you all kmavi, ntuch of this work is 
already tmdsfway. Tpfaciirtata comprehensive ovarsighl of theae matters, identify Bddttiooel areas requiting atsentiort. and to . 
determine best practices. I.have asked the Gr«jp Chief reek Otficef Merc Mos&s. and Chief Ugal Offreer Stuart Levey .to ca>chalf a 
Stowing Cawnfttee on HSQC Global Standards. This Coramitiee will operate under the supervision of the Group Risk M^asement 
KHaetins to define the HSBC Glob^ Startoards and to ensure that those Gtobel. Standards are implementsd. 

Yours falthtutly, 

Stuart Gutliver 

Group Chief BeecotfYa ' 


C rmanent Subcommittee on Investigations ! 
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Global Businecstt 


Global Funclians 


GCL 1 20014 - HSBC Gtobal Standards 
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Chapters Legal, Compliance and Reputation 

http://fim.ghq.hsbc/F!M/home.nsf/ByRef/UKWE78JFKP11334701112007?Open Prirted Monriay, 16 Ju^y, 2017 

I Chapter 5 Legal, Compliance and Reputation 

i Legal 

I The Global Legal Function is responsible for providing and managing legal services to members of the 
i HSBC Group, thereby facilitating its business and for protecting the Group from legal risk as well as its j 
! integrity and reputation. The Group Genera! Counsel maintains a close relationship with the Chief Risk | 
: Officer (CRO), | 

I The Globa! Legal Function operates through individual legal departments in more than 50 countries. I 
; Regional Genera! Counsel for North America; Latin America; Europe; Middle East; Asia Pacific: the Globa! i 
' Head of Global Banking and Markets, Legal; the Head of GBL LGA and the Chief Operating Officer. GBL : 
LGA together with the Group General Counsel form the Group Legal Executive Committee. The Group j 
; Legal Executive Committee has primary responsibility for providing leadership and guidance across the ; 
* function, while the responsibility for providing legal support to the business rests with the individual country I 
1 departments. 

1 Legal risk is a combination of a variety of risks. In particular: j 

I Contractual Risk is the risk that the rights and/or obligations of a Group member within a contractual '> 
I relationship are defective; ; 

i Dispute Risk is made up of the risks that a Group member is subject to when it is involved in or managing > 
> a potential dispute or actual dispute; I 

Legislative Risk which is the risk that a Group member ^ils to adhere to the laws of the jurisdictions in : 
I which it operates; and ' 

; Non*Contractual Rights Risk which is the risk that a Group member's assets are not properly owned or | 
are infringed by others or the infringement by a Group member of another party's rights, 

; For additional detail on legal risk and HSBC’s policies to control such risk, please refer to the Le.cai and j 
’ Compliance riM. ; 

I 

Compliance I 


i The structure of the Group's Compliance function is designed to fit closely with the structure of the : 

! business and is divided according to geographic units (each country or jurisdiction is headed by an Area 
‘ Compliance Officer who functionally reports to the relevant Regional Compliance Officer) and Global ; 
I Businesses (which are typically subject to oversight by a Global Business Compliance Officer). i 

: Furthermore for major Group companies, typically those with a dedicated audit committee, a Globa! Head ; 
' of Compliance will exist to co-ordinate Local Compliance Officers both within that company’s domestic and ; 
j overseas offices. i 

J Group Compliance in Group Headquarters is the centre of the Compliance function, setting Group-wide | 
i policy and supporting the regional/product networks as well as advising Group executives on all regulatory j 
I matters. The Head of Group Compliance reports to the Chief Risk Officer, but also has close association * 
! with the Group General Counsel so a holistic view of risk across the Group's functions can be obtained. 

I Given the geographical spread of the Group and the number of financial markets in which it operates, the j 
i breadth and depth of legislation and regulation to which the Group is subject is enormous. The penalties 
I for contravening rules and regulations are also increasing in severity. Compliance risk is closely bound 
; with reputational risk and the perception of the Group by customers and others can be readily damaged by j 
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1 a failure to comply with relevant laws. Any wilful or negligent contravention by a Group operation will be j 
i regarded very seriously. j 

I For full details of the giobally-applicable Compliance policies in place to safeguard the HSBC Group i 
i against regulatory risk, refer to the Compliance section of the Legal and Compliance FlM. In some cases, ; 
I such policies will be supplemented at Global Business level by the appropriate business FlM. i 

i i 

i The following Compliance Policy Statement was adopted by the Board of HSBC Holdings pic on i 

12MAR93 and is required to be adopted formally by all major operating subsidiaries within the Group; i 

"It is the policy of the HSBC Group (the Group) to observe high standards of integrity and fair dealing in j 

the conduct of its business and to act with due skill, care and diligence. j 

To those ends, Group members should: | 

• comply with both the letter and spirit of ail relevant laws, codes, rules, regulations and standards of j 

! good market practice in each jurisdiction around the world where they conduct business; and j 

• ensure that any irregularities which arise are promptly resolved in a manner which minimises 

financial loss and protects the good name and reputation of the Group." i 

Management at ail levels must ensure they, or their executives with delegated managerial responsibilities, i 
; are fully acquainted with the rules and regulations applying to the operations for which they have : 

! responsibility and that arrangements for ensuring compliance with legal/regulatory requirements are an ' 
> integral part of the operational procedures of the business. Where managers become aware of breaches | 
i of laws or regulations, they must advise their Local Compliance Officer. i 

Published; 27/Feb/2012 


INTERNAL 

DISCLAIMER: Infornstion held within, ihe Group Manuals system should not be disseminated externally withoui the 
document owner's consent and .should be tffiatod as iriternal. 

Restricted or Highly Restricted information, including price or commercially sensitive information, should not bo displayed 
witliin the Group Martuwls system unless password protected. 

HSBC Hoidincis pic. 2012, Ail Rights Reserved, 
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HSBC-OCCJ O05fi298.txt 

From: DAVID oew/hbus/hsbc 
sent! 9/4/2008 4‘.22:S7 PM 
To: LESLEY MIDZAIN/HBUS/HSBCflHSec02 

cc: 

subject: Re: Fw; Kyc hires 
Lesley 

I am out next week but would a couple of temps for two months do the trick? 

David 

□avid Dew 

SEVP, chief Operating Officer 
HSBC Bank USA 

452 Fifth Avenue I 10th Floor | New York, NY 10018 


Phone. 212-525-6951 

Fax. 212-525-8688 

Email . davi d . dew@us . hsbc . com 


Lesley Midzain/HBUS/HSec 
09/04/2008 03:57 PM 



To 

David Dew/HBUS/HSBC^SBC02 
cc 

Andrew P long/ibeu/hsbC©hsbc, Chris p oaviE5/hbus/hsboSHSSC 02, Michael b 
G al 1 agher/HBUS/HSBC®HSBC02 
Subject 

Re: Fw: Kyc hires 



David, 

I chink we are keeping our view and our plans firmly focused on the future, but 
are still grappling with some of the grim realities of the present - the 
upcoming OCC exam in November being one of those grim realities. But i am 
happy to explore other suggestions for providing ’quick fixes’ for the 
situation, whether those are business-related or compliance- related, and think 
a meeting is a very good idea (early n«ct week perhaps?). i will also pull 
together the additional Compliance information you’ve requested and forward. 

uesl ey 

Lesley Midzain 

EVP Se Chief compliance officer I HSBC BANK USA, N.A. 

452 5th Ave. 7tR Fl . 

New York. NY 10018 


Page 1 


Phone 212-525-6410 
Fax 2 12-525-5769 , 
Mobile 


“ Redacted by the Permanent | 
Subcommittee on Investigations j 
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HSBC-OCC^ 00S6298.txt 
Emai 1 Lesl ey . Mi dzai n@iJS . hsbc. cob 


David Dew/HBUS/HSBC 
09/04/2D08 12:23 PM 

To 

Lesley Midzain/HBU5/HSBC0HSBCO2 
cc 

Andrew P LDNG/lBEU/HSac®HSBC, Chris P DAVIES/HBUSAtSBC®HSBC02, Michael B 
Gal 1 agher/HBUS/HSBC0HSBCO2 
subject 

Re: Fw: Kyc hires 


Thanks Lesley. 

I do think that collectively we need to step back and consider the full 
financial impact of what we are proposing for our PCM business at a time when 
the business is being asked to consider carefully its strategic objectives, 
both from a customer perspective and also from a OneHSBC perspective. 

The proposal on the table is to add a total of 6 fte to support compliance 
related activity, i appreciate that they are not all additional positions from 
•] a budget standpoint but nevertheless there will be a sipnificant impact on 

total operating expenses at a time when we are also tasked with keeping costs 
flat to 1H08. 

Therefore, i would still like my earlier Questions answered but with the 
analvsis amended to account fop the additional Con«>liance staff in your area 
which are of course charged back to the business. One further example of where 
we would benefit from additional clarity: you correctly say that the Cash 
Letter process is very paper intensive so the function cannot move offshore, 
what is the profitability of this business and what automation plans do we have 
because perhaps we should be considering elininating some of the manual 
activity?. 

I think that we must also use this ow>ortunity to accelerate the hnah 
centralization initiative, as you say. the request by PCM is effectively to add 
resource to an operational team. We should be looking to put such resource into 
a central utility at every opportunity as is envisaged in the icrm report, if 
you can do the same with the routine compliance monitoring activity, then 
economies of scale should result. 

I appreciate that this is not the response that you are collectively looking 
for but in the current environment I feel we must at least ask some harder 
questions and not simply approve additional headcount. Equally, I am mindful 
that we have an alert backlog in the PCM business and I should be grateful for 
an update as to where we stand with this. 

Happy to get together if a meeting will help. 

Regards 

Davi d 

\ David Dew 

Page 2 
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HSBC-OCC_E O056298.txt 

SEVp, Chief Operating Officer 
HSBC Bank USA 

452 Fifth Avenue [ 10th Floor 1 New York, NY 10018 


Phone. 212-525-6951 

Fax. 212-525-8688 

Eraai 1 . davi d . dewSus . hsbc . com 


Lesley Midzain/HBUS/HSBC 
09/03/2008 03:09 PM 

To 

David Dew 
cc 

Chris P DAViES/HBUS/HSBceHSBc02, Andrew p long/ibeu/hsbc@hsbc, Charles G 
oelBustD/HBUS/HSBC9HSBC02, ”Ian MACALESTEft" <ian.inacalesterahsbc.coiii> , Michael 
B Gal1agher/HBUS/H5BCi3HSaC02, denise a rellly, alan p Williamson 
Subject 
Fw: Kyc hires 




David, 

Me would support the request. PCM has an operational team that does client 
on-boarding and file review in Delaware and we understand they have had some 
outstanding vacancies. The team was created In response to an occ comment 
several years ago and focused on high risk customers and financial 
institutions. The team was successful and pcm extended their remit to 
additional customer types in response to an audit comment and to ensure 
consistency across the business unit. Consistent with the Bank’s strategic 
direction, the team looks to Compliance for advice and guidance but do the 
actual file reviews and document collection themselves. 

These activities are independent of Compliance advisory and monitoring work and 
resources, on the latter point, we had been in process of trying to hire for 3 
additional approved positions (per your approval from late lUN), 2 for 
targetted monitoring and one more senior Lco. in recent weeks, a couple of 
events happened that affected our progress: 

- the freeze for hiring in global businesses was put into effect, we vfere 
advised that this applied in the PCM world, and so we suspended our hiring 
efforts : 

- two members of the Compliance staff in Delaware resigned Cone to take a 
position with the business). 

AS a result we reviewed our staffing proposal and concluded that we would use 
this as an opportunity to reduce the 5 vacant compliance positions C3 as 
approved + 2 recent departures) to 4, all outside of Mew York. Attached is the 
one-pager we had just prepared w^ich explains and supports that analysis. 

Given the hiring freeze in global businesses, I uncterstand that it may also 
need approval by Paul Lawrence, but this has continued to be an area of notable 
risk and regulatory attention and which needs some stabilization for Compliance 
resources. in making the proposal, we continue to seek the most efficient and 
cost-effective means of providing some needed support. My staff has consulted 
vfith Michael in this process and understands that he is supportive. 

Page 3 
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HS8C-0CC_E 0056298.txt 

[attachment "PCM opens - suimiary Request 3SEP08.doc’' deleted by Lesley 
M-idzaln/HBUS/HSBC] 


Lesl ey 

Lesley Midzain 

EVP & chief Compliance officer 1 hsbc BANK usa, N.a. 
452 5th Ave. 7tn f1 . 

New York, NY 10018 


Phone ^ 212-525-6410 
Email Lis^ey^MTiBfr^ 


Forwarded by Lesley Hidzain/HBUS/HSBC on 09/03/2008 02;41 pm 

David Dew/HBUS/HSSC 
09/03/2008 10:11 AM 

TO 

Chris P DAVIES/HBUS/HSBC@HSBC02 
CC 

Andrew P LONG/ibeU/HSBCSHSBC, Charles C OelBusto/HBUS/HSBC0HSBCO2, "Ian 
MACALESTER" <1an.macale5ter®hsbc. cont>, Michael b Gallagher/HBUS/Hsac®HSBC02, 
Lesley Mid2ain/Haus/HSBC«HS8C02 
Subject 
Re: Kyc hires 


— = Redacted by the Pennanem 
®''^®ni*niMee on Investigations 


Chris 

As we all know, PCM is a high risk business from a 8SA/AML perspective and we 
need to ensure that we have sufficient qualified resource to meet regulatory 
requirements, as such , i have asked compliance for their views on this request. 

That saidj i will need more detailed information. A proposed increase of 4 fte 
is significant, what precisely is driving this increase? what is the volume 
grovrtn of the business In terms of nuiri>er of customers and who are these 
customers from a risk profile perspective? Do they fit in with our overall 
strategy? what is the underlying profitability or this projected growth? 

what is the current number of compliance fte in the business and how are they 
deployed? what exactly will the additional 4 people be doing? what progress are 
we making in terms of further offshoring and utilirlng the Global centres of 
Excellence? what scope do we have for further cost reductions in other areas, 
eg payments operations following the centralization under Tom Kaiser? 

Finally, 1 note Michael's comments concerning cost saves but will the business 
be able to meet the overall corporate goal or keeping 2 h expenses flat to 1 h? 

Thanks 

David 

David Dew 

SEVP, chief Operating Officer 
HSBC Bank USA 

Page 4 ‘ / 
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452 Fifth Avenue i 10th Floor | New York, NY 10018 


Phone. 212-525-6951 

Fax. 212-525-8688 

Email. david.dew@us.h5bc.com 


Chris P DAVIES/HBUS/HSBC 
09/03/2008 08:49 AM 


Michael B Gal1agher/H8US/HSBceHSBC02 . 

■cc 

Andrew p LONG/iBEU/HSBCdHSBC, David Dew/HBU5/H5BC@HSBC02, Charles G 
DelBusto/HBU5/HSBC©HSflC02, "lan MACALESTER" <ian.iDaca1ester0hsbc.coin> 
Subject 
Re: Kyc hires 



X ask for davids guidance with respect to compliance resource. 

As reaards adds vrithin pcm, as previously discussed, operational integrity is 
clearly a high priority, however fte adds in this clisiate will need to be 
offset by reductions elsewhere in your business in order for a flat cost 
profile to be achieved. 

I know we will be discussing this point at 9 30. 

Thanks 

Original Message 

From: Michael e Gallagher 
sent: 09/03/2008 08;0l am EOT 
To: Chris P DAVIES 

Cc: Andrew p LONG; David Dew; Charles oelBusto 
subject: Kyc hires 

Chris, 

AS you are aware, i have expressed considerable concern for some time over the 
lack of resources both in compliance and within pcm to adequately support kyc 
and related regulatory requirements. 

1 can not speak to what compliance is doing to add ftjrther support to their 
team, however X wish to ensure that pcm does what it needs to. To this end we 
have requested 4 adds to staff with immediate effect. 

The OCC will *be here in q4 and we must ensure that resources are sufficient to 
give comfort to the occ that we take this seriously. 

I would appreciate guidance on how/when we can remedy the situation. 

Mbg 


Page S 
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30 Day Observations and Recommendations Report from AML Director 

To: Curt Cunningham 

From: Wyn Clark 

Date: Thursday, October 15, 2009 


Profile of HSBC 

Extremely high risk business model from AML perspective; 

Risk: High 

Compliance: 

Reputation: 

Regulatory: 

Financial; 

AML: 

Products/Services 

Transactions 

Client 

Geographic 


Current Observations 

AML Director has the responsibility for AML compliance, but very little control over its 
success 

Operate under “crisis” mode, actions are reactive rather than forward thinking 

AML Director unable to manage at high level 

Several AML Directors/BS A Officers in a short period of time 

Systems and controls not adequate for risk profile of organization: 

OFAC misses and backlog 
Large # of MRAs 
Training 
Bartou Adams 

Threat of repeat MRA in GIB 

Where are concerns with control environment? 

Reporting lines 

Business and AML Expertise 

Technology 

Head count 
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Independence 

MIS 

Appear to have lost urgency of AML compliance since previous enforcement action was 
lifted 

AML risk profile of HBIO vs. HBUS are extreme opposites 

Decentralized functions creates inefficiencies, inconsistencies and a greater potential of 
things falling through the cracks or missed all together 

Commingling of general compliance with that of AML 

Not clear on why AML Director is in COE 


Proposed Organization (CTP) 

AML Director has responsibility for AML compliance as delegated by the BoDs (HBUS, 
NA BOD and North America BOD) but very little control, oversight or direct authority 
over its success. 


Proposals 

AML Compliance should have its own channel within HNAH compliance 

Groups supporting AML to have direct reporting into AML Director (see draft org. chart) 

To ensure that AML Compliance is maintained throughout the entire North America 
region it is critical that there is a lead/head in the foUowing key areas. These heads should 
report directly to the AML Director or advisors in the AML Director’s office that oversee 
these key areas for all of HNAH: 


Policy/Dep Director 
FIU 

Surveillance/Monitoring 
Investigations 
SAR Reporting 
Sanctions 
KYC/CDD/EDD 
Training 

Regulatory Exam/Internal Audit 
MIS/Metrics 
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Reporting-Non SAR 

Represented in AML Governance Council: 
Business Line AML OfficCTs/Heads 
LCOs w/ AML component 


Questions 

Is there a budget for AML? 

Priorities 

1) FIU report to AML Office 

2) Report AML risks and issues to BoD 

3) Structure and staffing of AML Office 

a. Oversight, SME, Policy, 

b. Operations - FIU primarily 

4) Fix OFAC - drill down to determine ultimate root cause and fix, then fix other 
issues 

5) Norkom implemented in GIB 

6) Full scope assessment of AML risk vs. control and system environment 

7) AML/OFAC risk assessment process 

8 ) 
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Occ-Psi -00162661 

From: DEBRA L BONOSCONI/HBUS/HSBC 
sent: 10/19/2009 5:21:45 PM 
To: WYNDHAM S CLARK/HBUS/HSBC@HSBC02 
subject: Re: Fw: OFAC resources 

oh, this was express time. Trust me on that. Usuaiiy the response 


Original Message 

From: wyndham S Clark 
Sent: 10/19/2009 05:19 PM cdt 
T o: Debra L Bonosconi 
Subject: Re: Fw: OFAC resources 

Clearly a positive, although I understand these were requested quite 
ago. I hope that isn't the typical response time. 


Original Message 

From: Debra L Bonosconi 
sent: 10/19/2009 05:49 PM EDT 
To: Wyndham s Clark 
Subject: Re: Fw: OFAC resources 

well, not really, yes good that we got new positoons but not good i 
don't get the staffing levels we need. 


Original Message 

From: wyndham s Clark 
Sent: 10/19/2009 04:26 PM EDT 
To: Debra L Bonosconi 
subject: Re: Fw: OFAC resources 
Good. 

wyn Clark 

Anti -Money Laundering Director | hsbc - North America 
452 Fifth Avenue, 7tFi Floor, New York, ny 10018 


Phone. 212-525-8025 

Fax. 212-642-1543 

Email . wyndhara.s.clark@us.hsbc.com 


Debra L Bonosconi/HBUS/HSBC 
10/19/2009 02:33 PM 

TO 

"Wyndham s Clark" <wyndham.s.clark@us.h 5 bc.com> 
cc 

Subject 

Fw: OFAC resources 


Fyi 
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Original Message 

From: Lesley Midzain 

Sent: 10/19/2009 02:23 PM EOT 

To: Alisha Marshall; Debra L Bonosconi 

Cc: Curt Cunningham 

Subject: OFAC resources 

Janet has approved the 3 resources (2 transaction monitoring, 1 analyst). 

She has to take this to Paul Lawrence, but we can start the search for the 3 in 
order not to lose time. 

Lesley 

Lesley Midzain 

Executive vice President & Chief Compliance Officer | HSBC Bank USA 
452 Fifth Ave, New York, NY - 7th Fl . 


Phone. 
Fax. 
Mobile 
Emai 1 . 


212-525-6410 

212-525-5769 


Lesley.Midzain@us.hsbc.com 


- Redacted by the Permanent 
Subcommittee on investigations 
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Occ-Psi -00165898 

From: WYNDHAM S CLARK/HBUS/HSBC 

Sent: 2/26/2010 12:02:08 PM 

To: DEBRA L BONOSCONI/HBUS/HSBC®HSBC02 

CC: ANNE LIDDY/HBUS/HSBC@HSBC02;1ANE E MARTIN/HBUS/HSBC@HSBC02 
Subject: Re: Fw: Received a call from Kathy G this am.... 

remember my words. .. .absolutely nothing migrates into the Flu or AML office 
without proper resourcing, and a full accounting of risk and ultimate 
conseguences of doing so. (please feel free to guote me on this to anyone you 
please) 

we are in dire straights right now over backlogs, and decisions being made by 
those that don’t understand the risks or consequences of their decisions!!!! 

Wyn 


Wyn Clark 

Anti -Money Laundering Director | HSBC - North America 
452 Fifth Avenue, 7tFi Floor, New York, NY 10018 


Phone. 212-525-8025 

Fax. 212-642-1543 

Email . wyndham.s.clarkOus. hsbc.com 


From: Debra L Bonosconi/HBUS/HSBC 

To: wyndham S clark/HBUS/HSBC(aHSBC02 

Cc: Anne Liddy/HBUS/HSBC@HSBC02, lane E Marti n/HBUS/HSBC@HSBC02 

Date: 02/26/2010 11:52 AM 

Subject: Re: Fw: Received a call from Kathy G this am.,.. 


yes . . . i t i s . 

Debra L Bonosconi 

HSBC North America I Sr. VP - Director, Financial intelligence Unit 
1130 Connecticut Ave NW, 12th Floor 
Washington, DC 20036 


Phone. 

202-496-8766 


Mobi 1 e . 



Emai 1 . 

debra.l .bonosconi@us.hsbc.com 




I ^ = Redacteo By the Permanent 



Subcommittee on investigations 


Wyndham S Clark/HBUS/HSBC 
02/26/2010 11:51 AM 

To 

Anne Liddy/HBUS/HSBC@HSBC02 
cc 

Debra L Bonosconi/HBUS/HSBC@HSBC02, lane E Marti n/HBUS/HSBC@HSBC02 
Subject 

Re: Fw: Received a call from Kathy G this am.... 
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time to push back, any idea who made this decision? is this the same function 
that takes .3 of an fte to perform? 

wyn Clark 

Anti -Money Laundering Director | HSBC - North America 
452 Fifth Avenue, 7th Floor, New York, NY 10018 


Phone 

Fax. 

Email 


Page 2 
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From: ann£ liddy/hbus/hsbc 
sent: 2/27/2010 10:47:26 AM 

to; WYNDHAM S CLARK/HBUS/HSBC0HSBCO2: DEBRA L BONOSCON1/HBUS/HSBC@HSBG02 
subject: Re: Fw: Bco Mac Angola 

I re-read this a few times and at first thought it was a bit rambling/venting 
but that is probably what we need at this point. It is on point, just don't 
know how we are going to get there. I would point out that we do push back on 
openi ng/mai ntai m ng relationships that are strategic Group relationships and 
have been able to hold our ground but it is extremely difficult at times - we 
expend a lot of energy pushing our point and holding our ground and certainly 
Group member referred relationships/transactions have increased our HBUS 
risk. 

HANA is really HNAH. 


Also, think you mean to say you can't think of one exception. 



original Message 

From: wyndham s Clark 
sent: 02/27/2010 08:58 AM CST 
To: Anne Liddy; Debra L Bonosconi 
subject: fw: fw: bco Nac Angola 

I'm about to send this to curt and Lesley w/ a cc to lanet and wanted your 
opinion. Is this on point and accurate, or do I sound like a rambling lunatic? 
wyn Clark 

Anti-Money Laundering Director 
HSBC North America 
452 Fifth Avenue, 7th Floor 
New York, NY 10018 
(212) 525-8025 
Wyndham. s . cl arkSus . hsbc . com 


Original Message 

From: wyndham s dark 
sent: 02/27/2010 08:54 AM CST 
To: wyndham S Clark 
Subject: Fw: Fw: Bco Nac Angola 
Lesley and Curt, 

This rings to the heart of one of my major issues here. We don't appear to be 
on the same page as to who owns the risk. My view is the businesses own this 
risk and should be articulating to their leaders and compliance as to why they 
are comfortable with it and provide a clear justification how the risk can be 
effectively managed within the risk tolerances that have been articulated by 
our BOD. The same goes to group and our affiliates. It does not hold water that 
we have to open accounts or process transactions just because we are expected 
to support group mandates, lust like the businesses, ray view is that HANA owns 
the risk, not group, and we have to start acting that way or we will continue 
to run into problems with no end in sight. If you own the risk, and receive 
compensation based upon the risk/reward concept, then you have to be prepared 
to make the decisions necessary to manage it. 

(Based upon the very upsetting "rewards* process we recently went through in 
compliance, we are clearly not being compensated on a risk/reward basis in our 
group.) 

The email below, as well as the recent PSI report are good exaniples, we are 
spinning our wheels with this PSI report performing scrubs and filing reports 
where necessary. My view is we should instruct the businesses to review this 
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report themselves, and report back as to where they have exposure, the risk, 
and what their action plan is. This should include the highest levels of 
management in the impacted businesses, and our organization, approving the 
actions and accepting the risk. Its not what actions compliance is taking, its 
what actions the risk owners are taking. 

At this point the businesses are not accepting that they own the risk, I can 
think of one exception, making the difficult decisions and taking the necessary 
steps to mitigate their risk. My view is the risks are being ignored by the 
business, and they are simply waiting for compliance to tell them what the 
risks are and to convince them as to what actions need to be taken, if they 
don't know what the risks are, then why are they opening accounts or continuing 
with the relationship? They are essentially pushing the risk to compliance, 
this is not where it resides. 

I am happy to discuss this anytime. I'm convinced that our biggest challenges 
are internal (risk ownership is just one example, my list is lengthy), and 
until we realize this and get them addressed, we are not going to have an 
effective AML and/or compliance program, its time to have an honest discussion 
with the most senior levels of management in this organization about the 
issues, until then we're only fixing the symptoms. 

I have no problem with either of you sharing this email with those that you 
feel appropriate. I'm very transparent and candid in my approach, and feel that 
dealing with issues head on is the best approach. 

Thanks, 

Wyn 

Wyn Clark 

Anti -Money Laundering Director 

HSBC North America 

452 Fifth Avenue, 7th Floor 

New York, NY 10018 

(212) 525-8025 

Wyndham . s . cl arkSus . hsbc . com 


Original Message 

From: Christopher O'donnell 
sent: 02/26/2010 08:01 PM EST 
To: Ali Kazmy; wyndham S Clark 

Cc: Anne Liddy; Camillus Hughes; Charles DelBusto; Denis O'brien; lames G 
Holderman; Judy Stoldt; william M Wong 
Subject; Re: Fw: Bco Nac Angola 
Ali /Wyn; 

I appreciate the responses and the ongoing analysis, however, we need to be 
evaluating this and other Angolan clients broadly, versus the specific 
transaction(s) highlighted in our monitoring. As described in the note from 
Balance sheet Management below, we have other businesses who do not have 
direct relationships with this and other Angolan accounts. They are concerned 
about their exposure to the counterparties and, as a result, are seeking our 
guidance. 

whereas, its important to highlight all issues and concerns associated with 
this activity to the business and seek their concurrence, we need to be 
providing the guidance that is being sought. I don't think anyone involved 
doesn't already appreciate the risk associated with this business, they are 
looking for our view, we need to articulate our position and get the view out 
immediately. 

Please let me know as soon as this review is completed. I'm happy to 
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participate in any discussion so we can coordinate this view across functions. 
CO 

HSBC CIBM IT USA. 


Original Message 

From: Ali s Kazmy 

Sent: 02/26/2010 05:51 PM EST 

To: wyndham s Clark 

Cc; Anne Liddy; Camillus Hughes; Charles DelBusto; Christopher O'donnell; 
Denis O'brien; James G Holderman; Judy Stoldt 
Subject: Re: Fw: Bco Nac Angola 

Wyn , 

Thanks for your note. 

After completion of the analysi s^H^B^^^HHHiiliHIHHVwe intend to 
highlight all issues/concerns, as applicable, to the business for their 
confirmation that they are comfortable with the risk. 

shall keep you apprised of developments. 

Regards , 

a 1 i S Kazmy 

vice President/Senior Manager - Anti-Money Laundering Policy | HSBC BANK USA, 
National Association 

452 Fifth Avenue, 7th Floor, New York, NY 10018 


Phone . 
Fax. 
Mobile 
Email . 


212-525-5560 

212-525-6994 


Redacted by tht Permanent 

Subcommittee on Investigations | 


From: wyndham S Clark/HBUS/HSBC 

to: Ali S Kazmy/HBUS/HSBC@HSBC02, Christopher 0'donnell/HBUS/HSBC@HSBC02 

Cc: Anne Liddy/HBUS/HSBC@HSBC02, Camillus p Hughes/HBUS/HSBC@HSBC02, Charles G 

DelBusto/HBUS/HSBC@HSBC02, Denis E O'brien/HBUS/HSBC®HSBC02, James G 

Holderman/HBUS/HSBC@HSBC02, Judy p Stoldt/HBUS/HSBC{aHSBC02 

Date: 02/26/2010 05:45 PM 

Subject: Re: Fw: Bco Nac Angola 


Ali , 

I would advise that we also obtain approval from the head of this business (PCM 
?) that they are comfortable with the risk. I presume the business has some 
sort of risk committee that would review/ approve these sorts of 
accounts/cl i ents . 

Thanks, 

Wyn 

Wyn Clark 

Anti -Money Laundering Director 
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HSBC North America 

452 Fifth Avenue, 7th Floor 

New York, NY 10018 

(212) 525-8025 

Wyndham. s. clarkOus. hsbc. com 


Original Message 

From; Ali s Kazmy 

sent: 02/26/2010 05:11 PM EST 

To: Christopher o'donnell 

cc: Anne Liddy; Camillas Hughes; Charles DelBusto; Denis O'brien; James G 
Holderman; Judy Stoldt; Wyndham S dark 
Subject: Re: Fw: Bco Nac Angola 
Many thanks for your note. 


The AML Monitoring Team has 


^ They are being reviewed from AML perspective. 

Moreover, we have spoken with Charles Delbusto and asked that pursuant to 
establis hed procedures th e RM responsibl e for bna should be contacted with a 
request 

of the II III III ill I I|I|IIII|II ! mi m I I III action, as 

applicable, will be taker^^^^^^^ 


Regards, 

Ali s Kazmy 

vice President/Senior Manager - Anti-Money Laundering Policy | HSBC BANK USA, 
National Association 

452 Fifth Avenue, 7th Floor, New York, NY 10018 


Phone. 
Fax. 
Mobile 
Emai 1 . 


212-525-5560 


an .s.Kazmycsus.hsbc.com 


Redacted by tin 

Subcommittee on Invcstigntions | 


From: Christopher O'donnell/HBUS/HSBC 

To: Wyndham S Clark/HBUS/H5BC@HSBC02, camillus P Hughes/HBUS/H5BC@HSBC02, Ali S 

Kazmy/HBUS/HSBC@HSBC02 

Cc: James G Holderman/HBU5/H5BC(9H5BC02 

Date: 02/26/2010 12:56 PM 

Subject: Fw: Bco Nac Angola 


All: 

Please see email trail below, i want to first make sure you are aware. 


this away, etc. 

Forwarded by Christopher O'donnell/HBUS/HSBC on 02/26/2010 12:35 PM 

From: Blair Selber/HBUS/HSBC 
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To : chn' stopher o* donnel 1 /hbus/HSBC@hsbc02 

cc: Ronald E Ho11mann/HBUS/HSBC(aHSBC02 

Date: 02/25/2010 03:39 PM 

Subject: Fw: Bco Nac Angola 


chn's, 

In case we miss each other today, I was calling to discuss if BSM (Money Desk) 
has any specific instructions when it comes to dealings with Banco Nacional 
Angola, or for that matter Banco Africano de investimentos. 

I discussed wlth^harlie DelBusto. 
assured me that PCM is not under any restrictions relating to the account, 
and that he did make Compliance aware or this particular transaction. 

Historically, these banks 

we have not dealt recently, what should our procedures be 

if we are contacted? 


Obviously with the headlines around these accounts I just want to ensure we are 
communicating in both directions with compliance and following protocol. 

Please advise. 


Thanks and regards. 


Blair selber 

Managing Director- Balance sheet Management | HSBC Bank USA 
452 Fifth Avenue, 3rd Floor 
New York, NY 10018 




« Redacted by the Permanent 

Phone. 

212 525 6622 I 

Subcommittee on Investigations 

Fax. 

h4h 3bb 32bl ^ 


Mobile. 



Email . 

blai r.selber(&us. hsbc.com 



Forwarded by Blair Selber/HBUS/HSBC on 02/25/2010 03:27 PM — 


From: Charles G Del Busto/HBUS/HSBC 

to: Blair Selber/HBUS/HSBC(&HSBC02 

Cc: Ronald E Hollmann/HBUS/HSBCSHSBC 

Date: 02/25/2010 11:39 AM 

subject: Re: Bco Nac Angola 


Blai r, 

I am notawar^ofany additional reporting requirements, however I did mention 
this IBBIBHHHtto Compliance (who happens to_j 2 S_^o wn here with the 9 
examiners) and he will look intofBHHHHHflHI^H 


Charles del Busto 
Global Transaction Banking 
(T) 302 327 2100 
(F) 302 327 2128 
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From: Blair sel ber/HBUS/HSBC 

to: Charles G DelBUSto/HBUS/HSBC@HSBC02 

cc: Ronald E Hol lmann/HBUS/HSBC(aHSBC 

Date: 02/25/2010 11:22 AM 

subject: Bco Nac Angola 


Charlie, 

one more follow-up re: the account above., * 

Does PCM or anyone ma ke Legal /Compl i ance ^t least aware of f 

I am harping on good communication back 
wan^t^ensure that we are also communicating m aterial changes to them. I 
would think this is in addition to any "typical''f||||||||||||||||||||^^ 

IS there someone responsible for that, and was it done in this case? 


Thanks again 
Regards 


Blair Selber 

Managing Director- Balance Sheet Management | HSBC Bank USA 
452 Fifth Avenue, 3rd Floor 
New York, NY 10018 


Phone. 
Fax. 
Mobile 
Emai 1 . 


212 525 6622 
646 366 3251 


s Redacted by the Permanent 
Subcommittee on Investigations 
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From: 

Sent By: 
Date Sent; 
To: 

Copy To: 
Subject 


David WJBAGLEY 
Marion O ROACH 
07/10/2002 12:17 

John F ROOT/HGHCyHSBC@HSBC 

Sandy nockhartMBUS/HSBC@KSBCAMEraCAS, Richard E T aENNETT/HSBH/HSBC@HSBC 
BITAL 


t have now met with Sandy Flockhart to discuss the way forward. 

The key points are as foilows:- 

I attach a structure chart (by hard copy), which shows the cuneot, and rafoer unsatisfactory 
structures within Bital. 

Sandy acknowledges the importance of a robust compliance and money laundering function, which at 
present is virtually non-exislertf. 

Before proceeding very for with the search for expatriate resource, Sandy would like someone to visit 
Mexico with a view to scaping current resources, the extent of the problem, and the major issues. 
Particularly he is looking to see if there is any local resource which can either be used or groomed to 
perform the ACO/MLCO rote. 

Two possible candidates are the existing in-house lawyer at HSBC, and the current AGO. Could you 
please talk to Carolyn Wind and get her assessment at least qo the ACO if not on the in-house 
lawyer. 

There is no reco^neable compliance or money laundering foncHon in Bital at present, and fois 
therefore increases the likelihood that there wiB be no obvious existing resource which we can use. 


Sandy thinks rt is important to look both at issues affecting Mexioi City, but also closer to the border 
where there appears to be substantial cross-border flows of monies, deluding USD in cash. 

Sandy is looking for someone to visit mid October onwards, and would like the initial scoping of the 
extent of the task to be completed prior to closing in early Oecerrfoer. 


Could i ask you to consider the due diligence, to schedule a trip to Mexico, and once y^ 
broad dates, contact Sandy with a view to Otscus^ng who you would meet, timing etc J 


I am happy to discuss further when you have had a chance to consid^. 

Many thanks 

Regards 


Redacted Material 
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David 

End. by hard copy 


e-Documents Note 

This is an image of an email Htat has been filed to e-Documents. 

Any attachments are not accessible from within this image, they can be accessed by navigating to the 
Document Profile using a browser. 
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From: Ds'rid W J SAGLE^' 

Sant: Tue A.ug 13 15:48:13 2002 

To: Carolyn M Wnd 

Su&iacu HIGH NOON 
Importance: Norma! 

Attachments: imape.O.Ql^ High Noon RepCHt.Ddf, ReportAmex <3},odf; 
5E51E5A545A3CED4fi0256Ct400513AC5.itf ■ 


M. 


-5E 51FSAM^«f^Fn4m?5fiCia<mR1.W.5nl 
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GROU? JNTERN.U. AUBJT 

WE DiLJGENCE REVIEW - PROJECT BIGH T«00?J 

JULY 2601 ' 

SECTiON j.22 

TOMPH - i AfC CE , 

Barkyreppd • ■ . 

A review w ns pn'formed Q rtne iucuiqTncntal puTpcse. ai(Tcn( responsibilUics and ongoing 
acliviues of CFB's CoTnplitlicc related efTinU, with the vvcrail abjective being io asccitain 
the extent orCFB's existing and potential Compliance related risks. A determination was 
fnads te access the t.fTBctiveness hew GFB’s Cemplascs related efforU are spread 
ihrougbcut the coraperty, iEeiatiine its retail banting network. Cayin an Islands and New York 
City branches, and noo-baaldiig units. In addition, GtB has [nternet facilities where its 
clients can perfonn seme banking transactions. 

Dccunicniation reviews and slafT inicrvews were undertaken la asccriatn GFB’s ovcral] 
TiTcctivcRCSS wills Compliance a cuvkiss- and issues. Most cf the rrceiings and iRtcrvicws 
were held with A\(dil oCficiats Rocks Mendoza Ramos. Rcyaiondo Vazquez, Luts Javier 
VarelaKubio andArtUTQ Salvador Reyes Figuenia, 

" 

Tbc principle Taens ertHc ccmpliancc review iRcluded ■.- 

• AdminisIrauvB duties and reviews for opentog account^ 

• Know Your Customer practices, 

• Morey launderingprcvcTHion, dclcclion,inomtorinB pn4 reporting. 

• Processes established to adhere with Comisidn Nacional Bancaria y de Vtilorcs 
(“CNEV”) Circular iSOn, which by September 2002 requires all Mexico banks to nave 
intcroat conirGl policies and proeeduies to monitor^ control and report ceilain b aidung 
risks. 

• Policies and procedures congruous to HSBC's Special Catesories of Clients. 

• Code of Conduct. 

« Con.nicts oriwcresL 

• Personal Irn’csin ent Policies. - 

• tnYestorSwiubiliiy. 

During 1^91 and 199it, aaaccoantcxecBtive was ibuod to have established and operated a - 
money laur)d«ring scheme CrFB’s case documeotaikm and records w'ere reviewed. 


.A review was also undertaken relaliRg is CFB’s Departsaento dc Juridico (Legal 
Department). Refer to the Legal Section fora summaiy ofOFB’s major lawsuits and client 
coQplaittu. 


165 


Confidential - FOSA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8873845 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00623 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



610 
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DUE DILIGENCE REVIEW - PROTECT fflGH NOON 

JULYIOOZ 




SUnclure 

• GFB docs fSJt have a CorpliaTtcc DepaftmenL Raiher. Corapiiancc %vorK’ is ooniaincd 
'A'iiftm the scope cT octmiies of the Ueparunento d e Auditnria (Audit Department - 
FcjA), which currenily hns a aaff of Iflil. [NA is beadrd by Fiavio Augosio FranjuMt 
Barredo. wI>o tras not interviewed as part ofthe due dtbgcAcc cITod Rocio Mendoza 
Racics, on JNA dirretor, oversees a staff ef 3C people, whose responsibilities mcludE 
Cenip!is.ncc related issues, iiKlstdingopenstscnsatths NcwYcrV agency and assets and 
liabiltlies booked ttlhc CayioaB Islands bianch. Sra. Mendoza said that her area’s 
annual plans include a twactsoai lo review dOO of QFft’s I rtomeslic branches. 

Accounting Opaning Ptrx^aJuyus.ajtu Pemiiasibte Categories uf Clients 

: e The CN0V issued a regulaticTi in IVVK tkst requires all Meswo banks to obtain 
fundameatal Know Your Clbnl information. Banks had until D1/0I.'’2QDI to bring all 
accounts opened prior to (l5/|y97 into rdhcrencc with the reculation INA claimed that 
sii domesiic accounts have been DTOOghlinio adherence with the rcguiaiicm. 

• GFB colkcU the mijorityofKnow Your Clkm information from clients. However, new 
customer^ are tiot a^ed to provide infonnalioil abouUbcir Sources of wcalili or initial 

. deposit funds. Also, the GFB does sot doenmeot any mfennstion about the expected use 
0 .^ ihc account or antlcipatsd Irensaction volume or frequency. 

• QF3 docs not use World-Clicck Ihtor any other third party databases fcr new account 
srjff nino .Also, Dcw cliCDi nam es are not cheefod against ths US Treasury 
Department’s OFAC SDH list. 

«' GFB does not have aeiktn resincdon policy sioibr la Special CalfrgoriesofCiienis. it 
has created an internal blacklist called BoicUnado. Certain government oflicials, known 
: .or highly suspecled crimisala and cnminal enlerprises, and persons froa the FAT? aon- 
cccperatire couniriss compnsc Lbs list (although the docurocnlaiion previded did not 
have the enrrem FATF list of ncn-coepcTMiYc coanirics, the list being well ever ore year 
old.) CFE’scoreclieot information sysicrnscojnpareoew accouniswiththeBolctmaiios 
and prevents activation of those accoudis. 

« GFB (las a departoient called Banco Gobiemo. This depanment has as clients selecud 
polhicai individuaU; local, iktte end federal government ageiwies; and (he major pelitical 
parties. There was no hfomBUon foui^ mdicaUng wheihet this dcparinrer.i receives any 
. special CempUsacc related coverage. HS9C «*ocld regard the individusl and political . 
party clients of Banco Gebieriso as high nsk SCCs. 

• GFB's Casa de BoUa docs net obtain investor suitability irtferin ation. Clems are 
required to state Eltcirmaxtinum iovesusent volumes based osapercemage of the income 
infometion they provide. 

P.ecgnt reviews of account or.cr.ffg documcBtatfoa 

• FP3NY review tn 12/2060 idemifted tbat 82 ef the 24? accents reviewed lacked foil 
docunemeiion. 
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CROUP iNTER-NiAL AUDIT 

DUE DILIGENCE REVIEW - PROJECT HIGH NOON 
JUl.YZftOZ 

• A n;view in 1 Q0> (28% sample reww of docaiD«nlaciDii of accoums booiced ai the 
larger s Cayman IsiartflS branch) found IhM -11% of tJit accounts reviewed (92 o r224 
reviewed} iackeci full client iD&nciation. 37 files had no client rnformelMO. 

* DEring SQn2, INA reviewed elcctroniculyinvxniory records of 13^9 1 doroesde accoaril 
Gles. 49,527 (67.5%) cflhc Rks cosytined aU efihe retjuired docEincntatior, OFBhasa 

..!00%soa!rer51/12<‘2(>02. 

• During 1Q(>2. IN A found that the GFB btri epened 2,OtK» USD denominated accounts 
outside La Fianza Fronicriza, violziing Circokr 2019 of Banixco. The deposit client 
infonnaSEon system xuw blocks attempts toopen USD accounts outside of Ihcarca 
encompassing land located \v»hin.2l>kiioRieti»ofuic US border. 

Monitoring A clivities 

i • G PR's main account monitortT^ clTorts ar« conducted tllit»ugh a system named Monitor, 
it is a HegAn Tool Kit bated system that was b*iH and refmed by GFB’S INA and IT 
dtpajiincnts. Monitcpr's cuituM primary fencUon is to idenlEfy accounts whose 
traiissvticTis exceed the e quivalenl of USDadk in aay single Jay. Upon iuendrying as 
accouEtl that exceeds the daily Oimshold, the system serxls alerts lliat reach the account 
execulivc level, where accoEist managers *ic to review die alerts and notify INA. of any 
: aiens believed to be unc.sual or suspicious. If an atrnunl executive replies ih^l a case is 
unnsual or possibly suspicious, an INA employee opens an investigation and reviews the 
ficccmnl's m ost recent 3 months' of transactions. DSscuS^ns arc held w ith tftc rcfcTring 
account cxrculivcss dccHied necessary. A case deemed w'orthy lobc sent to the 
Secrelark dc H«:icnda y Crsdito Pfcblica para b prs\'cra:!in ds Activjdadcs liiciias, is 
^ Rrst sent to the ccnlraJ Comitc dc AntUysis dc Opcrackmcs con Recursos Ihcitoj 
C“*^APORT). The CAPORI has the decision itsponsibilny w'heiher or not to send 
suspicious activity repons to the govemmenL During 2001, 281 oflbe 286 cases lersn-ed 
. were sent to the govcrrmicnv ^c residual being considered as mt having Su (lie teal merit 
to report. 

* Monitor has columns reporting wIksSct elect cun-cat account files arc uDciiMiented fully. 
!'. reports the bforre alien in percentage tens s by fctiaacss divisicn. bracch and stcoanl 
executive pcpvlatkjns. Alt he. Kcounl level, Monitor slates whether the fiindamcntal 
Know York Client information dements are on file. Hewever, accourtcfficcrs enter ihis 
inrormalion in Monilnr and Turroslly this dutu is verified ocly when INA vial a branch, 
when sample reviews arcconducted for file docuineniatlon. Tho system is being 
erJisnced to Hag daily sctivilks of more than USD IDk for eertatn .•'.ccounls. 
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CROUP I N'TERNAL AUDIT 

DUE DiMGENCERFAlEW- PROJECT HIGH NOON 

^ july;o&? 

The- system’s merits are that it eaptiim and rspDrts transactions with satisfactory' detail. 
However, its overall aprilkatwn is raihci limited 


• The sysKta doss not have any capacity jo aggregate IransatUon activity for any period 
other ihaT! s given day- 

• Ii casmot issue alerts orreports. based cn wcskty.menihly or3 rtiortchs’ ofocJivisy; 

• Account ofTicors ere responsible to identify ttid report I ransactions they beaeve to be 
unit so h! or SJi^krieus. Tlien: k nq independent review of the overUSDSCtk ofactjviijes; 

• Monitor is connected only with currcoiaccnunts on GFB’s ledgers. Client Casa de Boka 
and other non-bankieg transactions are captured by Monitor only If a curreni account is 
affected; 

e Mouitor doesnet idcstifi'high rbilc cKcntsassuch: 

V McnHordocs not idcnii^' the acccuotsofthe Banco Gobitrtw sssuch; 

• Private barJeingoperationsperES, are aoiidcmiSed. 

If acquired, it is considered a system such a$ CAMP RcUti would have to be msialied and 

impkiiienicd at GFB, 

CNBV C!TcuSarl506 

• In Oc'.oher 2001, the CBNV issied Circular 1506 . The ctfrukrrequjres all Mexico 
banks to unpk»em Inieruat control policies, procedures arid practices by September 
2002 . 7bc msin risks idcstiiicd ere operatioaai. Ikpildi-y, credit and money iaundcTing. 
G?D has developed etehoratc policies, procedures and systems to comply with the 
CimilitT, AJl artecl&fl areas will lave to control, monitor and report regularly iheir 
associated risks w the centrul CAPORI, sameareas will have to report monctily. The 
overall effort is very arnbilicus, and GFB will be \^ry challenged to be abit to adhere to 

• its sophisticated plan . 



• GFB was involved m Operation Casa Blanca, a US pcvveminenl undercover stinp, 
openiiioD andenaken to combat drag uaiHckisg and ctoney iaundering aenVities in the 
US and Mexico. A fanner GFB accouct executr/t was found willing to establish 
.nclWotts accounts aad moved iBegel money Arsugb them. Despite the fact only the 
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GROfiP!VrEWv’AL AUDIT 

DUE SHLiCENCr. REVIEW - PROJECT KiGH NOON 




• December !9'^U. 
GrB forfeited neti 
covenjoenl in 1 i 








ine u:> gov'crocBent unpiicac 
was a ntaiiage-iitcnltTaiDce slthc lirae 
hj\'e known abool Ibc raalSsr, atrf hs did co tbmg !o stop h or report il to siimagexsnt, 
However, he wps found nollo lo^'c conducted. oraggrOYsd, any of the trsasactiens, so 
GFB was not found guiJto by virtue 

INA has since corducKc money latiRdcring related revtcwf work and wc arc advised by 
them that no furthcT problems have been aund. 


Re^juSatory inspeetiens and External Audit Reports 


CNDV conducted Sttc irspcction wsits during 20CI. The rc^la'Sor ched four principle 
, shoJk'Orainss with the larjct bank's aoneyla'indcringprograw. 


1. No rnoney laundering audilscrrcvicws were peribnned atthc trust area. 

2. The overeil stfitu^of client flic docantontaitoi) Wft3 fburiil to be kssCtar sfltlSifactofy'. 

3. Infornsuon *as ntisstiig for 25% of the over USDSOk transactions rcvicwcdby >bc 
CNRVirkspcctors. 

4. The aiimiiitstration and content of lbs money laHndenitg trainiag pnopram nendeH 
iriprovcn'cnt.. 


GFB aanagSEset repHsd that haprovsrsint neasures weald ts taken to address each itece 
noted. However, some issces reEam outstanding s-ndnot fully sddrrsKd (r.g. ML training 
prugraminc on ibc InJrettel). 
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CROUP LMTERNAL AtiDtT 

DUE DILfGENCE RE'aEW ~ PROJECT HIGH NOON 

^ JcLY2002 

The December 2000 Anhur Attdmcn MmageiEenl Letter addressed three Compliance 


1 . Adnsinfenition and c-nfWfol cf credit ficiStiesand comratls wWt related parties was'-veak.. ' 

2. QFB did no I file financial reports and scbcduics with regulatory au ihodtics in a timely 
manner. 

3. Gr 3 faikd io Tuily implentcm hs ri^ adminisiratnn program as called for in hs policies 
and procedures. 

Management replied that they bad taken the steps necessary to clear each item, but the 

Wlowmg should be noted. 

L The 2CCi CNBV mspection report Hstod t«’o targe insider loiuis. aiid reicrince to 
prcleresuci u'eatnicnt for boUt wLkh were.fbcDd to be probSem shualicins. {Refer to the 
Comm creial Credit secticn 3 Tl for rartltw dclsils) 

2. OFB hasstill not fahy automated the accoorHing systems that produce the regulatory 
report*! and schedules. 

3. A December 2001 KPMO review of GFB’s risk control pciicies and procedures found 
Oiai ilte organization was in compliaftce with all 3! eleciettts of CMBV Circular 1423, 
which requires 2-.lexico banks la monitor aad control liquidity, credit, markets and 
operating risks. Banks had to iropisroent procedartss to control these risks by 01/01 >2Q0i . 

4. The 2D01 Arthur Andersen Management Letter did not repeat any ofihe three issues. It 
did state, however, that the otggnizaUon needed to implement certsin measures to comply 
with Circular 1423, imHkc the opinbn rendered by KPMCt. we have not rece-ived an 
explanation as to why KPMO were appoifitedo vet and above tbt mvivlvcfritct of 
Andersens. 

-Also, t-hc rnsnsgement letter stated that GFB did trot hat'c a Treasury Compliance (vnetbrt. 

Tfaaytctions over the iniemet 


GFB established an Intcfnct web site in 19$6. The bssk and Casa de Bolsa have some 
trensactiona! web site pages. CoRSMctert; saaU businets and eerporute barJeisg cttstcroes 
can conduct seme account transactions over the Imcmci, including: 

• Purchasesormulualfundssharea. 

• Tax ar>l o tber bill payments, mdoding 70 0 jdemifred service providers and 2 mobik 
telephone compaiikj, 

• Credit card pa)rr.enl4. 

• Intcr'accountlran8fcrs(busineaselicnisonly). 

GFS has not. however, established web site pages where clients can open new accounls. , 

During April 200?. some MX??. 7m (US.D7?0k) of unauthomed third party wire irsnsfets 
were conducted through the loteroeU cau^g a toss to GFB of MXPl (U5D150kl, To 
dale, the bank has not been able to identify aoyaispects. We have not seen confinnaiion that 
the inherent control weaknesses have been rectified. 
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CROUP {NTEm<L AUDIT 

DUE DILIGENCE REVIEW - PROJECT HlCai NOON 
.. JULY20M 

Other Ma tters 

GFB lias a Code of Coadwcl, but it covers very few sstiers, its overall content being sparse. 
Conflicts cf inteies arc addrESsed, but no etcamples are ^ven and en:pJo>«es are not 
instructed how to respond to a situation presenting a potential conflict. Other Hsves. s\ich as 
outside c mploymeni, receiving giTu fiont ctenis and serv-ice providers, and guidance on 
fcapoodiiig to auempls of lljriocncc, receive Ikllc oi no aUcolion. All empk)>cc.s were 
required to attest tc underslsnding the Cads and biI new hires must also so attest. 

GFB does not have a policy relating to cmploj^s’ persona! inveslafisnl aetKities, like 
HSBC^s StaiTDoaiLog Roles. Ifemployeespuichose slockafOFB they must bold the shares 
for three months, and one week for otbcr stocks. Empie^'ees althe level of director and 
above must provide personal asset and liabiihy iiUonuatiua on wt unnuui basis. 

GFB docs net have a policy for anti-boycott measures fir contract chtiGcs 

: GFB apparently does not etnpioy separation of duties between d cparlments for sensitive 
clicttltnUiSacUons, such as the principals of Chinese Walls for investment baokinc and 
rnci'ger aud acquisitioiis activities. Dunrig some iatcrvicws with otjtcr DD team rctTnbcTS. 
some GFB cfScials reftrred to ihc concept of Chinese Wails, however, it sppeared that they 
were using ihc irrs to not; separation of duties between front and back afTices. 

Concluskms 

The GFB ComplisDcc effort i» weak, and itappeir$ that Otetargetoiganientiun dues nut have 
5 strcrgComplianceculUirs. 

■ GFB docs not, in rraVily, have a Ccmpliancc Dopsrtocnt and on c would have to be 
established and implcBiCTiied, with possibly seme local stafTbeing InsnsrcTTed from IN.A. 
U is itkely that, in (he event of the acquisitioa proceeding, HSBC would need to import aa 
uxpvricitcud Compilancc cfUcUl establish a formaldcpanmcnt. 

« Reviews of account opening pracceurcs and client documcnlation arc sporadic, and the 
reviews rwnraHy do not encompass largse populations of client files or activnlies. This 
effert reeds to be slrengOreaed. 

• Gicntlraisaciien and activity nonitonng is v'cry limited. The rclisnte on aocoant 
managers to identity and repoD unusual and suspirious transactions of their clients is a 
serious ioiriosi couiro! shorteomh^. Hisioricol analysis of possible suspicious situations 
uTc peifonned only at the recommendations of account oflicers. High risk clients receive 
no special tnoniioring coverage. The oiganitatiou permits accounu of individuals and 
ergsnizations tiiat are considered bigli risk by some bai^mg orgonizatiocs and simply not 
pemitled by olhers. Yet. there are nc special eflorts lo monitor activities oi perform 
special reviews of these clients. Enhanced irnnsaction moTtiioring, especially for high risk 
clients and umisiial acliviurs, would have to be injected to the effort Quile likely the 
iocreatied oiunilarin^ acibniies would Tequire additional stall. 


- - 
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GROUP INTERNAL AUDIT 

DUE DILIGENCE RE\TEW - PROJECT HIGH NOON 

JITLV 

• Internal and externa! audit reeoamendalio'ns, and issues nised in regulatory reports do 
nol receive proper respect anti aclioA. Many replies to exceplions and recommendations 
arc merely ptrfunclorj', and coaimitted improvements art often slow in forthcoming. At 
times management has net responded at all to issacs and rccommstidatians cited in 
Interns] Audit reports. For example, vre ideatj6edna letords where INA or another 
depariment performed any follow up reviews to die metier cited by ihc FRBNY 
examiners. Business lines and support veas would have (o dedicate efforts to address 
and resolve aodii anc re^tubtoTyissuesand recommendaiions. 

• The shorlcoDtiitgs'a ilh monitoring ftccoimiopeiuogpraciices. clkntliODsactioos, unusual 
operations, and Che lack offoUow up to exceptions end rc-coinmenuations cited in audit 
snd rsgubtcfy repcfts, present the pelcnilal te havasRoSfccr employee or greupo f 
employees become nrvolved in another money iaunicrut| operation. 

• Measures lo promote and ensure staff discipline are net salisfaelory. GFB’s Code of 
Carittuct Jacks content, detail and snirii I here is no policy to promote pmdeneo with 
employees' personal investment activilics. A ppropriaicaaff related policies would 'nave 
io be impictneDted itnntedtatcly as part of the ovcrail effort lo inslalt a dedicated 
Coui plianc: and internal control rahuir- Ihroaghuat ih? crgsu'izstion. 


170 
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Seri Sy: 
Date Sent 
Tc: 

i:opy To; 
Bubjsct: 


CafDiyni 

As prorysissd. 

Couk} 1 ieavo you to pass ffiis on tc Paul in a secure tasmon. ' 

. Regarcte 

Fiy*arc!ea by Dswel W J B/^£YiMGWi?HSBC on 13 A«g 200? ia:«i4 • ' 


David yVJ BAOLtY 
David WJ DAGICV 
t3<D&‘20O2 ‘.5:48 

CaroJyr. M VMndWBUSiUSBCSHSBCAMERiCAS 
HIGH NOCfN 


Memo 

13 Avb2«i214:48 • . • 

Front; Matthew J W KiNO/QQM MA GHOIKCHCVHSBC 

Swi? by: Uz A TESTER 

To: Ds'od W J a.AGLCY.'HGHQ'HSBCgiHSQC 

b&c: 

SubjifCi; KIGHNTOH 

Copy ot report as requcstaa 


Matthew 


Nwi Sejigrt.pii 

Papon/viwlSpdi 


T«J: 790 59217 
44 20 72CC9247 
awii Si;>- ciK liW- 
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e*Docuinents Note 

'Riis B an Mage of an emaU (h2t hs bsen fltod to e-DocumsntB. 

Axiy atfachTnonts ara nol icMeelbla from wiS^tn this intagB. they can be aeceQaed by nnigating to the 
Detourr«rrt .“rsRis U8i.-vg a browser. 
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From J(5hn F ROOT 

Senl 3y: John F ROOT 

Date Sent: 25/1 1.2002 09:57 

To: Ric.^ard E T BENT^ETTrl-iSBUrl ISBC® J33C. MaShew J VV KSNG/GG.M iNA 

OHQJHGHQ/HSBCOH 53C 

CopyTo: 

Subject: 


Attached please find a repori on my i^sittcKSai, s report which Sandy Fiockhar) has already seen. 

Thsrfi i.-v vHry liftin nf whai we wfxifl Pf»tl a Comf^noe funrtioii. Also. I have left out nnrsonal evalnatrnns 
because of the sensitivities involved. I did not encounter anybody at Bita) who ! thought immediately 
capable of buiding a Compliance department However, Imetwilh Ramon Garcia Gibson, Director of AntF 
Maney Laiinflering at Banamex (CiUgroup), and 1 agree with Mattfiew (and SuSan Wright) that he would 
be 6 good carxiidate to head Compliance in Mexico. 

Kind regards, 

John Root 



Bita! Visit 4-aNOy02.<Jo 


e^Oocuments Note 

This is an image of art email that has been flisd to e-Documents. 

Any attachments are not accessible frorn within this image, they can be accessed by navigating to the 
□ocument Profile using a browser. 
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COMPLIANCE DUE DILfGENCT TRIP BY JOHN ROOT 
BIT AL f MEXICQ -4-«NOV92 


pt’OTE ; ‘nil! infurnuUUm Ut iinx nport mts obtamtd auuu^riKni inlunien-i mui 

has nnt buen inJepettfhnilfy ver^eiL 


Batkgroani] 


Tlic Mexican cconomv is larecly nsh-based. WcrtcTSCven love tficrisll (o receive wages in casli. 

Prior ID 1 906. ua itkiKiricaliou neederl lo open an accnim. One HSBC Mexico inanueer opines 
ifwi, iir Mexico, s false dmer's ID can 1>c obiained in iwo boorr”. '(Ik same r.ia^wgcr noics th»i 
"Nfcxicans don't like lo disclose finatKisi inionnuion'' and (tel rb^ ‘Viit open au account in the iianic 
oriiie iiinLd”. 

As more ilsan one sartor rtuiiagcr opined, thccEisa)iickora'‘conira}ciiliurc~al Bilal. 


.A inmitter oriianksaic eiuicrilty walking (ogalerou tlraflinga CDinpcndiivnurbaiikiog tau'S, whiclt 
would be useful for lire Conipliaite CliarL 

/iction; iheBiial Cliiet'Le^t Coiioset to panriiaie in the n'oridDg group and obtain a copy of the 
conipcndiunrfor the Compliance Gwit. Tantci date: lo bedetennined. 

There is r« law rcctuiring “public inieiesl” Joans- be iHcy ii>ragricutiuiaioroit>eriM'i>aredsAMiirs,or 
[(ir pnfHiT rp.giixiis ni urban anras. Mowi'.vei. lavJ month ibe Banco dp Mexico ftriucyci.l thai Bilal inaVe 
a USD 1.5 billion deposit uirbibcinai a prcfbrcnial rale. 


Gcvtrar.ttRt Relations 


OiieorGrupo QiuT’s ctnei'TCgubHors. MrCarlwPccvciicioMuno/.an.Assisianl Director Gencnii u 
Kiiciciidatiiiv Treasury), was oiiiaoely criiiculoCOnipoBiiat. Pertups U is IxMi to t|ivle at some 
leugllt Ml Provencio'i ewti words. 

MrProv’cncio slid Ikai controls ria arcaiionnaiiva") "rtonoi exist”- an assertion wliieh l>c repeated a 
nomber of limes and in which he Inclu^d legal and internal audneomroit. Tliey ’'caTTv ik weight” 
niid "do not passibs lisr” Ttece U “an uoaecepobte level orclienteoiDplabts" (-^ibe seciioii 
intniediataiy below on “Client ComplaiiKs’^. Tlis reyalytors tlieinseKes receive “insnj' compiaints". 
He suspects Gu! Banco Bital “was bilktug die clients ibi liquidity” Isic} and lhai its “record was worse 
than other banks". 

□an» .Adsntlco <s a “compiicued shiBiicn". Oaico i^iial docs noi accept Atiamico barA cusiotncrs or 
their piTihlciiw, hir Preveneio cmwlimcd. even tliongU b luis the legal rea|ionsthiliry in do so. 

Mr PrevenelQ reserved some of bis bersiKsi entieism for Cnipo Btinl's Legal Deparrment, wlilcii he 
averred was "aotgniiTy of bad failii but extreme undiocriiy''. He soessed (he need for better controls 
of sivil cases, iviieia tiie jreup's lawyen ws.re ofien ui^epsted aud intssiitt tlie proper documepis. He 
cited several examples but said iliev were "not isolated cases". One case in particular bothered Mr 
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Provaicia (bssidts ilic ’.vclI4uicnvn IsH'Kiitofdtc Baoco AllaraicocliciM wJiOKinicrcsfpavmcms 
spirniied out «rconirol and reacUsd ilte millioiB). TtKcuireai hudofllx L«^[ DepaiiAifiCi loLdMr 
PiDvoKi« iliai acasbitr had paid msivy otflioacompfetrai^clieul— aixl itK hnptcK deparimeii! head 
Ciltrefore cct'^idered the "case closed''. Unfbnuiutely, Bital apparemly'contdn'i produce a nmpcninic- 
siampcd rcccipi, and ihc dicta ccnuinucdcocompiaioio (Ik rnutuor. wto htamed a^bad teller 
s>'siein" vvliitli, "^vf^ilc iH>i readititgdicfcvcIorinMiiiainniil itrtthcry, can'iisty vt hai u-cm ouiin \rhoni 
and wlicii.'' 

Tliefe’j a hit niore. "Bhalheeds aproactivsssaKgy.'’ It also needs “sw'eejnngctotges h> 
maMgciaciu". “Theic is a !ol cf stork to do.” “There is nil a^liiy to picient prd>le;«5." ‘Today 
ilKre is ;io balance: bera'cen ihc dieni and the bank." 

Mr Prnvciicinciidcd '•villi avi arcing ahoat ihc need io plan V'Ciy carcliiliy any sysicnis migraiion. 

Senior nuiaagentciit's dsfcnce is ilial relaiioi'u with ihe icgulaxn have been soured by fk'o issues in 
pariicular: Bital's capital needs arjd ilie .Atlauiico acquisitioa. 

,-lrft»nr Faced with such a iTOiibfcdrcgnltuoty rctelitBJdiip.il is st^gesicd that senior majisaniien! 
moke 'a concerisd elibn lo meet frequently uithMr Provencio to keep liioi isfonned of pro press made 
incoiu.rala.7snrTic;il»r!y in thBLegp-ilDc)Em>neiu. Bilal’s Head of CtxnpItauce.'A-facridcsipnaicd. 
sliould be the pc.-vtn responsible forco-ordiniitnigsachanetroit. Target dme: cotvinuotts. 


Client Conmlalnts 

Cotiiplnlms increusciil siuniricantly in 2002, avera.eing 4*S ihousanda mnnlK 

TIterc is a centralised system of diem con^lainis called Scnilai It can sort complaints by ly'pe, 
rceioiJ. aiidcliciil calcgoty (.A.B.C,.-). 

Major cauiii cf cciaplaints arc; ATM inoIfjaMtors. psv'roU errors, bad service, deiavs uj Ihc credit 
process, ciieck Q-juds (UicUidir^. for uix pnymeitisl. and late credit card sratemenis. 

Tiic level ordieiii ciimpteiiMticaiiBlTeci .•ugnincanily tlie variable punioii of managerial salaries. 

Peeylatnrvliave t.jrpnWgiiiy eriiical of Riial'vdiert scnr-ict {.W ihesccitenmwKtKaiely shove on 
'■Govemmsii; Rdalions") 


Lfaivatian 

Despite a high level cretunplainte. there is iclatively little liiigaiion agsirsi iIk bank. The Legal 
Duyaniiicttt uvursuci inusily (Ik vullecliDtis prvKcdutes in Ibe ctniite. 

A few sisies arc Vtvrwji lolut parliDilariy dcbinr-fricinHy ruiltiuhna, Morcinv. TanvMilipss, and 
Durango. Tltis is a pralilem beea'ise. while baoking is regnlaied ou the Federal level, collection 
procedures arc governed by siaic and local icgnlitio^is. 

IPAB. die Institute Jor die Prolecrioc of Bonks Savings, audited Febaproa wtes (Febsproa is a 
predecessor bauk savings proteetioB Hind whigli pualused ceitiiiu assets orMecictm banks afler Hk 
liA>4 crisis) and retumed ones it be emsd in eonrrai'cniion of the bail'out recitations. Legal 
proceedings were insliluicd against the govcmnieiit liutd by Oiial, Oanaincs (ovvntd by Citigroup). 
Usiicomcr (owned by BBVA) and Sanenc. A scnicnicm tscoiuidcrcd imminent. 


Fines 

Bilal was fined USD'dOO.'JiXisad.AiJaB’icoUSD JOO.dOOfor {ailaretomptmdadenriatclr and on 
tine to .aovemmetT. reqiiesis for infornaiioiion IVIM crisis progrtkiiimcs. One dilTicalty iisdlKcnilie 
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recnnciliaiion ot'disccmril/inieresi ral« iipplicahle in BKh pro^'afiYnes. 
There hflvcaJso been tiiKs fonlKCiosiugorbranches. 

The IxiniiiiiB cnmpiiiY Ti«Tvw!;h?$ hs4 9 hosinrifaHv Wgh levd of fipes 


Miiih-v { Hiiniii'rini! Cuninih 

Senior iiiaiugeaKi'it. perJisps because of fcceni liquidity conons. cai uuniior eliein liaisaciious. 
inoluding cash rtepasiis and withdravcals, tiuuugh an IT syncm ciSIcd Cterre Diaria (Daily Closiiigi- 

CicTTv ni»rio con;ains pR:viQus**5.iy infsmsnica, and isiipuSiedr>almcb(Hncess (i-c.. ibi iiiTtal- 
rime) 

The sysiciii con 3Ucr accounts and troiKacrtons ia dilTcrent-u^ys (by accotnt, region, brancih amouiu, 
eic.'i. It can scan ail accoviiis. 

Senior nwnt)sen-eni‘spraciicc is to monitor imnsnctiotR .qreiacr than MXP 4 million (USD 40B,0(Kt), 
The minhmun legal requii'emems for tn<»iey-laiinlenug ccihfoIs ore ihiee-tbkt 
i t asysicm to identify ihc clkiVs of hi^vrisk transactions 

2) quartcri) reponing of nwtshly cash deposits oTa test USD 10,000 or the cquivaltni 
a manitoritig sysiein for lowcr-iiicome ctknis who deposit ai lc«i USD ntoiaiily 

AseiiioT HSBC Mexico Trarjiger has some dwdns as to tw closely the rcEutotorY iiivcnigste reijoncd 
tramaciioiis, ns HSBC Mexico receives few substantive comuiems or questions on ibe mfonnaiiBii 
siibniiticd. 


Ckrre Diario was developed as an MI tool rudier thsij fc« mansy-taimdeni^ prevettiioa. Tl« nain IT 
system used by Bilal to comply willi die above uuiiiinimileeaf lequiremeols is called “Mondor”. 
Monitor is a customised system btiih with the Hogan Tool Kit. 

Primoiy rcsponsibilily for ilte dcicotiokt orunusual iraitsaciimis lhi«u§h Mooilor rests with Oio 
Diiff cion 'If Aiid’tobii <iy Sfsniniios, a’l tuca wftfsi' Imenwl -Attdii. 'nie Capon conuititux' (see 
below) is inforned, nnd Uk account exeentree is nsked loinvesiiscneand take appropriate acnon. Tltis 
sclf-iegulaiton is a signilicani wcakiKss in cooirols. 

Monitor iiiten and records uJ! dsfly clicttl treiscctio'JS that total USD SO.OOO or racrc. 

ln30Cl 281 suspicious 'JUjuaciiQtts were reported to ilte auJoriUestouIliuiover S(XP l.TSbitUon 
(USD 175 niiliiun). YTD 2(102. IWsusvidouslrausaclioiis wen; Tupwled.Wtalliitg over MXPVtK) 
initlion (U$D ')!) ntillionh 

A committee called Cupori (Comiie de .Analysis <1e Opcrecioncs con Recursos Hlciias) monitors 
suspicious transactions. This comnunsc. n-hicbisconvoscdcfaRpr«scuiaiivu uoounated by each of 
the heads erAitcfii, i-cgal. Operations, Ftaud Prevemion, and Bjiikin-. meets nMniliiy. The Cernnsiiieo 
secretery is smsmberoriheSegiueinosarMoflniervU Audit. 

'.('Iv Cnpon comcnineeolso montion the iinplememaiion at the imenxil control requii ement; oi'UNBV 
Circular 1506. (TIk CNBV, Comisioti Nadoivil Oaiicana y de Valores. <s a re^ilaior. Its prime 
responsibilities include Uic rsgulaiicn of securities. i Tnc inain risks idemilicd iniblscirciitararc 
npenuiona!, iiqniriliy, credit, and money laniNlerinc. 

There are 5 regiomil Cupori cananirecs, which report to ilic central Itcadqimri^ Caperi. It is this 
Ciipori Hi Biiat hcHdqiuirteis wiiidt dctcnniucs witich suspicious traosactions will be reponed n tlic 
regulalort (Hncieitda attd UKBV), 
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Tliere is it conlideniia! ‘Nviiisilebk)weT''.teiep!}an£nun4]er(br um»ai ransactioiu. 71jc progr.irrnK. 
called Cap<l^llcl.^^)sto(tatc pcniiiitcd tbereponine la iheartlwritiesorTas^ciatisinnsaciious 
tuTaSirg MXF 1 r.iilIk.r.('JSD l«0;X»). 

Aliaccovr.i records imist be kept an^iismcmofSyean. 

ii is claimed iha) nil sialT nivoivc-J ntoiUy-IihiiidLr-iig traiiiii^ Kow^«r, llw cxaci iiuiun: of this 
intiiiiiig. intiii Ik verified The CNBV iMicd inaTOGl inspenimi ihn rhe ndminicfTaiwti and conifm nf 
lire mone^--iaui!deriii5'innnii^tJTOux4iiurK needed taiprovcmcal. tt docs not appear ilsM tlsi? 
recoiTi'.ijencbiicin has Ixcn fully in^uticntcd. 


Con-wnuadenf Baaldiyg 


Bauco Bilal im active conevpu»dcin btiii£it)grc{a>kins[upswilli 20 bafts. T1u.-sc bdiiks appear lu be 
well-tiiio’.vc ^."d repulabts i-Ktitwiacs. 

Binicci Atlaniico docs noi have scpanklcconcspondcnl banking rclsrionsbip&.'occxptut hfiami, where 
there is an nccouih with Bauco Bilal iisclf. 


Banco Bilal has iiis correspondeni b3okiDe.relation^Jps inioTai most with well known banics - and 
iwoc wiili hiinks in FATF nou-coopcrairvc couffi-ics 


' i— quin-iigfiifihcrKYCarc: 



KSUS wdiiis fo CKic fiic rcistionsblp. 


■iainH: Bilal's H cad of Compliance, wltcn dcsignnied. will nioniiof ei^iiced KYC on all 
c."jrn.'s^uduii( bmkjiJK rvialiutisiiips. bul paiiivulariy an (lie alKWc Uufts. In :1 k absciKC of 
sai'sfBCicj? KYC. the Cwnphance Iwad wi!! teroiBneiKi » senipr maisigciiKut (be cxiltug of the 
relntjonsliip, Tnrgcidais; J;MAR03. 


An avei-ageofUSD 200 niiiUenis wircdouiofibceounu)' every moiuhio^.JOOoperiniiMts. An 
avenge sf USD ShT etilliou is irsnsfcticd to htotco in 10,000 gpcreiioiss. 


Had) tccou'U executive Insfu sipiorToii iIk KYC dccuiiRtiKalipif, iiKloding rorUieOnindCaynuiii 
opcraiions. 


All inientariouHl win puyinenU are subject to ilte Monitor sv'siem. wbicb does not eurreitUy block any 
inutsactlon, orevcuuse any fitter other liisn Use USD values described above. Tbe S'jspiciouj aciivity 
repnniiig iiroccdiire I? ilw sane »s cltcwlere in tie liank <vvw above “Mow-l.atnylcring Controls''). 

As incicaicd. Bitni does not have as o iiiier ihc FATF noivcooperaiive counuy list. Mexican biinks are 
“discussing a couimoo pcsiiioiV' ou tie issue. 

There are suioiustc qvaneriv repons to the re£ul£>or<CN’QV)of all traitsacTions createrihanUSD 

10.000. 


.■iaityfij Biul's Head of Compliance, when des^mied. to develop, and Opcrarionsio implenxst, u 
giuuj^wide iillui fui suspiciuua (i^uoAiknia. iubiiaJin; iIicvdcvC'iIm; FATT uotfcoupeletive kUkUulM 
list and Thn Grmjp liii^wislf countries l»si. develop and tin^'lnnont a proco?} lo 

investigate suspicktas iraitsac«o>ts Anri take rcin$.1ial action v/iilwiti any iippiag>otT. This system will 
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Ik (leveliijjcil Tnt o>?M:cium(»ctiviiy. noijnst cotresponfles^Wilang. T^tCLi dale: 

3CJL'N03- 

clu»herc, many corrcspoudcnl t>an^ cil i»t idciiii^' ih(onlenosp»iyorsur'irc ireiKaction. 
H<nvcvcr, early i>cxi year S»»fi in Mexico will swithio Form 103. which does require such 
idoiilificaMcm. 

Bhar, M<.S. tafc 

Biial !)&$ lolal correspondent deposits oFUSU 1.5 biilioi^ includit^olTsiiorc deposits of USD 

TOO iiitlUuu ill Gruiui CiiyiiHuimiiJ USD 143nliiiiuil iilNew York. TuciviniiiijingUSC b'-i i))iilk)i) is 
oil deposil in Mexico, 

Ac/ifii; BiuJ's Head oi'Compluuce, when dppoinied.wiUana^'se all con'espoudcDi ^tuikin^ deposits, 
bill paiiiculaiiy those iu tile Cay.Twtilsisntis. Taigci dare; 30J1JN03. 

Biiai gave liic requisite USA Patriot Act ccnilicaiior. 


Foreign Eyehaniri! 

Biuk poiici- is QUI to iruicaci busiiiest with focngu-exctiai^e sfaups (“ceniios cgiuBiimis’') wliicii only 
exchange foreign ciirrenc)' - but do not transfer money. These “cemnascantbiares"- of which an 
cstii'rinfod 5.0tK) exiai »> tit: coicurv arc lightly reguiaicd. OailRottterliciui, Banco Bital docs cic 
business will) bureaux dc change t'easas dc csrnhto”) which tratisrcr ntoiic)' and arc Ixeitcr reg.nlaicd. 


it) Mexico the banks arc obligated to process Uix peyincnis -wiwlt ate tietdc almost ciUireh' by check. 
TlKhaiiia obUiD Iticniiivc govcntmciu business in exchange fiv their co-opennion. (See the section on 
-GcvcriinKiji Business") 

Tile tax collccitDTt system is vxiry iiicincicni and organised fraud tsu.’idcs)3read. The bants have 
sncccssfuliy lobbied the govcntrrtCTd to requite liUcnici paytncitls fniin legal cniilics and, ibr Eat^cr 
uiuuuius. iiidivkluiibi iwiili cuixd iucuoic gnattci diuii kCQ* i iiullkMi. ur iiiKanKU iiHrufiic gieuiei 
Diaii MXP 300,000). In addiiion, censin oflrer mpayeis (if, those leqaircd w make motnlUy 
wiihhokliiig pay menu} must make eleciiDiiic payincois. Paidii^ Icghknion will funher expand 
elcctroiiie payomiits. 

In on'st in irtuive fr.'iiul. sleclnmic jsiyweiiix slitHiIrl lie nwsiiiihj:il. wtwe t5f;i!i!ett nr ijermi’isl hy 
law, .xculaiiqn, .and tits scri'ice&ccinnict sigml between Bilal .and HaclaxlA. 

AftisH.’ BjuI Le^ and Operaisont to review all pcniueiii legal and coiiuacrual provisions and 
des-elop ftiflliirihcdccironit and JmtfBct payroenu sysictis by tdung ad-.-aniase of cs'ety epponunity 
prcnTdedliylaw.ic^jlaiioH.afcoiaracr. Tai|:cidaie; 3iMAR03. 


Govcronicnt Bunking 


Bilal provides banking and payroll services to goveronteix at the Federal, slate, and local lih'els. Tn 
addition to milking loans le shtic andinunicipai cmilics. O'lal processes pnytolls ibrgovemnKiii 
employees (and deducts front their pay insialracms on consumer and mocigage loanVi; ad'.’nnces fluids 
rortl'.e payment of nipplic.s; mid Bungges givemine fw d eposits - iiKludins large .iu^cial drposiuaud 
deposits IbrsiiitC'COnirDflcd emiiies swdi as 

Cleaily tits piejioiultiani lOiecifiitc sUie iit iIk banking secu-.r nieaos dial on> business piopcisa! is one 
eletneoi in a vast a'xl coinple^ ov^nll rel,Yiriii«hi_> There is « l.it isf Iwr^.aiuirsj. iitpsn hewuwe fisee 
and commissions can be poliiiealiy tuipalauble (and (he govemtuent docs not have die appropriate line 
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item in iubvidgct). Often tlis bank's ten»iiwiswwnfiir a seivicewfll be indiita.j»rli«vsihroip^li a 
large de}i«ii at a favourable rale or c^^rtimiiics lo nurka pmchicts to stale cnjployccs on a captft’e 
pay-TDii. bWsecrioiis such «s “Laws", ■*Co'‘ciTfnCTil RclatioiB" and Tax Paynwuls’') 


PriviUe Bankini! 

Mexican taw does itoi periiii) ilicsuiicilaikuiof r>ujdlinusle[s^nniLal<liuug!i lime iucjid Ttsirictioiu 
per se ou such traisfcrs. 

AeHum Biin) l.cgal lo develop praciicsl gnidetines on whai isandisminllowcdinPrl^'aieBnnbiiig. 
Tiirgeidaie: ^!MAR03. 

Aefioii; Bilal's Head of ConuliaiKS, wlien ttetenated. to isview aB exisiing Private Banking, wilii 
jiariiciiiar aiiciiiian lo USD acax»ils liinri uanslcn lo New York and Ibc Cayttian Islands. 


Ti c irusi arcs tins c.xpcricnccd naiiy diiTicidtics. Forms] docunwiuiioii is nfleo lacking. Proper 
accoiuituig for laxpayjtienis isa piobleni(e.a. fw foreigners who can oidy own property on the hind 
borders .tnd COM tines Uiroiifh a Irmil 

Tbe area should improve with ihc ictetn insrallaiioit of new FT systems. 


t.ntiopr Unions 

Tbe main liibotr union is ttic rcdcraciondcSiulicaiosDaiKarios, to whici) 6.500 Bilal employees 
belong - 'mcsil>' leltecs". 

Labour rclaiinns arc considered good. TlTrcc csKCt stippon fWs claim. Flisi. iHcradtca'; Barron 
movciimiu which dcmansirates -soiucihncs viofcfflh- - for debt-relief for poor fenners, has noi usually 
luigeted final binnclies. Second, branches hnve beat kept a|)cn longer lliccuiimry w-uli 

!iii!e protest from th« unior>s. Tlurd, ■■Biiageineut convinced tlia unions to accept sigraticaTii job losses 
when Atlsnjico bonchtr were ciosed — in part hccansc Biral wav nnandim «o rapidly elsru'lierr 


£CF 

One senior uwiwsBruoletl “a )ol nfwalk-itiCCFbiwitiesv". TIds iscnriatisbccstiseCCF’s fnnral 
iDvolverrient nil It Latin America ceased overmx) years ago and. as far os (Jroiv Bowaie.CCF nes'er 
had nwh btisiiMss in Mexico atiyruay. 

.rdcs^on.' Bilal's HcadorCoinptiancc.whcn tp)>oiiiicd,ioim'csiics!call CXT-onginaicdhiiSioess. 
Ttirgeidait: 51MAR03. 
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I. RESl MEN EJEgTIVO 
l.t. Antecedentcs 


E! objctivo dc L-stc infonue es d dctailar las observacioncs dcCcctadas ca la revision de 
Lavaifc dc Dircro rcalizada a HBMX. 


En Mexico las Institucioncs dc CrWito cslan pWigadas a dar cuniplitniciilo a ias 
dispusicioncs dc la Secretaria dc Hacienda >• CrediJo Pwhlico (SCHP) para prevenir, 
dctcctar y reponar opcradancs con rccursos dc proccdcncia ilicita. csiablccidas 
principalmcutc cn ei articulo 115 de la Ley de Institucioncs dc Cr^ito (LiC), donde se 
definen: 


Operacinnes rclcvantcs. Ca que se realice cn cualquicr instnimenlo monctario por un 
nionto igual n superior » USf> 10, 000 

Operaciones imisuales. Transarcioncs rcalizadas poi' personas fisicas o morales, que no 
scan congnrentes con la aciividad o giro cumcrcial del clieate, por su ipooto, frecuencia 


Jmo it nnhiralc2a. 


Dcntni dc In Direccioo Ejccuriva de Compliance sc encuenira la Direceion de Preveucion 
de Lavado dc Dincro a cargo de Carlos Rochiu AKflre 2 desde hacc I ano. teniendo dentro 
de sus principaies funeioncs: 


> Asesoria y apoyo a) grupo para c! curaplimiento de las de la normaiividad anti-lavado 
dc dinero. 

> Conrrolar cambios cn practicas y productos asegnrando los controles dc prcvcncion dc 
lavado de dloero. 

> Coniroiar el cumplimiento de los procedimicnios y controlcs de prcvcocitSn dc lav’ado 
de dincro. 

> Apoyo ai la capaciiacidn en maicria dc lavado dc dinero en d grupo. 

> PiQpOR'icnaf al pcrstmal del Grupo los raedios y mccanisnios para cl reporre dc las 
opctacioiics rclcvantes c inwsiialvs. 


El area sc cncucntra inicgi'ada pur 1 director, 2 subdircclores, 5 gerentes y 5 analisias 
1.2 Obietivos de Audkoria. 


Evaluar que los tneeanismos utili/ados para cl mcHirioico y dciccet6ii de operacinnes 
rclcvanics c inusualcs scan suficientespara proiegcr la buena icpuiacion de HBMX. 

Evaluar el eonirot intemu dc la Oircccidn de Preveiicidn dc l'.8vado de Dinero veiificando; 

> Estructura, 

> Analisis dc piocesos 

>• Manuales dc politica-s y proccdiniienios. 


HBMX CiAQ 040026 Pagina 2 dc I 
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Evaluar que los mecariisiiios tie rcpode tJc opcracicoics a las autoridadcs scan opoitunos y 
sullcicn{cs para cumplircon las regulacioiies caabiccidas. 

Fdcntificar producros dc riesgo y v'crificarqiic cirtos scan moniiiKvados adccuadamcntc. 


Vcrificar quc cl gmpo cuitipla con las leyes y ctrculares esiabiccidas para la prcvcncidn dc 
iavado de dincro. 


T.3 Alcancc tie Auditorin. 

La auditon'a sc ic«aliz6 a! Gmpo IIBMXincJuycndo HHMl y filiales. y coiisisiio en; 

Se verifico la cstmcnira del area a iraves dc organigrama y descripcioii de piiestos 

Se realizaryn cnircvisws con cl personal del wca idcDtificando sus funcioncs, inismas que 
fucron analiaadas ycvahiadas. 

Se evaliH) el sistcraa MONITOR utilizadopara Ic iD<Hiitorco de c^iHciones lelevanies. 


Sc Tcvisaron i 7 cxpcdicntcs dc casos reportados por Bancu. 

Se evahiaron los proc.esas dc: 

> Reponc ile operaaoncs a las auioriuadcs. 

V Anaiisis dc opcraclonw inusuelcs rcporiadas pcH’lassiKursalcs. 
Moniiorco de opcraciuncs 

> Opcraciones reln-antcs 

> Aicncidn de oficiiH de la CNBV 

Sc verifico el cumplimieino dc 'as principsJes lc}-<s y circnlarcs apiicabics: 


Sc anajiAaiori Jos procesos dc conird para prevenir opcraciones de Iavado de dincro cn las 
niiales; Casa de Qolsa. Seguriisy Tianzas. 


A traves de entrevistas sc idcntitlcaron los proccsos eo los quc se considfro sc ticnc mayor 
riesgo dc iocuirir ea opcraciones dc Iavado dc dir.ero y sc es aluo en cllos los mecanismos 
dc monitoreo. en las sigidcnics areas o fibalcs: 


^ Fiduciario 

> C\nnera 

> Opcnicioncs Pasivas ( Remesas. Cobro inmcdiaio. Ordencs de pago. fnversiones, 
Logistica Mencuna y Achracioncs) 

> BaiJca por rnrcmcj 

> Compra-Venta 

> Cuenta;; Gran Caiman 

> Casa dc Bolss HSBC 
r HSBC Fianrjs 
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> HSBC Sfguros 

> HSBC Pcnsi ones 

> Aseguradora Atlautico 

> HSBC Vida 

Sc idciitificai '00 indicadorcs dc Jos productos coiiriesgos delavado dc dincro. 

Sc dio Rcguimicnto a Jas obscr\ac!ones emindas porlas auioridadcs cn ci iihinio aiio. 


1.4 Conrlusiongi 


HBMX has insufficient controls to detect money laundering oansacrious in ail areas o! ihe 
Gmup in a timely manner. The implementation of the CANfP sy stem is in process yet it 
only includes the Bank's transactions that have been registered ir the Hogan system and 
fails to monitor those registered in other IT systems ’ HBMX subsiOiarics. 


Dircccion de Preveneion de Lavado dc Dincro [Direction of Money Laundering 
DctcTTcncc] has idcmirlcd high-risk areas of money laundering uansaLtiuiis, which arc not 
being monitored. 


The coutmuniearion heiwecn LCDs and Cumpliaiice does not eiisblc ilte tiincly detection of 
the needs and weaknesses of the areas and subsidiaries. 


Tljerc are inadequate internal controls over the I f systcais used to send icformstiOTi to the 
teguiator on suspicious or iclevaat transactions to authorities. 

Ill our opinion, based upon the foregoing, the Direction of Money Laundering DctCTTcncs is 
operating wiiJi a SELOV/ STANDARD level ofCcwitrol Risk. 


Our principle vorcIusiohs are as follows; 
IN TERNAL CONTROL 


The priocipie weaknesses identified ia the adnjim'sfraiion of i>ersoiuie! include the 
inadequate segregation of duties as the department?.! smicturc is top heavy (1 director, 2 
sub-dirocicirs, 5 Mansgers and 5 .^nalysts). 

Tbe inicrnal manual and regulatory ciTirulars arc not updated on a timely basis 

There is inadequate liacdliog and safeguard of relevant and suspicious n-ansactions. ‘I'hc 
Sub-director and lie personnel repcning lo him share ihe password that i.s used to access 
the SlTi system and send ioformaiion to the auihoriiies. Tlie restricted area used lo sioie 
records of suspicious transncuons is not alw’ays kept .safe. 


HBMX GAQ 040025 
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RELEVANT / SLiSP»CiOi:S TR.\NSACTION MONITORING 

HBNfX mocitoring tools in place do not ensure that all relevant '' suspicious tratisactions 
ore rqjorted. since only the transactious regisiereJ in HtJgao arc moaitored, this is not the 
ease for transactions entered through the Rank's other IT systems. The inibimation relating 
to -suhsidiarics is not validated before it is sent to the authorities. The infonnation that was 
incorrectly included by the system has to be manually eliminated before it is scut to the 
authontics. 

There is a high risk of exposure in the dcicctioa of suspicious imnsaciious, for they arc 
delected only through bonking hues. 1 be intemal conn'cda for money lauudin iug deterience 
do not include Croup areas or subsidiaries. The jruditors noted that MONITOR system, 
which is the only suspicious transaction indicator, has not received maiiaenance for the last 
years and the inTormariem coQtained therein has not been used ftn money laundering 
deterrence 

Added-Value RccommendaticMis: 

> Although there is a project to implcinem the C.AMP sj-stem in HBMl. it is ?.iso 
necessaiy to develop systems to monitor (ransactions in other businesses of the H 8MX 
group using indicaicrs and trends in high-risk products and areas and reising alcns in 
order to take immediate actions. 

l.S. RecomendacUmes Princhiaies 


Recursos Humanos 

Vigilar que las fuocioncs inhetentes a la subdircccion dc mcdicion y control se realiceti de 
acuerdo a io establecido por el area y caso dc que el pci'sonal no cumpia con e! perfil 
pouerlo a dispositiou de recursos humanos (3.1. t.l 

Establctcr una adecuada segregaciondc funciwes. 

Manuales > circulaivs 

Ineorpuriir cii cl cuacual de prevcscidn de lava dc dineru pn-vedimirnfos para cl tratnmiento 
de ciientes dc oltn riesgo, pcrfOcs de transacciones de clientes y visitas domiriliarias. 
(3.1.2.) 


Sistema Monitor. 

La udininistrscion del sistema debe cnccgarse a la dircccion de prevencion de lavado de 
dincre. 

Esiableca validaciones del sisfema que vcrifiquc la informacion captureda en las hitacoras 
Escablccer un rcgistrc de liw usuarios que con.^ultan la informacion del sisiema 
Establecer mcc.'tuistnot. que pcntiitan idcnriftcar todas las qtcracioncs rclcvanrcs. 

Auo cuando se tiene d pjoyecio dc impletncnwr cl siscema insOrucional CAMP, es 


HBMX OAQ C4002b 
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Decesario eitablecer mudidas que permimn monitorear las op«3cioEcs adccuadamcnrc cn 
lo quc sc tci-mina el piuyccio. (3JJ.) 


Operaciones Rdevantes 

Dcbcn dc cstablcccisc sisiemas que pcnniian rcponar todas las operacicnies rdevantes del 
,^ipo 

Rcalizar un analisis del Sci dc iransacciuncs dc Hogan vcnficando que tndas las 
transaccioncs cn cfcctivo csiCft »Kliiidas cn cl repone dc opcracioncs rclcvantcs 
Es iniportantc que antes dc que sc repoitcn las operaciones relevantcs dc las empresas 
niiales sc vLTiflquc la jnfcrrmacion. (3.2J.) 


Opcractones Inusuales. 

Establecer las medidas ncccsarias para evitar la ultlizacion dc la red del Grupo con el 
objeto de lavar diiicro ( GSM 5.71, cstas deberan dc consrdcrar codas las filialcs v proccsos 
de HBMX 

Establecer junto cw el atra dc operacionc4 mccanismos que pomiilan coniroiar y 
luonirorcar !os uswarios y bicncs dc las cajas dc scguridad-(3.2.4.) 


Nuevas Disoosicioaes cn materia de htvado cle dincro 

EstablocCT planes formalcs y fechas conipvomisos para dar cuinplimicnto a cada una dc las 
resolucioncs meBCionadas cn las Disposic!ODes.(3.4.1,) 


9 


1 IDMX GAQ 04M26 Pigioa 6 dc 1 


MAYO 2004 
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From: Marion O ROACH 

Sent;FrlJan21 16:08:022005 

To: Slaphen K GREEN 
Cc: Rictiard E T BENNETT 

Subiect; COMPLIANCE EXCEPTION 

Importanca; Norma! 


'Stephen ■ 

; There are two matiers wh'K:h I should briefly draw to your attenflon given their seriousness and potential 
repercussions. These are:- 

; We have received a serious discksure via the Group Disctosure Lina where 3 members of the 
. Compliance function with^HGMX have alleged that senior persons within tine Compnance IVrKtion 
fabricated records of certain mandatory an^money laundering meetings and provided these to the local 
regulator, CNBV. It is alleged that, when asked tor copies of evidence that the meetings had occurred as 
required by local regulation the relevant CompBance OfRcers reafised that the meetings had not taken 
place, and fabricated attendance sheets purporting to be s^ned by relevant attendees for at toast 4 
meetings. After dtecussions with Sandy Ftockhert it has baen agreed that Graham Thomson, Head of 
Audit in HBMX wl! invesiigaie the aBegaUons In association with GHQ CMP (given the need to 
: demonstrate that the Disctosure Line and procedures are beirrg followed} and a report will be provided in 
due course. It is too early to reach any conclusions with regard to the aliegattons or the possible outcome 
of the investigations. HBMX are aware of the need to protect the identity and positions of those lodging 


As you are aware HBUS operates a Benknates business through a variety of branches, induding a 

braich In SGH. It appears that in December f«US the physical 

purchase of US Doftars in the amount of uSD2.9ffl The transaction 

was slightly unusual in toet whilst we had a seKing rPiaVrM^^Krp witMgimlwMia^'i ^reN nously purchased 

}ht we were advised that tha^^h ad received the 
I who to turn had sold machinery to tr 
ir is currently subject to OFAC regulatiDns pro 

transactions by US persons reiating to Myanncr counterparties. The individual relationship manager 
acted without knowledge of the branch manage, and the nature of tha transaction, and the parties 
involved was (deniified as a consequer>ce of roultoe compliance monNorlng in January 2005. 


There appears llttie doubt that tha transaction is a breach of (he relevant OFAC sanction on tha pari o! 
HBUS, (hat it will need to be repnried to OFAC arKl as a consequance there is a significant risk of 
finartcia! penalty. It does ml appear that there Is a systemic issue, rarther we are dealing with an individual 
incident, although given the potentiel seriousness of toe breach external lawyers have been inslnicted to 
assist with the process of resolving matters wSh OFAC. 


I vriH of course ensure that appropriate reports are included within GMB and GAC papers, although wHh 
regard to toe first of the above two incidents I think H vrould be appropriate to awafl the outcome of the 
irvestigatiort before Including details of the ongoing investigations so far as GMB is concerned. I will 
repori in fljit to GAC In relation to both incidents at the February GAC meeting. 


David Bagley 
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From: Maflon O ROACH 

5«ns: VVed Feb 16 11:56:55 2005 

To: Stephen K GREEN 

Cct RlPhairJ E T BENNETT 

Subjeci: DISCLOSURE LINS - H0MX CMP 

Importance: NurmsI 


Stephen ..... 

} refer to my note of 21JAN05 w^le^e I gave iniS^ ndfficeticn (4lhe serious aliagsUons rectived yia the 
DIsciosDre Line, The discfesure made by three membere of rhe Compiance furcticn allege that senior 
persons within the CompiarKe function Mtricated records of certain rnandatorv ano-money laundering 
meetings and provided these false records lo the local r^uiator CN6'>'. 

It was agresc] wBh Sarrdy Fiorkhnn that these flfli>gRiinn& he rnwestlnatnd t?y the locel 3Mdlt 

Function in association witTi GHQ CMP. 

The final report has been received which confirmed the fcCowlTg:* 

The r^e^'snt mandatory monihiy rneetlngs had net bean hold bsiwaan July and Dacanirar. 

Attendance sheete errd minutM were febrtcated to disguba the feet that the meefings had not taken 
place, Fabe records were produced irt teaponse io a lequesl from CN3V* (raceivad during a routine 
exa.'rtnetto.n) fcr ti^t of ths relevant fT^rwtos and attsrdimce shoess. 

Two junior erruioyees admitted involvement and knowledge tof this fabrication aldeil actfrig under 
insmjetions from Csrios Roshin (CRlthe former Hoad of Money Laundering Deterranc© within F®MX. 

GR adrruTted giving the retevanl instruc&ins ard tc being solely responsSMe for the tebrfcaiiori. To h» 
credit GR was eniirely open and can'M in fespondrng *o questions and immediately tendered his 
res^naSon. TMs was accepteo. 

Rancrt Garcia (RG), trie Head of HBMX CMP was unaware of itre fabrication, but was found to be 
culpable gi’.^n fraS he had feiled »c srtsurs that the relavart meetings had taken place, parlkiularty as ha 
had been designated chairman of the relevant cornmiRee, NGhas been given a final wriitan warning, arvt 
wiii rrot receive any bonus or salary irtcreaso for the year ended 2C04. 

CN8V hove been advised andft is notexpecfed ttvatany actioo wiKbo taken, It has been agreed otat I - 
sfrouW ad'.-sis FSA in a low key manner trhfoh wSI then hopeftf !y tdose matiers, 

Ttio need to dersely oversee, supervise 9id indeed support RG on an pngofog basis is recognised and 
we will do what we can from GHQ CMP io assist n this regard. Overall RG has performed credibly, has 
worked very hard, af>d woufd otfievrise be hard Sc repieoe. In the cirourrwlahees whilst we will nert to 
keep rtis poettfon under review at th» ctuge l enrxtrse the oeefown to reiem hts services given that his 
failure is limited fo one of feflirig to supervise a very senior and trusted subordinate. 

I will provido an appropriete report to GAC at the next meeting. 

David Bagiey 
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From: John F ROOT 
Sent: Fri Dec 02 15;&3;1S 2005 
To: DavklWJBAGLEY 
Cc: Mahon O ROACH 
Subject* Re; OFAC 
importance: Normal 


' Redacted by the Permanent 
Subcommittee on In^ estigatr. 


Taking your queries in order . 

Transactions rrtesions In the United Slates are exempt from the US|BHB 

Transactions Regulations (commonly referred to as the "OFAC sanctions'*} provided that they are related 
to the import or export of goods and services which "are for the officiaj bu^ess of the mission", or frx the 
"personal use of persotnel admitted to the Urrited Sta^ under la special inTr^rabon section}" and the 
transacflons are "not otherwise pxohibltBd by law". <31 CFR S60.512) There is no deflrub'on in the statute 
as to what consb'tutes "officia! business" of a mission or "personal use". 

Ramon told me that only two embassias- out of all the ambaa^M they do business with - have USD 
accounts irr the Cay^n islands. They are: He dU not volunteer an expianaHon, but 
perhaps he didn't think that one was r>ec83s^rHesem^» somewhat constrained so I did not press him 
further. 

The challenge Is to detaimine whether a tranBa^for^^fo^|C[fflcja^us|ness*^he|^}a^ been a number 
of media reports In serious rrewspapers 

misusing their diplomatic status for alteged fonding of alleged terrorist actiuides — In perticuiar through 
their "Islamic interests" sections. Their deferK:e is that the funding Is for legitfinatB charltaUe isiarm 
pwposas such as the fending of mosques. Some Wes tern au thorities allege more sinister purposes, e.g. : 
the funding of terrons! Hizbollah activities fo the case ol^H|At the very least. Group ifeks befog caught 
in the rrndst of a highly visfole and passionate polemic, a polemic which sadly has already caused a kA of 
bloodshed and p ' 



hope foe above helps. I would be glad to discuss further wHh you at your convenience. 
Kind regards, 

John Root 


David W J BAGLEY/HGHO/HSBC 


DavidW J BAOLEY/HOHQ/HSBC HOMO Servt To John FROOT/HGMCVHSBC®HSBC 
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From: Graham THOMSON 
Sent; Thu Mar 22 •|6;13;38 2007 
To: David 
Subject; 

Importance 

Attachments: image_0,gif. irnage_1.jp9; image^2.jpg; image_34pg; !mage_4 jpg: image_5.jpg; 
^^e^jpg; image_7.jpg; image^S.jpg; image^S.^: itnaQe_10.jpg; ifnage_11,jpg; Doc Link, him; 
kML_Mafch2007.doc 

Graham Thomson 

Head of Group Audit Latin America & Mexico 
Tel (52) 55 5721 6236 

Fotwarded by Granam THOMSON/HBMXAISBC on 22'03/2007 10:14 a m. 


Paul A TBURSTON/HBM»HSBC 21/030007 
00:02 pm. 


To Graham THOMSON/HBUXHSBC@HSBC 


cc 



Graham, 

As promised. 


Regards 

Paul 


— Fafwarded by Paul A THURSTON.'HBMX/HSBC on 2ire3.'2007 07 45 p.rr 


Leopolds R BARROSO/KBMX/HSBC 2CU03/2007 To 
lOTSp.m, 


Paul A THUflSTON/HBMVHSBC@HSBC 
CC /trvIrewPROSSER'HBMX/HSDCeHSBC. 

devid.leighisn@hsoc.eom.mi. Rafael. Arana. Ga/7a@hsl>c comm 
Ramon GARCIAWBMX/HSBCSHSBC, Saf^«^y • 
FbdchafVHBMXO^SeCl^HSSC 
S“ti*e Re:Fw| 


Paul, 

I am caclosing a dnilt of'thc arorememiorKd report in a docimKm file; Iwwever. ounv of ihc events disclosed tor 
executive purposes Itave not l>een quoted or included in ilteir toiality. ilus a hard copy of ihe coinplele version with 
ail necessaiy Annexes will be sent to your oRice. early loinomiw (9:00 AM). 
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I Nvoiild like lo have oppormnin' to address sonw of )'our<)uesiioDS, which air panially respoitded Ihrouglioui liie 
doeumcni: 


Thcciistomcr was oot a referrai /roto other part of the Grotip. jtDce the a«ouni was opened duringl 


Tlie Money Laundering deterrence reporting bistoiy is weltdociununed in ilie report, 

This was a Corporate entity, mui as such it should had been managed by other business segment incur 
opinion; however, this issue has been • discussed at the MLD Commiticc. not only conceniing this case, but 
otbecs dial iiad been brouglii to tire attention of said Commitiec, but a detlnilion lus not been attained, 

since tire nature ot tire (.'otnmiilee limits its capacity ioeurciseamigt^ionor cusionreis frotn one segirreni to 
another, ihougji. it has been staled that our dHccttotvarul AML enforcement rules might be biased by having 
entities recorded aivi managed by wrong types of busincu lines 

The search across tbe group lias been initially requeued with the conipuiiies. and individuals, direciiy 
associated to the case. As for the other entities that could be associated as bciicficisrics. or issumg parties of 
reniinances, or other iinaiicial transactions are pending re^wnseirooi tte operating areas in order to be 

identified, since this iiiformaiion is not available at our main opoaciog piatfotm. this sliould be completed 
lomnrrow. and the report would be also iqtdaied. 


Siiooldyon need any cxpianaiion of the cr)cli»cd report, please on call uk at your earliest convcnicuce. 


KindTlesards 

Leopoldo 



Paul A THURSTON/HBMX/H5BC 


PaulA THURSTON/HBIM/HSBC 20/03/2007 
11;39e.m. 


To 


cc 


Subje 


ci 


LeopoMo R 8ARR0S0/HSMXAtSBC@HSBC 

Sandy Rhxkhait DavkJ LeigMon, RafBel.Afana.Gar7a@hsbc.c0rn.mx. 

Ramon QARCWMBMXfHSBC@HSBC. Andrew 

PROSSER/HBMX/HSBCSHSBC 



Leopdido. 

David has forwarded your note to me this morning. This is a very serious, and high profile, case which 
has potential reputational damage to the HSBC Group, and must be given ihe highest priority. 
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By now. I would hope that you wHi have completed your analysis of the case and I would ask that you let 
me have a report by the end of the day. I would fike to know, mlsf aSa. how tfiis account was opened 
(was it a referral from another part of the Group or a local account opening?), the activity on the account, 
the money laundering reporting history <includ^ the naines of ttie people in PFS who claimed to have 
detailed knowledge of the customer arrd declined to make a report), and the current status of contact with 
the authorities on this case. As this is a corporate entity. I am surivised that PFS management appear to 
be managing the relationship, and peihaps you could also clart^ this. 

I trust that we have already initiated a trawt across the ^up tor any other accounts held by this 
company, the connected individuals, and associated companies and/or ktdividuals (including those who 
have sent remittances to. or received them from, this account), and I would like to know what we have 
found from this, thus far. 


i would presume that BSE would be helping in this investigalion. and hence I am also copying Andrew 
Prosser, 


Please gel back to me on this by the end of the day. 


Thanks 


Paul 

FowarOfed by Paul A THURSTON/HBMX'HSBC on ZD/OS.'MD? 11 02 a.m — 


Leopoldo R BARROSO/HSMX/HSBC 16-03-07 david le 19 hlon@h 5 bc.corn.rnx 



T^lt ruvoBitrw-u rtpened i6th< ^mboniic^ by iIBMI<linof|[m§eveiu wbKb <n«>tr<ipintra> *)l ibit precMsU ind tevcial an«nipis 

««rr made lurepon and oarfuatly i:inc«l (li< r<Uiu>inhip«kpn>af«t:i«J><y Mt.Dai MUD O-nmiilce ObcM jbservatwsL sail 

anquirttu Ibebutiueit an properly disvmenicdinllK MlDCntuniiwe mamMCii. however. PPSvfoed 'bai tbtcisiosier wsifpie. properly 
docuneawd. aadbewnby ibe bwiaoi u<dilui t uiesellaiion waeoot accepted, not anew report uiibeainbeeiiiei war destnbit. tuebthe 
buaincaasvtuiDCdlkc 6ill respenaibiliiy ofasy dtcrvinpcflttK »lbe one thaiunfonMnalcly occuned yeaitrday. 

t arDbuikiian a mute eitpliiiii aad c>in<pi<k«>i<iveK<Me«(i<«raoatv!>iiorihc atui altordw rvenia id a timeline Ihul preceded ihii uafimwaK 


HSOCS utne haamn heeaprinleit yriin >sy rttedia le pterr repirn. hi'wever. wc migbt expect some oiintbcai uo ibia Ixeue. ny 
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ci^lrmstioR is :hai s*? noi onh buiik. &c> opmtoip U(k« IhcirbafatKCS V'ltii HSIK ;irt sot sct^ high. spe<;)3il>' wK^ rdaitfJ 

u* ihc amotini «iihf 52i7ur« . 


A cRpv of the (‘iVicidi pre^i rei<9^ hv the PCK b i« aOftcheil let Ihnt rmaH. inclading |RCtaffifi!t ofA^ hill, and u'eapnne tei/ed. 

SlKiuIdyou need me for m irranedinie drbneftiQ. 1 an»ai3aMeai yuureariioi comvainee. 

Regards 

leopnido 
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From: Susan A V\ff^lc^T 
Sent Moo Mar 26 17:33:37 2007 
To: Graham THOMSON 

Cc: David W J BAGLEY; John F ROOT; Warren G LEAMING 
Subfact; Fw: Traveliers Cheques 

importance: Normal 

: Attachments: Doc Unk.h h7i: HBMX CMP PLD Oi S IX - JWL Procedures on Traveller Cheques.doc; 
HBMXCMPPLD015 04-i : 


!r to my note last wwk I have i: 
A Bached Cbr your info. 


fact located the note from Ramon n 


Regards Susan Wright 

Forwarded by Susan A WRIGHTvHGHQ/HSBC on 26/03/2007 17:27 - 


Ramon GARCIA/HBMX/HSBC 
HBMX 

30/1 1/2004 00:52 
Mail Size: 3147 


To ' 

John F ROOT/HGHQ/HSBC@HSBC 
. ' ce 

Carlos ROCHIN/HBMX/HSBC@HSBC. Davkl W J BAGLEY/HOHQ/HSBC@HSBC, Susan A 
WRIGHT/HGHQ/HSBC@HSBC 
Subject 

Re; Travellers Cheques 
Entity 

HSBC Holdings pic - HGHQ 


Please find attached a pccliininary oote on traveller cheques. 
More infoimarioa is being compiled a/td will be delivered soon. 


By the way , you inight find interesting a recent case involving traveller 
cheques, whose report is alao aoacbed. 


Regards. 

Ramoa 
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JohnFROOT 
08/11/2004 02:47 p.in. 

To: Ramon GARCIA^BMX/HSBC@HSBC. Caites ROCHIN/HBMX/HSBC(^SBC 
cc: David W J BAGLEY/HGHQ/HSBC@HSBC, Susan A W*UGHT/HGHQ/HSBC@HSBC 

; Subjeci: Travellers Cheques 


Ramon and Carios,' , 

1 note (hat in ibe yearthmugh 3Q04, HBMX has sMdoFverUsb llOmlllioaof 
travellers cheques, an amount that eclipses that of KBEIJ here in the UK. and 
that is several orders of magnitude higher than any otho- ma-UtC entity, 
incIuiliQg Houg Kong and the US. lo &ct. it i^reseats one-thiid of the 
Group's total global traveller's cheque business (w^h the UK. repteseming 
another third). 

Could you kindly prepare a report fbr GHQ summarising the money laundering 
procedures currently in place for such a booming buUness. Please include in 
this report KYCcorHrots, number of SARs m the YTD. breaiolownby region and 
branch, etc., etc. 

Thank you. 

Kitvi regards, ■ 

John Root 


«...» «...» «...» 
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From: ^andy Ffockfiart 

Sera; Wed Apr CM 15:13-.37 2007 

To: Graham THOMSON; Matthew JWKING 

Cc; L'z A TESTER; Pau! A THORSTON; Seiyio PINA 

Subject; Re: GROUP AUDIT COMMITTEE • APR07 

Importance: Normal 

ARachments; Dec Link him 


Craiani. 


! bclicte vau iced lo show some 1 kI« and stiadc k die sicpsi l;ikcn lo improve 
docuniciiialioa'he iinprcs’citKiH iu Fiduciario.ilKrationaiLsalioii of 
Finjuas.iiu Fiaiiriis. wc Imow die issue bui ni Fktnciario as wc oannoi by of 
she lisk Uicfc will .'liwasstw imccnaimuHhc fact Biat in eredh cards die 
principal issue is tiic updaiiiii; of Fak.i)ii sivl growth pains nod batancinc of 
rcsoiifccs.Mic iLcr (lisi our priicrpal fraud raUccifd lo prior veara and il^ 
i!k cajero Iraiids were organised crime events and ilni prevertiwi was s'ciy 
[Uniciili unless siatT spoke up and pos'iihly there was fHCSSiiic pm oji 
ihem.AsInr regulutQiv (incs-wc liave Mopped nBlMin® these which may be a 
iiusiakc t)iil ri rii.imlH:T weie where the pst ydministratioa deckled to clear 
lic'r hooks 


This type of analysis should he bnjuglu to the AtHklCnUsaiientton. 

I v.-Quld uppreciate if you could consider sticli an analysbas it willhcncrn 
incmhcrs undcraiuidiiig (il'oiir envimnmetir. 

RcunriSs 

bandy 


- Original Mer-sage — 


From; Gniliam THOMSON 
Senr; fW..Oa'2tKi7 05;-i6 I'M 
i'n:MatllKw j W KING 

Cu: l.i/. A TCJi' lER; Piiui A 'IHL'RSTOK: Sandy flotWian. Sergio PIKA 
Re. GROUP AUDIT COMMDTEt • APRft? 


Ill ruspouse (0 youreinyil i tomnwnras ibllou-s: 

Tlic nwiii syMctnii- weakiiesses in HDMX. which 1 believe remain ouiildiduig.x'e 
at follows: 


KVC ssidentilicd iu branch ainlcontitmous audit repons. 

Tire bek nl' adcdu^'c docuiiieniiirion and filing sysicrns u-hicli remain from tlic 
i'nntter Bilal days, evidenced most ‘harpiy m the Icpa! cases m Bands and the 
otistandiiig Tnisi casus, where we uorainuc to be ai risk. 

Lack of II compliance ciiMiiTe, evidenced i in the n»ii serious way I by the 
number of sL'it.''dera1caUoiis ma! tin a more widesiHcml (tcner;il ney.liesnce) in 
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llK nuiiitK:rc>! fi]ic4 uc receive IVoiHibc rcgnlaiors lor avoidable erron - 
eg, fulling iQ tegori hrctiich ogenims. orsentor imnHgcnicni3]^iiHnicms.oa 


Dscrucccsscomrol and pastu-ords. 


Inconsisieiil Ml prodiiccd by FinaiKc, ihc RienKSS and CRM H'hicn h»^ liindered 
early ideuiirKalioii ol piobleiib as well as JauipcriMcWccuvc decision 

in-iViiis 

RcKanjiiia opmniJig losses mid vrertil citd frauds I append !Ik foitoui!^ 
comiutnfs: 


Op lusscs - The iretKi in cunglu ihc anendcii oI'MaitagcnicKand actim 
IS being lake;) lo miiipaie losses. A winking group is ’oeis^ cstatriistied lo 
improve ( 1 « rcjvniiiigdrnicliness siid cooipieteRCSSi. sccuiacy oftbcGonjoii 
daiabase aiidannlvsis oS'evems. based on recojimwndatimis oiadc reccuth' by 
GAO, 

Credit Canl.s - A rcvic* of credit cant frauili which was ihe most signiifcaiK 
coniriliiKor 10 Op I.ijss. svas rccenily compleicd by UHQ and die bii$i»c.ss is 
responding lO i^ie rrpon's rccoirtmcndaiiorBaivlprc-pitHinsinpiacc aseries 
ol'sivj'S In itiiprovc the qunliiy of oorcard fnixl pjvvcnticin and nanagcniciH 
so as !o reduce caid rrnint back lo wiitiiu local nidiisliy noms. 


Tltc loregL'ing svas discussed wiili Paul Thuraon. Thesv cMinnents will bo 
included in iny report to the nest MRM.X Aurtn connoinee 


Kegards 

Graham 'I hoinson 

Head of Oroiip Audit Laibi Amorica &. Mexico 
TcU52>55S7ni<«ny, 


M.nnhew J w KING CGM INA OHQ'UGHQ-WSBC 

SenibyiLbATF.STtR 

{i2'll4/’no7 a.in. 


To 

GrahMi ■mOMStJN'HBMX-lfSBC'M HSUC 


StibicLl 

Rei'GROL'P AUDIT COMbnTTEE • APROf 


Mny I piCiisc have a cespcuiSB lo ilic aH»:hc(l today » i 'o linalisc iny 
GAG jinper? first ihinc' 'oiijornsw. 
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Rcganls. 
Maitl»ew Kv.ig 


Mdnhew J W KINGGOM INA QJQ-'HGHCyUSBC 
GGM !NA G60-'HGHQ 
Setii by: 1 i/ A TfSTr.R 
29m'2(n>7 l?,iV 
Phone Ko. '93 21 17iV 
2h 7W2inh 
Mai! Su«; 2-335 


Grahaii-.THO.ViSON.''HBM7<.-HSBCs^-HSBC 


Subjcci 

Re, GROtP .AUDrT COMMITTEE - .APRo? 
Enlily 

HSBC Holdiiiss ptc - IlGHQ 


Gralwtn. 

Tlwnks. 


Cooldyon siiininansc the numsysfcmk weaknesses ioHDMX which you belies-c 
remain ontsiairiine 1 nppreciaic these iiay alrtady Nnc been reported, but 
prcsiunably some have been addressed. Wicrc do ac suind on tlic rising (I 
think ,1 incidence nC opcraiing losses .ind credn card frauds? 


Maiiticw 
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From: Graham THOMSON 
Sent: Fri Apr 20 19:43:26 2007 
To: Matthew J W KING 

Cc; David WJ BAGLEY; Liz A TESTER; Sandy Rockhot; P»jI A THURSTON; 
Rafael.Arana.Garza@hsbc.com.mx@HSBC; Ramon.GARCiA@hsbc.com.rnK(^SBC; 
: phiirp.GRECKI@h3bc.com.mx@HSBC; 


ImportarKe: Normal 
Attachments: Doc Linlchtm 


'3 


© 


Matthew 

I rerer^j^^auached email, which was considered Myesterday^TDeetjug 
olThe ^^^^ conimiitee. cliaired by Paul Thurston. 

This meeting, the third chaired by Paul ab0!4 l^^^gthat involved GAQ. i$ 
pan of the process he Initiated over a month a^joH^ing the se'uure of 
the arms and money from our customer's premises and his requests for separate 
reviews to be completed by CMP, PFS, PIF and GAQ. Reports Oom 0.0* and PFS 
hud been considered at a previous nwetii^. 

Tlw meeting considered the recommendations detailed in GAO'S reporu U 
received a verbal report from PIF (written interim report received 
post-meeting) on (be results of its investigations to date into branch uafT 
there were associated with the account The invesitgaiions are still 
continuing. 

Paul's summary of the meeting and Hs action poittls are detailed iit tlw 
anached ematl. Ollrer points are as follows; 

1. The meeting acknowledged the diOicuIty io accniateiy compktidg KYC 
checks whore customers deltberetcly tried to cooccsl tlic real iiacM of their 
business activities, as appears to have been the case 

2. The meeting expressed reservations over the practicality of (iic new KYC 
requiremenu recently introduced by CNDV which required customers to project 
their transactional activity to allow individual benchmarks to be set ilat 

could be used to compare with actual activity. 

3. PlPs iirvcsHgations, which are contlmilng, confirmed that Alvaro Rocha 

his recommendation to the AML committee io AUGOS «oi to report 
the authorities, on incorrect representations made to him by staff, 
t^nctSdbecQ lied to. PIF hathcr eanfirmed that soak of (ho KYC visits 
probably did not occur, that some ofthe staff involved had breached code of 
conduct requiremeuts by making in some eases sizeable loais to each other 
although there was no lndi(^^n^hls time to suggest that any Itad 
benefttted direeily from thr^^^^conncctioa 

dd^^HMindicated tJiat the branch staff involved in completing 
inaccurate visit reports should be dismissed. Any ftother disciplinary action 
should await the fwdings of the eompieted PIF iirvcstigation. 

S. Ramon Careia coofimied that other banks n||n^Hm|||||||^^^||| 
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involve as baitkers not reported the cusitHner id tbe 



A Follow up meeting will be held to monitor progress in Impktneruing the 
sclion points. 

With regard to your ofTer (o send someooe to teview the AML alen process, 
the following is ptaimcd: 

a. CEO HBMX will review tbe need for any additional support fiom OHQ with 
Croup Compliance, once the immediate action steps have been compioted; and 

b, GAQ has scheduled nn audit for 3Q07 of this departmem ns pan ^ilS 2007 
annual plan. A focus of that audit wlU be on the re-eagineered AML and CCC 
processes whicli will be in^rlemented as a result of the above meeiing. We 
shall also be strengthening our continuous and branch auditir^ focus on KYC 
although as you will recollect these weaknesses have been a repetitive theme 
ofmy comments to HBMX audit coDimiUee meetings. 

Please let me know if you retpiire any clarification on tbe foregoing, petvding 
which summary comments will be tabled at LAM RAC, given (hat the case was 
discussed at yesterday's MAC meeting. 

Regards 

Graham Thomson 

Head of Group Audit Latin Arrerka & the Caribbean 
Tcl(52) 55 5711 6136 

Forwarded by Graham THOMSON/HBMX/HSBC on 2CI/MJ2007 08:46 am- 

Paul A TKURSTON/HBMX/HSBC 
19/04/2007 09:03 a-m. 

To 

RafocI Arana Caru/HBMX/HSBC@HSBC, Jose Manuel Dofnmgucz/HBMXmSBC@HSBC. 
Graham THOMSON/HBMX/HSBC@HSBC, Ramon QARCTA/HBMX/HSBC@HSBC, Leopold© R 
:BARflOSO/HBMX/HSBC@HSBC. Nick 01LM0URmBMX«SBC@HSBC. Philip 
QRECK1/HBMX/HSBC@HSBC 
cc 

Sandy F10ckhart/HBMX/HSBC@HSBC 


Following our meeting yesteiday. I am summarising ibe key action Items that 
need to be progressed: 

• The Audit report reconvnendatioiu will be Iniplememed as fellows: 
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L The rq>reserTtation at CCC to be Tcviewed aiKl proposed mendMnhfp 
submicicd to CNBV (be approval. (Qarcia) 

2 . Business Heads must remind their CCC representatives of the imponance 
of their roie and of taking an independent view. They must be prepared to 
challeng e their coltei^ iggy^^ev are not satisfted with the tesponses they 
receive. ' 

3. The analysis, assessment and reporting procedures need to be revamped. 

Tbc key is to bavc appropriate escalation procedures to crtsuie that higher 
risk cases are brou^t to senior management attention, and where the CCC or 
CMP has any concerns, these are to be brought to theattertfionoftlie 
Cusmmer Group Heads immediately. (Garcia) 

4. The management [Hocesses of the CCC must be strengthened. The minutes of 
meetings should ktenlify clearly the decisions taken, and there need to the 

be improved procedures to ensure that open items are always fbOowed up at 
subseqtttm meetings. (Garcia) 

5. PFS and CMB relalionshtp managers should be given fin daer trainlt^ 

(he correct completion ofKYC assessment reports. (Garcia. | 

6. A review should be undertaken to identify all corporate entitles ilrat 
remain under management by PFS. these shouldbe uaosrenedtoCMB without 

delay. ||||||||||p||||g|ig||||||| 

7. Branch stalT who completed false KYC reports should be dismissed, once 
the ongoing PIF investignlion has been completed 

Please ensure that iltese items are followed up and provide a forma) 
written response to me on the above points, coafimiing that these 
recofiuneztdalions have been implemented by 18 May 2(X)7. 

« The detailed P]F review, which has been undertaken over the last 2 wecia 
will be completed, wd a second interview will be arranged with one 
execut ive, and a_ re port prepared, vritb rccomoiendations for tbsciplinary 
actioTL 

• Although lire PIF review has not foiuvl any evidence of direct Inkage 
between the staffinvolved and the company (subject to the Aather interview 
to be arranged). It has surfaced evidence of breaches of poliCKLin respect 
of intra-staff loans, aod documentation signed in blank. prepare 

a CEO circular regaling our policy and zero tolerance approach, and PFS/CMB 
Heads should personally reinforce this through their nbanagcmenl teams. 


• The improvement ofKYC procedures, account epemng and file maintenance, 
which is cutiently comprised of a number of iodividual iniUatives, needs to 

be brought into one coherent programme and given appropri^e en^ltasis. Tite 
incoming COO HBMX will tw (asked with reviewing these and putting an 
intplecnemation plan in place. 

• TIte review of other cases which have similar patterns, and aU high risk 
cases, has been computed, and a special CCC meeling wiU be arranged within 
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B week (D nview ibese cases. (Garcia/BaiTOSO) 

• TIk review of other pharmaceutical compaates wbicb have had money 
laundering alerts is underway but needs to be completed. (Garcia^arroso) 

- We continue to await tlic list of other names Grom the federal authorities 
which they will requite us to check. (Barroso) 

- Contaclmuslbemainiained with the authorities, with wbomwe will 
contitue to co-operate tulty, to maintain our reputation with them. (Carcia) 

I will arrange a further meeting to review progress on the above. 

Regards 

Paul 


Matthew J W KINGiGGM INA GHQ/HGHQ/HSBC 
Sent by: Liz A TESTER 
1 8-T)4/2tW7 04:29 a.m. 


To 

Graham THOMSON/HBMX/HSBC@HSBC 


cc 

David W } BAOLEY/HQHQ/HSBC@HSBC, Sandy Flockharl/HBN4X/HSBC@H5BC 
Subject •• 


© 


Graliam. 

Not a happy story, i note the recommendations will be discussed later today 
and no doi^l subsequently. My initial reactions are set out below. 

Please advise what action is taken in respect ofllll^^^H^ho appears to 
have vouched for this customer lo AUG02, and then to have failed to fuilll 
his undenakings to the CCC Comnunee in DEC0$. As a reasonably senior 
executive 1 would have expected a more eommiiled approach to his 
responsibilities than appean from this saga. 

The incoitsistencics m the visit reports obviously raise some questions about 
whether stoTTvyere more closely involved with the customer ton they should 
have been. How is this being redressed? 

The fact that staff are producing reports that are unreli^te is a serious 
issue la itself and ncc^ to be taken into account la considering the 
appropriate disciplinary action. 



Redacted Material 

Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8875013 


VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00666 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



653 


VerDate Nov 24 2008 


The weakness in the processes within MLD to analyse and monitor CAMP alerts, 
and to act as a check and balance on maDagcmcnt, is obviously a general 
concern. Is it wordi having someone come into look at processes fVom (op to 
bottom (including at the CCC) to ensure they arc robust 

Finally, are there any other customers where there is a similar fact panem? 

Regards, 

Matthew King 

o 


©■ 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8875014 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00667 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



654 


VerDate Nov 24 2008 


^ HSBC Bank IISA, National Associatton 

^ Office Ivieinorandum; . 

TO: 

Denise ReiHy ' . 

FROM; 

Judy StoUt 


Glofia Strazza • • 

DATE: 

May' 1, 2007 

RE: 

WaD Street Journal Article Regarding Wachovia 


CONFIDENTIAL 

FOR INTERNAL USE BY HSBC PERSONNEL ONLY 

Ths rnMnorandum sommaiizM an article in the April 26, 2008 edOion of tbc Wall Street Journal (WSJ) lliat 
discussed an invcstigslion into Wachovia's casas de canibio busbess. 

This memorandum also discusses the actions that HBUS has taken, vrith respect to the casas de c^bio 
■mentioned in the article as Tvell as other cambios that were not mentioned in the aiticie. 

Please note that HBUS does not hold any account for any casa dc cambto mentioned in the WSJ article. The', 
only HBUS connection to activity involving those named casas de cambio is activiiy that was •conducted 
throu^ our coirespondcol accouirts, and most notably throng our atexouid with HSBC BankMedco 
(HBMX). - , 

1. Wan Street Journal Article 
Sumtnaiy of Aiticle; 

• Federal prosecutors be investigating Wachovia as part of a probe of apeged laundering of drug 
proceeds by Mexican and Colombian money-transfer companies. Wachovia is allegedly one of 
■“several large US banks” that have cewne under scrutiny for relaioasfops rvith such companies. ' 

(The other ‘large US banks” were not named by the WSJ.) Wachovia built ties to -casas de 
cambio in order to tap the Hispanic tnarkeL Wachovia held deposits for the foreigp-e-xchang® 
houses and provided badc-office services to those CTtities. Wachoviais cooperaiing'with 
iuv e sti gamrs and, in December and Januaiv', severed lelatioDships whh Mexican fareign-exchasge 
firm* 

• Four casas de canibio were mentiooed in, the Journal article - two foal are associated wifo Wachovia . 
(Casa de Cambio Puebla and Majapara Casa de Cambio) and trvo that wore roenlfoaed in. a side- 
bar ^igue Corp. and Ribadeo Casa de Cambio. Sigue was fined by the Jiatice Departinenl and 
RibailBQ laiimicrcdfirads indirectly via Union Baiik of California- The allegations- invobing Union 
Bank and Ribadeo resulted in an creForceraent action against Union Bank.) 


^ IPcrmanent Subcommittee on Investigations 1 
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These cambtos are discussed bebw, along with inv^i^tions HBUS perfor me d, inlo these entities (both as a 
T-csnlt of ihe Journal article and prior to tire article) and btiiM’CamlHos. . 

i. WSJ List of Casas de Cambios: 


• Casa de Cambio Puebla “Per tbeW^J^PucsHa is a. Ifcjdcan chain of caniWcs and is subjectta a 
federal court action in Miami, Ftorida in^rfuch.fedcral agrats seized more than $il miIlbaTii23’ 
Wacho^^a accounts bebnging to diis entity. Prc^eciitors allege the money was laundered'’. 

' Activity; • No accounts are held by IdBUS; a fbnncr Banknotes account was closed in June 2007;. 
funds invohing this entitj'passedthroughcorrespcfDdeataccouDtsheldbyHBUS. (Reference 
CTimrnr".! ifk beloW'h 

o On June 2007, HBUS 

(though HBMX) of a seizure wanant issued by the Southern District of Florida at the request 
of the Drug Enforcement AdmirristiadOTseddng to freeze $il million in 23 accounts at 
Wadio\'ia. All banknote activity at HBUS W’as terminafed inJune 2007 as aresultoffee. , 
seizure warrant issued agalrvn WaGbovia.' In October 2007, at the suggestion of the OCC to 
^erfoim a money service business review, HBUS commenced a review of wire activity over a 
12 month period (October 2006 to September 2007) in fee dollar range of $5,000 to $25,000. 
(This revTOV will be referred to as the ‘^October 7007 Revievt'^. 
o On. November 8, 2007, a news article was publidied in the Miami Ifcrald' that alleged that 
drug funds were being laundered ferou^ Puebla. Upon receipt of the article, HBUS 
confirmed tlat it had no accoora relationship with Puebla, 
o The October 2007 Review, revealed that wires involving Pitebla had passed throu.^ its 
corrcspoDdeiit accounts. On November 30, 2007, 

rqjQrting feat apprcodmalely 650 wire transactions had cleared ferou^ fee HBMX 
correspondent account where Puebla was ehbicr fee originaior or beneficiary of fee wire from 
January 1 throng October 31, 2007. On November 16, 2007, HBUS added fee name “^Ca^ 
ds Canibio Puebla” to its Internal Watch List to ensure that no accounts could be opened for 
this entity. On January 23. 2008, HBUS added the name "‘Casa da C.ambio Puebla” to its • 
HernaJ wire filter sj'stem. The internal wire fillet .causes all wire transactions feat are 
attempted to be processed throngh HBUS to be scanned against fee names in the ‘filter”. The 
filter will stop any wire that includes a ‘filteretT’ name (in this case ‘’Casa da Cambio 
Pueblan. An HBUS wire room eit^lc^ec would feen reject the payment. 

0 HBMX, w'hich held an account for Puebla, "froze” its account afier fee November news 
article was published. HBMX provided HBUS wife a list of 91 parties presumed to be 
related to Puebla. EigJity'One(81)paitieswcreHBMXcustomers. whose accounts were 
frozen by HBMX. A wire search was perforrool (for the peri.od January 1 through October 
3 1 ^ 2007) rtn feftSft 9 1 nam&«; that iy;<;iilf.»rf in pn tential tTangftrTinng AftCT review, 170 
■ wire transactions totaling $7,370,508 were found to have been condneted by 6-indrviduals or 
' entities whose names exactly matchednames ootfae list of 91. 

Otis noted feat .all of feese wires originated by Individuals and. 
unities from accounts held at Wachovia. A search revealed that none had accounts at 
HBUS.) 

o In February 2008, HBUS' cc«ducted a fbllow-up analysis of the cambios identified by HBUS 
in its October 2007 Review that were deoned to require follow-up review'. The February 
2008 review' exatamed wires processed between October 2007 and December 2007' in 
amounts ranging from $5,000 to $25,000, and h was revealed that only 3 transactions were 
processed through HBUS correspondent accounts. 
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• Sigue Corp. - A mone\- service business that all^edly processed $24.7 million in suspicious mooev' 

. remittances rdated to drug-traf5ckixig proceeds. It forfeited $15 ndllian and agreed to spend $9.7 millioa 
to upgrade its anti-money laomdering program as part of a deferred prosecution agreement re^ihed fes 
DepaxtmKit of Justice. 

o Activity: No account relalionsbip is held with Ais entity: funds involving this errtitv passed 
througji correspondent accounts held atHBUS. (Reference comments below.) 

o On January 12, 2008, HBUS notedanews article that reported Sigue Corp., aCalifornia 
mon^' service business (MSB), was entoiing into a record $25 rnillicsn settlement with the . 
Ju^oe Department for money laundering violations related to the manner in. which it handled 
rsm^tances to Latin America. The paialty assessed against Signe set a record fora 
settlement with the Justice DqDamnent by a money service business. The allegaticHis focused 
on and-money laundering deficiencies that permitted arguably suspiciems transactions to 
ocscur primarily bctw’een customers in Ae US in Ae Dominican Repubbe and Mexico. 

Q Based on the article, HBUS condocted a review of its accounts (which oonfinned. that no 
relaiiooships were held wiA Sigue), an mdependent mvesdgarion irtto Sigue and a review of 
wore transfer actiNity. 

o The independent Avestigalive search on Sigue and its founder (Guillermo de la Vina) was. 
conduct^ to detennine whcAec either were Ae subject of any other negative news or law 
enforcement activity. That AvestigatioD revealed Aal a Sigue employee was indicted for 
assisting drug traffickers to launder drug proceeds but Sigue itself was not mdicted. Sigue 
mentioned m aaoAer article as havii^ allowed $295,000 to be transferred •from an 
account at An'est Bank to an Qi^al alien A Mexico. (These allegations arose out of an 
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and Customs Enfecement acdcm, asainst the ill?^ alien's anptoyer. Slgue, 
again, was not implksteal) 

o -Tbe wire review re^^aled 161 transactions for $492.5 million were sem over a 12 rnnnrh 
period (January i thrcn^ DeCemberSL 2007). HBUS contacted HBMX (the bsneSdaiy 
bank) fbr information about its cnstomer and these wire transactions. HBMX stated that its 
relationship with Sigue is conducted within Certain internal parameters (sudi as limitiDg 
Sigue to conducting transactims' for indmdual castoti^rs to $2.000 USD pert transaction). ' 
o tiad, between January-' 1 

sndDecembH-SJ, 2007, salt 159 wire transfers totaling $484,499,916 to its cwt 3 account at 

as 

Sigue entered into a written agreement wifo the Department of Justice to enhance its AML 
program and was not (per the iirvcstigativB search) the subject of any other monej' laondering 
investigations. 



Redacted By The 
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3. Enforcement Actions Mentioned in WSJ Article: 

• As mentioDed, the WSJ article's ride-bar discussed 3 enforcement actions against financial institutions as 
follows: 

o Union Bank of Califomia - Aliped to have allowed a casa de caenbiD to launder drug funds 
through its accoiints 



o American Express Intematioual Bank - all^edly &iled to report $55 mill ion laimdered 
through accounts otsued by drug traffickers 

o Bank Atlantic ~ Undercover agents found that dmg fimds t\’ere laundered throu^ one 
branch. 

• HBUS o riginall y reviewed these enforcement actions to oncrn'cr assy nairics of drag traffickers or casas de 
cambio, but re\'ie\^^ them again in light of the WSJ artide. No ofoer names could be associated with these 
enforcement- actions (other than Ribadeio). 
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EXCERPT FROM SIGUE CORPORATION 
DEFERRED PROSECUTION AGREEMENT 
JANUARY 24, 2008 

Factual Statement 

1. Sigue Corporation, organized under the laws of Delaware, and its affiliated 
operating company, Sigue, LLC, organized under the laws of Nevada, are licensed money 
service businesses headquartered in San Fernando, California (hereinafter jointly referred to as 
“Sigue"j, Sigue’s primary busmess activity is the transmission of funds from the United States 
to Mexico and Latin America. Sigue operates by and through a network of mote than 7,500 
“authorized delegates” throughout the United States. Authorized delegates are typically small 
“mom and pop” type businesses that have been contracted to offer Sigue’s money transmission 
services. The authorized delegates and Sigue each earn a small fee for the transactions 
conducted through the authorized delegates. At the Federal level, Sigue is regulated by the 
Financial Crimes Enforcement Network (“FinCEN”) and the Internal Revenue Service. 

2. The U.S. Department of Justice, Criminal Division, Asset Forfeiture and Mon^ 
Laundering Section (“AFMLS”), the U.S. Drug Enforcement Administration (“DBA”) and the 
Internal Revenue Service (“IRS”), have determined that from November 2003 through March 
2005, Sigue violated provisions of the Bank Secrecy Act which require financial institutions to 
maintain anti-money laundering compliance programs. The violations at Sigue were serious and 
systemic, and allowed tens of millions of dollars of suspicious financial transactions to be 
conducted through Sigue, including transactions involving funds represented by undercover U.S. 
law enforcement agents to be drug proceeds. 

OpERATroN High Wme 

3. From November 24, 2003 through March 30, 2005, Sigue authorized delegates 
knowingly accepted and transmitted more than $500,000 of money represented by undercover 
U.S. law enforcement officers to be proceeds of drug trafficking. The money used in the 
undercover operations was received by and wired through fifty-nine (59) separate Sigue 
authorized delegates in twenty-two (22) states. 

4. During each operation, undercover agents posed as drug traffickers and 
approached Sigue authorized delegates in the United States and asked for assistance in sending 
money to one of seven undercover Mexican law enforcement officers located in Mexico City, 
Mexico. The undercover agents clearly stated to the authorized delegates that the currency they 
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wanted to send through the delegates was proceeds of drug trafficking and was being sent as 
payment to the “source of supply." The undercover agents informed the authorized delegates 
that they did not want law enforcement to leant of the transactions, and that they preferred not to 
provide any form of identification or address information. When Sigue authorized delegates 
requested some form of identification ftosn the undercover agents, the agents produced multiple 
forms of identification cards, all in different names and bearing obviously different likenesses. 
The following is a summary of one of the operations, which closely mirrors each of the 
successful operations; 


On January 1 0, 2005, a DBA Special Agent, acting in an undercover capacity 
using an assumed identity, entered the targeted Sigue authorized delegate’s store 
and approached a male clerk behind the counter. The Special Agent asked the 
clerk how much money he could send to the Federal District in Mexico without 
showing identification. The clerk responded that he thought the Special Agent 
could send $700 without identification, but he was not sure. The clerk suggested 
that the Special Agent use the phone to call Sigue corporate headquarters. The 
Special Agent told the clerk that he did not want the police or goverrunent to find 
out about the transaction because he had made the money selling marijuana. The 
clerk told the Special Agent not to worry about it. The Special Agent asked if he 
could give any name when he conducted the transaction. The clerk told him that 
it only mattered that the person receiving the money knew which name the 
Special Agent used when he sent the money so that the receiver could pick up the 
money. The Special Agent asked if the store would tell the government; the clerk 
again told the Special Agent not to worry about it. The Special Agent conducted 
the transaction for $900 and then asked tiie clerk if he could send $10,000 by 
dividing it into smaller amounts. The clerk told the Special Agent that he could 
do so at that location, but that he might need to show identification at other 
locations. The Special Agent asked the clerk if he could send multiple transfers 
of under $1,000 in one day. The clerk suggested that if the Special Agent used 
difTcrent names, he could send all the money in one day. The Special Agent told 
the clerk that he might be back, and the Special Agent left the store. 

Two days later, the Special Agent returned to the store and told the same clerk 
that he wanted to send $1 1,000. The Special Agent asked the clerk if he should 
do it by sending various transfers of $950 using different names. The clerk 
agreed ^d stated that he didn’t believe the other clerk in the store would mind. 
The Special Agent began conducting the transactions for $950 each. After the 
second transaction, the clerk expressed concern that if the Special Agent was 
going to keep sending money from one location to the same person in Mexico that 
the transactions would be questioned. The clerk said he did not want to get in 
trouble for what he thought might be money laundering. He suggested that the 
Special Agent send the money to different people using different names. 
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The Special Agent conducted another transaction for $950. The clerk told the 
Special Agent that so long as the Sigue corporate operator was allowing the 
Special Agent to conduct the transactions, the Special Agent could continue to 
send money. The Special Agent again expressed concern that the clerk might 
contact the police, but the clerk assured him that he would not. The Special 
Agent mentioned again that he was in the marijuana business and that he did not 
want the government to find out. The clerk agreed. The Special Agent conducted 
five more transactions, sending $950 each to different receivers in Mexico using 
different sender names. The clerk, signed off on all the transactions and faxed the 
receipts to Sigue corporate headquarters. During the last transaction, the clerk 
informed the Special Agent that it would have to be the last transaction because 
further transactions would cause problems. After that transaction, the Special 
Agent left the store. 

5. In total, undercover agents conducted 84 successful transactions at 59 different 
locations (24 Sigue authorized delegates properly refused to conduct such transactions). At 47 
locations, the undercover agents, with the assistance of the authorized delegates, structured the 
cash transactions by splitting large cash amounts over $10,000 into several smaller amounts to 
avoid triggering currency transaction reporting thresholds at the Sigue corporate level. In some 
instances, the undercover agents asked Sigue operators how much money could be sent without 
providing identification and the undercover agents stated that they did not have certain 
identifying information such as an address or telephone number. Each of the undercover 
transactions were recorded and/or videotaped by surveillance. 

6. None of the authorized delegates reported the transactions to law enforcement, as 
required by the Bank Secrecy Act. At the corporate level, Sigue identified and reported the 
structured transactions that the agents conducted, but failed to detect and report the broader 
money laundering scheme and take action to pievoit the activity from recurring. 

Money LAUNDERI^G Violations By Sigue And Its Authorized Delegates 

7. The 59 Sigue authorized delegates who knowingly accepted and transmitted the 
money represented by the undercover law enforcement agents to be drug proceeds could be held 
individually liable for violations of the money laundering laws of the Um'ted States. Title 18, 
United States Code, Section 1956(a)(3) provides severe penalties (up to 20 years incareeration 
and a $500,000 fine, or twice the value of the property involved in the transaction, whichever is 
greater) for whoever, conducts or attempts to conduct a financial transaction involving property 
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represented to be the proceeds of specified unlawful activity (which includes proceeds of drug 
trafficking), with the intent to (i) promote the carrying on of a specified unlawful activity; (ii) to 
conceal or disguise the nature, location, source, ownership, or control of property believed to be 
the proceeds of specified unlawful activity; or (iii) to avoid a transaction repotting requirement 
under State or Federal law. 

8. In addition to the authorized delegates, the government maintains that Sigue could 
also be held criminally liable for the illegal acts of their authorized delegates. A corporation is 
deemed to act through its officers, employees and agents, and their conduct will be imputed to 
the cotporation so long as the officers, employees and agents were acting within the scope of 
their authority and their conduct is beneficial to the corporation. A corporation can be criminally 
liable for the conduct of any employee regardless of the employee’s status or position within the 
corporation; even the lowest ranking employee may bind the corporation by his acts if they are 
committed within the scope of employment. Although a corporation is a legal entity and cannot 
be incarcerated, a financial institution convicted of money laundering violations would incur 
severe financial penalties and could ultimately lose its licenses to function as a financial 
institution. 


Anti-Monev Laundering Compliance Requirements For MSBs 

9. Congress enacted the Bank Secrecy Act (“BSA”), 3 1 U.S.C. § 53 1 1 el seq., and 
its implementing regulations to address an increase in criminal money laundering activities 
utilizing financial institutions. Among other provisions, the BSA requires financial institutions 
to maintain programs designed to detect and report suspicious activity that might be indicative of 
money laundering, terrorist financing and other financial crimes, and to maintain certain records 
and file reports related thereto that are especially usefiil in criminal, tax or regulatory 
investigations or proceedings. Fundamental laws establishing anti-money laundering obligations 
of financial institutions in the United States include the BSA; the Money Laundering Control Act 
of 1986 (codified in relevant part at 18 U.S.C. §§ 1956 and 1957); and the USA PATRIOT Act 
of 2001, which significantly amended both laws and extended an anti-money laundering program 
requirement beyond federally insured deposit institutions to all types of financial institutions. 
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10. Pursuant to Title 31, United States Code, Section 531S{h)(l) and 12 CJ.R. 

§ 563.177(c), financial institutions are required to establish and maintain an anti-money 
laundering (“AML”) compliance program that, at a minimum; (a) provides internal policies, 
procedures, and controls designed to guard against money laundering; (b) provides for an 
individual or individuals to coordinate and monitor day-to-day compliance with the BSA and 
AML requirements; (c) provides for an ongoing employee training program; and (d) provides for 
independent testing for compliance. 

11. Pursuant to 31 C.P.R. § 103.125(a), money service businesses (MSBs) are 
required to develop, implement, and maintain an effective anti-money laundering program 
reasonably designed to prevent the business from being used to facilitate money laundering. The 
program must be commensurate with the risks posed by the location, size, nature, and volume of 
the financial services provided by the MSB. Additionally, the program must incorporate 
policies, procedures, and controls reasonably designed to assure compliance with the BSA and 
implementing regulations. With respect to MSBs that utilize foreign agents or counterparties, 
the anti-money laundering program must include risk -based policies, procedures, and controls 
designed to identify and minimize money larmdering risks associated with foreign agents and 
counter parties that facilitate the flow of funds into and out of the United States. The program 
must be aimed at preventing the products and services of the business from being used to 
facilitate money laundering through these relationships and detecting the use of these products 
and services for money laundering or terrorist financing by the business or its agents. 

12. The BSA specifically requires financial institutions to file with the Dq»artment of 
Treasury and, in some cases, appropriate Federal law enforcement agencies, a Suspicious 
Activity Report (“SAR”), in accordance with the form’s instructions, when the type of activity 
described above is detected. See, 31 U-S-C. § 5318(g), 31 C.F.R. § 103.20. According to the 
form’s instructions, Sigue was required to file a SAR with FinCEN, reporting any transaction 
conducted or attempted by, at, or through the money transmitter, if it involved or aggregated at 
least $2,000 in funds, and Sigue knew, suspected, or had reason to suspect that: 

(i) The transaction involved funds derived from illegal activities or was 
intended or conducted in order to hide or disguise funds or assets derived from 
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illegal activities (including, without limitation, the ownership, nature, source, 
location, or control of such funds or assets) as part of a plan to violate or evade 
any federal law or regulation or to avoid any transaction reporting requirement 
under federal law or regulation. 

(ii) The transaction was designed to evade any requirements promulgated 
under the Bank Secrecy Act. 

(hi) The transaction has no business or apparent lawful purpose, and the 
money service business knows of no reasonable explanation for the transaction 
after examining the available facts, including the background and possible 
purpose of the transaction. 

AML / BS A Compliance Violations by sigue and its Authorized Delegates 

1 3. Sigue filed SAR’ s on the obviously structured undercover transactions, an 
indication that its AML systems are functional in at least one key aspect. At the same time, it 
failed to adequately investigate the structuring activity further and consequently failed to 
identify, report and prevent the broader pattern of money laundering and to file supplemental 
SARs. Sigue took no action to block such transactions flora continuing to occur (the undercover 
operation lasted more than 1 year). 

14. The investigation into this matter has determined that the primary cause of 
Sigue’s failure to identify, report and prevent the money laundering activity is that, during the 
time period of November 2003 through March 2005, Sigue’s AML program contained serious 
and systemic deficiencies in critical areas, including; 

(i) Inadequate supervision and control of authorized delegates; 

(ii) Failure to effectively monitor and investigate high-risk transactions; 

(iii) Failure to establish an effective risk-based AML program; 

(iv) Failure to exercise sufficient enhanced due diligence for high-risk 
tiairsactions and customers;’ 


For purposes of this Agreement and Fectual Statement, the term “customer” includes arry individual who 
conducts one or more transactiona through the MSB as a sender or beneficiary, uotwithstanding the lack of an 
ongoing relationahip between the person and the MSB. 
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(v) Failure to have an effective, on-going training program for authorized 
delegates; 

(vi) Failure to take appropriate action on customers and transactions deemed 
suspicious; and 

(vii) Failure to establish an effective independent review process to test the 
effectiveness of the AML program. 


Some of the key AML and BSA deficiencies of law enforcement concerns were as 
follows; 

Inadequate Supervision and Control of Authorized Delegates 

1 5. Sigue assigns each authorized delegate a risk level, either low, medium, or high, 
depending on their operating location. High-risk areas generally corresponded with each of the 
areas designated by law enforcement as High Intensity Financial Crimes Areas (HIFCAs). 

Based on this classification system, Sigue theoretically would subject the transactions fiom the 
high-risk authorized delegates to an enhanced level of scrutiny to determine whether they are 
suspicious, and would file SARs as appropriate. This investigation found no evidence that Sigue 
implemented an effective risk-based supervision program for high-risk agents during the time 
period under review. 

16. Sigue conducted only limited independent testing of authorized delegates and was 
consequently unable to identify widespread and systemic deficiencies in its monitoring and 
training programs. Between February 24, 2004 and February 26, 2004, Sigue contracted with a 
private firm to conduct compliance checks, but only at nine separate Sigue authorized delegate 
locations in California, Even with these, the contract investigator identified himself to the 
authorized delegate as an investigator acting on behalf of Sigue and asked each individual 
authorized delegate the same seven questions, as follows: 

a. What information are you supposed to collect from a customer who sends 
a $4,000 wire? 
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b. What would you do if a customer comes in four times a day and sends 
$2,500 each time? 

c. What would you do if a customer comes in with someone else and you see 
them splitting up the money so that each of them sends a wire to the same 
beneficiary? 

d. What would you do ifa customer who you thought had a tow income 

sends about $5,000? 

e. What do you think the risks are if you, the agent, were aware that a 
customer had money from drug sales and that the same customer was 
sending the money through you at the agent location? 

f Do you think you have enough training in anti-money laundering? 

g. What would you do if a customer placed several wires on the same day 
under $3,000? 

17. Not surprisingly, the authorized delegates who were tested in this manner 
answered almost all of the questions correctly. Consistently, during the undercover operations, 
Sigue authorized delegates demonstrated a keen knowledge, not only of Sigue’s policies and 
procedures, but also the money laundering laws of both the United States and Mexico. Yet, law 
enforcement conducted an historical analysis of the transactions accomplished at those 
authorized delegate locations and identified widespread and pervasive violations of Sigue’s 
policies and procedures, particularly structuring activities that continued for months, sometimes 
years. In most of those cases, Sigue filed SARs on the transactions to report the structuring 
activity, but did not subject those transactions, customers, or authorized delegates to a 
sufficiently enhanced level of review. 

1 8. Late in 2003, Sigue also began requiring authorized delegates to sign a document, 
dated November 19, 2003, entitled “Anti-Money Laundering Program," acknowledging receipt 
of the “Anti-Money Laundering Guide for Money Transmittal Agents of Sigue Corporation.” 
The letter explained that it is was the responsibility of the authorized delegate to appropriately 
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train each of its employees involved with the money transmittal business on Anti-Money 
Laundering laws and compliance efforts. This form was printed in both English and Spanish on 
the same document. In practice, the undercover agents routinely found copies of the money 
laundering guidelines, but in an unused condition, frequently still in the original packaging and 
unopened. Although Sigue had a training program for its authorized delegates, many of the 
authorized delegates or their employees subsequently interviewed said that they had received no 
training or materials on anti-money laundering. 

Transaction Monitoring Deficiencies 

19. At the corporate level, Sigue began implementing in 2001 and 2002 a proprietary 
automated transaction monitoring program that screened financial transactions for numerous 
categories of suspicious activities based on pre-identified “red flags.” The monitoring system 
dramatically improved the company’s ability to identify suspicious transactions and to file SARs 
with FinCEN.^ The ultimate failure of the company was less in the design of the monitoring 
system, but more on the company’s failure to adequately investigate flagged transactions further 
and its failure to take further action against the suspicious activities identified (such as notifying 
law enforcement directly or banning individuals from sending or receiving money from Sigue). 

20. The company’s reporting on su^icious transactions that it failed to adequately 
investigate is evidenced by its filing of SARs on almost all of the undercover transactions to 
report the obvious structuring, while failing to identify and report the broader money laundering 
activity. To determine whether the company’s failure to identify and report the undercover 
money laundering activity was an isolated example or whether it was the result of systemic 
weaknesses within the corporation, investigators analyzed more than $6.07 billion of transactions 
to determine whether similar cash structuring was prevalent. The result was the identification of 
more than $47 million of structured transactions (including the undercover sting transactions) 
that Sigue identified and reported in SARs, but failed to take action to prevent from recurring, 

21 . To identify the most serious structuring examples, investigators sorted the 
transactions to select only those cases where one person sent or received more than $50,000 in a 


^ In 100 1 , Sigue filed only 51 SARs, bw in 1001 it filed 1,071, and in 1003 it filed 1,663. 
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12-iiionth time period through more than one transaction. Sigue claims that more than 90 
percent of its transactions are from customers who send approximately $300 twice a month to 
friends and family members in Mexico ($7,200 annually). Accordingly, investigators reasoned 
that any person sending or receiving more than $50,000 during a 12-month period would fall 
outside of the norms associated with Sigue’s unique customer base and would be relatively easy 
for Sigue to detect, identify, report and prevent 

22. The result was the identification of 238 case examples of serious structuring 
schemes, cumulatively valued at $25.4 million. The least significant of these examples is an 
individual who transferred, in a 12-month period, $50,640 through 46 transactions, each 
transaction averaging $1,100, One of the most blatant examples is an inrirviduai who 
transferred, in a 12-month period, $324,091 to 15 different individuals in Mexico, through 370 
transactions, each averaging $875, using only two authorized delegate locations. Another 
individual transferred $224,232 in 80 separate transactions on a 1 0-month period, with each 
transaction just under Sigue’s reporting threshold of $3,000. Within these case examples, there 
were occasional instances of structuring, which Sigue adequately reported, but Sigue failed to 
identify and report the broader money laundering schemes undertaken by these individuals. 

Failure to Establish a Risk-Based AML Program 

23. Sigue’s primary business activity and operating location presents a hi^-risk of 
money laundering. Yet no financial institution of substantial size can possibly monitor every 
single transaction and customer, particularly, in Sigue’s case, where the transairtions and 
customers originate from authorized delegates who are far removed from Sigue’s corporate 
operations. To remedy this, MSBs should conduct a formal and detailed risk assessment of each 
of its products, transactions, services, geographic locations, etc., and then concentrate their AML 
and BSA resources to specifically monitor and control those areas identified as the highest risk. 

24. Sigue conducted a limited risk assessment of its operations and products, but it 
failed to implement an effective AML program designed to subject its highest risk areas to 
enhanced monitoring, supervision and control at three critical risk areas: the authorized 
delegates, the transactions, and the customers. 
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25. At ttie authorized delegate level, Sigue identified some authorized delegates as 
“high risk," yet very little was done to subject those high-risk delegates to any more monitoring, 
supervision or training than those authorized delegates classified as “low risk.” Sigue failed to 
establish expected transaction parameters and limits for each authorized delegate, and failed to 
implement a program to subject high-risk delegates to enhanced monitoring for suspicious 
activity. 

26. At the transaction level, Sigue implemented an automated monitoring system Qiat 
was somewhat effective in identifying “red flags” of suspicious activity. This proprietary 
monitoring system was most effective in identifying instances of currency structuring. Yet 
Sigue’s process did not include sufficient substantive review of the underlying activity. Sigue 
conducted some review of transactions associated with the same sender, but no review of 
transactions for the benefit of a single beneficiary. This failure was exacerbated by Sigue’s 
failure to sufficiently review transactions fi'om related senders or beneficiaries. Consequently, 
Sigue failed to identify and prohibit the transactions, authorized delegates, and “customeis” 
involved in the undercover operation, which used dozens of different people spread across 22 
different states to send structured dmg money to a group of seven individuals in Mexico City. 
Had Sigue implemented a more robust investigative procedure, Sigue could have detected the 
undercover activity and taken action to report and prevent it. 

27. At the customer level, Sigue failed to establish an effective risk-based Know Your 
Customer (KYC) program. Of course, as an MSB, Sigue operates substantially differently from 
traditional financial institutions, such as banks. Sigue does not require customers to open 
“accounts;” there is no application required to use Sigue services; and Sigue does not collect 
source of wealth information, verify employment, etc. Yet, to avoid potential violations of the 
money laundering laws of the United States, and the misuse of MSBs by money laundcrers, 
Sigue needs to implement enhanced due diligence procedures to collect appropriate information, 
at least from its highest risk customers and operating locations, so that it may reasonably 
identify, prevent, and report money laundering activities, as required by the BSA. 

28. The traditional Sigue customer sends less than $400 to Mexico several times a 
month. For these customers, there is very little KYC information that Sigue is required to 
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collect, under the BSA or the money laundering laws. Yet Sigue, as with all financial 
institutions, is required to have a SAR program. It is virtually impossible to have an effective 
SAR program unless the institution also has a KYC program. For MSBs the extent of the KYC 
information collected should necessarily, and as a practical matter, be risk-based, Sigue should 
be expected to have very little KYC information for a customer who uses its services to send 
$400 twice a month to Mexico. However, Sigue and other MSBs should have enhanced due 
diligence procedures that require them to obtain additional information on customers who do a 
higher volume of recurrent transactions in significant sums, such as a customer who sends or 
receives more than $25,000 during any 12 month period. Since these latter customers comprise a 
small percentage of Sigue’s overall customer base (less than 3 percent), Sigue’s KYC brrrden is 
not overwhelming or unreasonable for these customers. The BSA is intended in almost all 
respects to help financial institutions comply with the money laundering laws. In order to avoid 
misuse by money launderers, MSBs may need to implement enhanced AML policies and 
procedures to fully comply with the money laundering laws and the BSA. 

Sigue’s Remedial Actions And Coopehation 

29, Even before learning of this investigation, Sigue had devoted considerable 
resources to correct and improve the identified BSA and AML deficiencies, agreed to terminate 
the licenses of the culpable authorized delegates, and implemented procedures to identify, 
report, and ultimately, block a broader range of suspicious transactions and customers, including 
the types of transactions identified during the law enforcement operation. As part of that effort, 
Sigue has: 

• made significant investments in developing and implementing its Current 
compliance program and internal controls; 

• retained a knowledgeable and experienced staff, with extensive experience in the 
MSB industry, to oversee its compliance program; 

• increased the total number of compliance personnel on staff to ensure adequate 
personnel are designated for executing the tactical objectives of the compliance 
program; 
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• purchased, developed and implemented advanced anti-money laundering systems 
and software to detect the misuse of Sigue’s financial services; 

• instituted an authorized delegate risk management department which is 
responsible for evaluating authorized delegates prior to contract approval; 

• implemented policies requiring all authorized delegates to have undergone Bank 
Secrecy Act training, and developed authorized delegate-specific Bank Secrecy 
Act/Anti-Money Laundering Compliance Programs required for each prior to 
activation; 

• deployed a significant team of compliance field personnel responsible for auditing 
authorized delegates’ compliance with their Bank Secrecy Act/Anti-Money 
Laundering Compliance Programs and recommending disciplinary action, up to 
and including termination, for non-comp liant authorized delegate; 

• implemented a comprehensive, enterprise-wide employee training program in 

. which all employees receive Bank Secrecy Act/ Anti-Money Laundering training 
at least twice annually; 

• retained a competent risk management consulting firm to perforai an annual, 
independent review of the integrity and effectiveness of Sigue’s compliance 
program and related internal controls. 

Sigue’s Continuinc Remedial Efforts 

30. Sigue has cooperated and continues to cooperate with law enforcement and its 
regulators. Through organizational and program changes, Sigue has shown a commitment to 
compliance improvements and a dedication to effectively complying with its BSA and AML 
responsibilities. As part of its continuing efforts to implement an enhanced BSA and AML 
cottqjliance program, Sigue has committed to the following remedial measures as part of the 
Defened Prosecution Agreement; 
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A. Integrity of Compliance Piogram and Board Oversight 

Sigue will continue to employ a specific individual within its high-level personnel as the 
Global Compliance Officer who is assigned overall responsibility for the BSA/AML compliance 
programs. The Global Compliance Officer will be qualified in AML compliance programs, will 
be delegated day-to-day operational responsibility for compliance, and will report directly to the 
Audit and Finance Committee of Sigue’s Board of Directors. The Global Compliance Officer 
will be given adequate resources, authority, and direct access to the Board of Directors, and will 
report on an annual basis to the Board of Directors regarding the integrity and effectiveness of 
the compliance program. 

B. Authorized Delegate Due Diligence 

The Authorized Delegate approval process will be assigned to a department which 
engages in risk management and is independent firom the sales and marketing function. Credit 
and criminal background checks will be run on all owners of Authorized Delegate applicants 
who own or control at least ten percent (10%) of the Authorized Delegate. Authorized Delegates 
will also be subject to periodic credit and criminal checks, under appropriate circumstances. 

C. Monitoring 

Sigue will implement and maintain a transaction monitoring system for the purpose of 
performing risk-based trend analysis related to sendra, beneficiary, originating Authorized 
Delegate, and paying location transactional activity, The monitoring system will be effected in 
part through an enhanced identification requirement for senders whose transactions aggregate to 
S2,000 or more in one day. Sigue will obtain sender’s full name and address when sending any 
transfer (if the sender does not have an address, “none” or a code will be inserted in the 
appropriate fields) and will conduct an enhanced due diligence review of senders and 
beneficiaries, and all related persons, transmitting or receiving aggregate amounts more than 
$25,000 during any 12-month period. Sigue will obtain beneficiary identification infonnation 
for beneficiaries who receive remittances throng Sigue’s Mexico-based Authorized Delegates in 
amounts of $950 or more in a single day and aggregate amounts greater than $2,950 over a 
rolling five (5) day period. 
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D. Blocking 

Sigue will implement a transaction interdiction system for the purpose of enhancing the 
functionality of blocking remitters and beneficiaries of money transmittals, as appropriate, 
including the implementation of enhanced due diligence review procedures to determine whether 
senders and beneficiaries should be blocked &om conducting further transactions where Sigue 
has filed two or more Suspicious Activity Reports ("S ARs”) on the senders and/or beneficiaries, 
or related senders and/or beneficiaries, during any twelve-month period. 

E. OFAC 

Sigue will implement an OFAC interdiction system that provides for real-time screening 
of remitters and beneficiaries of money transmittals. Sigue will also periodically screen 
employees and Authorized Delegates against the OFAC lists. 

F. Authorized Delegate Training and BSA/AML Compliance Program 

Reviews 

Sigue will provide BSA/AML training to all new Authorized Delegates before they are 
activated, and thereafter risk-based BSA/AML training. Sigue will also implement a risk-based 
Authorized Delegate compliance review program, using dedicated compliance resources. 
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From: David W J 6AGLEY 
Sent: Wiad Jui 18 16:52:54 2007 
To: Warren G LEAMiNG 

Subject: Fw: Weekly Compltance Report 02s>UL-4)6JUU)7 
importance: Normal 


Forwarded by David W J BAGLEY/HGHQ/HSBC m 1Bni7y2007 16:40 

Ramon GARCUUHBMX/HSBC HBMX 18(07/2007 To Davkl W J BAGUeY/HGHQ/HSBC^HSBC 

14:43 Mill Size; 11818 


Fw: Weekly Corrpliance Report 02JUL-06JUL07 
En% HSBC HcHdngs (4c - HGHQ 


David, 

I wlU discuss the subject below with VS/arren arwl John in our Conference CaS tomorrow. I would like to let 
you that tha procedure and functions of the money laundering committoa (CCC) have been improved in a 
very Important way. 

The 2 cases reported at the weekly compliance repor t is a dear example of the escalation process 
implementad as one of the teeming e^^riences aftef ^^ip^ arid other cases. 

t understand that the appreciation from GHQ is that the CCC has to resolve and rule about aO tha cases 
presented to the attenbon of the committee but the real situation is that sometimes there are soma cases 
that rieed to be escalated lo the Business Head and CEO for further discussion. 

As I told you when you where in Mexico. CCC is a very unique body oested by Mexican regulation In 
order, among other things, to dilute responsa>8ityof MLD obUgalioris between members, giving a very 
important weight to business opinions because In ttiewythey are the ones that realty know the customer. 
For that specific situation escalation Is a key element when MLD has a different opinior) that the one from 
the business about reporting the case to authorlttes. 

I will explain Warren and John tomorrow the different actions plans { am reviewing with John Rendall 
Including the one originated after your visit In order to have better procedures at the MLD function 
including the CCC. 

Regards. 

Ramon 

Fonvarded by Ramon GARCIA/H8MXA1S8C oit 18(07/2007 08:09 a.m. 

John F ROOT/HQHOmSBC 17/07/2007 06:16 To Rameti GARCIA/HBM>CHSBC®MSSC 
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cc Susan A VWJQHT/HGHQ/HS8C@HSBC. Warren Q 
l£AMlNG/HGHQi'HSBC(®HSBC. DavW W J 
BA6L£Y/KGHQ/HSB03tHSBC 
St*}e FvK Weekly CompHance Report O2JUL-O0JULO7 


Ramon, 


A number of Hems ^mp out from your most recent we^dy report (02JUL-O8JUL) but everythlr^ peies In 
compaiison with the ML items on page 4. It looks fke the business is still retaining unacceptable risks and 
frie AML committee Is going along after some Ir^tial hermnlng and hawing. I am quite concerned that the 
committee is not functionirrg properly. Alarmed, even. I am close to picking up the phone to your CEO. 




looks like another^^^^ptype of situaBon — what on earth is an "assumption responslblli^ 
protect the Dank 


V would It protect the bank If the cttent^a money launderer? Please rote that you can 
dress up the LJSD10 million to be paid by one partners to the US authorities as an "ecorvomlc 

penalty* if you wish but a fine is a fine is a fine, and a hefty me at that. What is this, the School of Low 
Expectations Banking? (*We didn't go to Jaill We merely s^ned a settlement with the Feds for S 1 0 
milEon r) I just loved the last sentence of the paragraph: "This intormalion is expected to be spread by 
mass media." Isn't that Just great? 


So. ^^l^^ s strita ke two. Let's now look at strike three. (I hope you Bke 

baseball.) 


The same person who is giving the sacrosanct "assumption rasponsibiltty letter" 

Manuel Dm^^gu ez. DGA-CMB) is being asked by the CEO to ex;^ln why he r etBlnaa tn e i^^^^^ 
l ^^^^^^ ^^elaBonship after USDUmHIlon was set»d by the authorltes in account with 

Wachovia in Miami. Whet7i The business was okay with this? 


The AML committee Just can't Keep rubber-stamping unacceptable risks merely because someone on the 
business side writes a nice letter. It needs to take a firmer stand. It needs some cojones. We have seen 
this rmvte before, and rt ends badly. 


John Root 


Forwerbed by Jt*n F ROOT/HGHQ/HS8C on 17/07/2007 11:46 


RwnaRQAftCUWHBM)OHSeCHBMX14A7/2007 To 
00:58 Mail Six«; 156258 

Warren G LEAMINGrtHGHO/HSBC^HSSC. John F 
ROOT/HGHQft-l$BCiS2HSBC 

ee 

Laura 'rESIN/HBMX/H^C®K$BC 

Subje 

ct 

Weakly Corrpilanee Report 

EiMNy 

HS8C Holdings pic - HGHQ 
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V^ren, John, 

Please And enclosed Weekly Compliance Executive Report for the period from 02JUL07 to 03JUL07. 

lattachment "Weekiy 2B 07 sum-doc* deleted by Ramon GARCIA/HBMX/H5BC1 

Regards, 

Ramon 
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o 


ajRSTON W J6hn fi BENDALL • tf7/Z7/2M70i;S2AW ' 

Cc RsiM GAACIA. Lecnarcla ARANA, 'Jsse Masi«l DgmlnpiU' 

John, 

On (haffirhSencaaf Ihepapan lhaiyou hav« p(9vlda0tom». Iagr«« BiatOMpuatBy ef Stsinfomatlan 
provUad byCMB doH notgKA an^eomfoRSuiUiay Dav«rtgcrously mvtoMvd ffiiscaea ' thejrsesm 
to tuva bocftd OR managing out Om cretfft risk, tiut^MthoutconsIdertrig |}m raputatonBl risks. 

On this basis, t support ki prindpla tha recornmandalon to doH die accouiU. 

However, It has to be noted ihatRiiWuU be a senakiveriMKsagata send, H say that we are not 
prepMeri to dea) widi a company that la regutaad by CNBV, ee Ibis could be embarrassing fctr titem if 
It became ptMc.vMdihahnysposriUe. I think vradteuU dieraforerteue 3 private canvsrutkw 
witfi CNSV In the IVst lastenee, to mMs* Iham of our intent artil the potenSal reputadtonst risks for 
(hem, and seek their 'no objection* to our action. 

Pleesa csi ytai errartge for this IS be done, and Aten revert Id me. 

Paul .... ... 

John R RaiDALL ■ 

— -OfIgiratMeBsage 

... fEoas John S. KEtlDALL - 

Seat! 07/23/2007 08:11 P« CDT 
.Tai Paul A THORSTOH ’ 

.Coj fla.ion GA BCIA; 

Pubjeoc; 

, Paul, 

Thfa la die second esse fiom CCC requiring escalsDon. 
in this ca» I recommend that we support the CCC cioeure rKommendellan. 


Urdka difl oiherease, this la a Uaxtcsn-rcgulated iRstfRaion. 

The only caveat is this recommendation la lhatf suggest Ramon Uaisewiih Me UScsunterpertasl 
beDave that there is a relationship there also. 


JohnRREHOALL 

OUdsOearedsMTMmrntandM I KSaCH 
Pmo f u it7 onj$ _ 
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- Faryferdad by Jobn H ReNOALlJH8M»HS0C on 25l07OTa7O8:O5 pm - 


AnhsnloM 
CFUJSHBMXmsaC 
HSMX 


rn John R RENDALUHSWVHSeCQHSaC 
. ^ lub>eea@h«Oc.CQnijnii,bnr>y^«dl^sbc.cam.mx. 
nT «i«h-a/ 

SiJ^ect 

EflBly HSeCGsnkp(e-MOBK 


v-mall pleaia And ITia I«oal acBons a>Bt^^ria< Uk«R tosNsdsla; 

[has UiacompWadaoinierrtwNchaxitalnBinore than 


FatlSsn tor R«tum of Setud funds^ 
35 paou. If you ne«d K t«l ua know 


[attachmenCPfOdon da davoludoAda tondos msniaaaCona CMt.pdT deiatadby PatilA 
TKUnSTOM^HBIfltfHSBq 


© 


3 NoBcsa of Saizui 
Justlco Drug Enforc 
Vaga'f a-mall 


{att8chmart‘'F«0'nCE OF SECZURE pdr dfltatad by Paul A THURSTONftfaMXTHSeC] 

• 2 Lotten corUaailiig (ha torfettura of bta saizad proparty and 3 CcoMcatM of AcknowladgeineM of 

Execution of an Inatnunen t laued by the US EmbttMY.igL^ g*icO' 
tatracTuiianf^ertBJcaM ■ • , • ‘ ' dateted by Paul A 

THUflSTDNWBMWMsaq 

fattadimartt X^arttfcata ndf d«l«tnd ho Pmit A 

THURSTOWHflUXfttSflq kW!!r,;iDr.TIiriiiiiiirr riir i.rm.-. 


© 


suggaaied to Iba C 
argumants estabnahed In cha Luia V 
fadfttiaa warn esncelted. Th« butin 
deposits from and lo iu efiecklng a< 


la's matt {word documani). Aa l^MlMS f ^tlo ned . i 
a operodon »a( tha.bank Is ddng now wW^^are: dr 
tunu; and. currsncy axchanga IrsAsacbons DVP. 
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^ aulhoHites wqtdrememca, msln^, h (^a iSIeft trattaeiiaa Ibww. Sy (he other 
hawt^^^s^atfe d hmda waa orlgKia tad by an speci'ite oparatton la tiM) wMdi doe* not 

Involve the '■ittol* compafty. 

If you naad imta Intdrmatian pleasa lot us know 
AntonfoCrur 

Dlrectar Regtonel 

RsQlin SUR 


# 


fvwar(telbyAttoflfaUCRUZiHaU)tfHSBCwi24/a7l3a07l153a.ni— ~ 

Lull VEOAhtBUXlHsaC 

30117/2007 07-l» fun. To antofil6.(n.en/*®fis0ceoiiun«. Fwr^BLajUWSHX^tSBC 


Eslo es lo qiw b^ quo contesbr.. 


UlbVEGA 

0>wl»^»AnfI«glanSia | HSBCIMxIcb 
•». Totadbi Surioa C4. Is Pn 





{S3^}m^4eoi 
<s2-za zzis-esM 


— PsnsRa«byl.UlVEG^MBMX/V6Kan2M)7/2adT0rS7 
John R REMOAUABUJWSaC 


2007/3917 


7a U* VEQM1BKXA4S8CAKS9C 

at 

3uty«Tfi*Pw:| 


Q 


Lola. 



T™™.™ K«.u«»» ». HSBC B.„». CS., H-A, 


HSBC OCC 8875134 
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h^butlurouldappredatshitVierciatailacfr- 

iposUofi wnW0ctiovi«ac(joni, Whst is their defence te(l«sadniges '«4 9 ftQ<M <Ia t^>ey 


2. You flbte Ihei taken protective measures to keepopenting tvith^P 

ti rbk”. M 7 prinicpal iolcmt bne is fai CampQsnce ri^ wT 
rcpuloitonol. Please explain in iktail bow you OR mano^g these risks. 

1 Yourdocument refers toon ntrachediegaldocumcnt tvt^ismjssifig. Ifthisis 
relevant, please rorwoid. 


Cd. CuMditaKU. tuna M«>ke os. 


LUt VESMteMXMSaC 


ro ATn A REWAUTKaUXAUeC 


aOnn/HU? 19:48 «il 


John Ism tsndlrg you eh «Bch with Intermatr « .isr-r iiVti.lfr %* Myou requ»«l. 

regerde 


'O, 


Luis VEGA 

DlneW>ElKv<>i>enig(M8ui | HSKUeura 
Av. TwUMn Sul 193 C«l Li Si* 

C.P, TSIWPwau, P«». 


Phena. 




|S2'Z2)nU'4e9l 
m-n) nu-980s 

>■■■;. yyintwhaeainiBt 
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From: F G60GHEGAW 

Sent 23;ia'2C07 13:56 GOT 
To: Z CAf'AA 

Siibjact: Fw: C^■ffiV InspeCuGR 


For your eyss cn!y Gt tMSS tirns 


;Mike 



HSBC Hold!f?gs pte . 

RogisterecJ Office: 6 Canada Square, LorKfon E14 5HQ, UnNd Ktn^ddrn' 
England nymbst ei?ad7 


Oriainal Mesfisw — 

From: Michael F GEOGHEGAN 

Sent; 23/1 Q/20D7 08:43 GOT 

To; Paul A THURSTON 

Cc; Stephen GREEN; Matifiew J Vv KING 

Subiect: Re: CNBV inepectioii 


pesr Paul , 

Th.is is distLTtJng and ctesrly we witt need to took af the rnsnagsTOn} structure end prscfess. VtfMjId 
these viev« from GNB V be sh ared by o*4r Internal AucSl tocefly? 

We should wait to see what the offialai letter says but it will be hard to impress on manapement the need . 
for a change ordkectton rfyou are riotaltowed to wse (hecontenlc^yourrrfeeting. 

I am copying this to the Group Chairmari and Matthew King for their irformation 

Best wishes 


Mke 
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HSBC pic 

Registered Office; S Cansda Squors. Lcfidan E14 SHG, United Kinedorn 
Registered ii Englend nuM*8rS17SB7 



^ — Original Message •— 
Frem: Paul A TWJRSTON 
Sent: 23/ia/2CI07 02:18 CDT 
To: Mrehae! F GEOGHEOAN 
Subject; CNBV Inspection 


Mifcc. 


A;d)ffi:reqBC£t, imcl today vith the HcadorBBnkiRgSupiaviii<w, airflticSapcn'isor for HSBC, fwiti our 
regulator, liie OIBV, fol lowing their <» site cxaminetkiii o*' %'«fious aspeas of our business, iiKluding cards, money 
fMuttdeyii'ig 3 i'k 1 liTasury operaliors. Alti»sgt)the>’>E‘-i-c haddashtgincetings wUl>'<lvc!<cMtc<t!V£ department:, diry 
asked (0 txet with nrtf ob s ssrsclly pr*\'ate and tonfWemiial •»?«. 


Tney waiktd inc tfrrough a brescntalion pKkwhich firstly s« outspedfic points ilmt iuid arisen diiring ilwir 
inspcctic-u. ba? shtis naved an so rtsrs gascral cstscOTts tf tftt OSV HSBC in Mexico. Tbes cccirwl on: ' 


-wc^ssscs ill jracma! ooistroh witid t iIkv saw ia aeverat areas of HSBC. ciia$ evidence of the level of ercdil card 
fniuds, iiuiti'erv urciaiuii)i.h CuorplainUKi tlK bar;E »)d to it->cba:tkin| onsbudsniaJt. custoaur coucen:; tbar jaiff in 
bnuichej do not hat's approprsew irafeuiig aid quatifkalions, frequency of IT failures, asd slow progress in tadding 
KYC data prsbleins and anri money laundering paocednres. 


• corporate culnirc.-aherc they conwttffl tliai riisec the purchase of Biul. HSBC has ebfvsis growth in cre^Qlprodueis 
and buBched new pmdvjcts wiibo-.il sderpoie cemrok.'ncy acknowledged the addition of nnv senior exKDiives 
loeludingrbe CFO and COO. ami dey welcoined iiiese,itiil (iary are eutwetiud iltai aoine StcaS of the business have 
not changed stall iRTreniallty,orappreixh,(le^ie iltecliaKgengisHDTeorUiet'uiiiiess, stvl sertK lower isvel stelT 
hm POl f3«en ndeqnately trAlnae to maI will) the business nov.- being undertsker.. They inrplied lint tlwy eonsidored 
lltai we were mill cvuaingpansoriiieUitkasifllKy wetesilllDissl, despite the uew ov.‘!ii;»liip and llwchaitge tjs 
huyinesspreifile. 
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TlKy alroey.}.vrtssfdconceTTii3!S£Riorn«RagcmnHh3vK5e rttal fT?yoBsiWii«j fiw Mexico sn'1 ihe r?o«(vn, staiim 
Itui ''tlRTc are many cuncrm o» how nia!ta£eiiein will be abk iO (inpSeinnn simnscoiHrob wiihin tiiebioik in 
Msiico. while keepiiis, an tye or- cJ^ercoisSrics”- 

Tlieif flreil slide reflds *5 follan's? .... 

As ansotl oflbc concern? pointed (yj|,t7ieC^BVnccdj OKseniaf lrvclcdn>n»j(ntf«i lo scive Itlc jiroblcsiis 
stressed Inordcnodo thai. HSBC needs lo sel corrective piD^ranunci. Tbess actions should ificliuJcttK: following: 

• set Strong hacnicJcojsrais in Itcy bi3tRj«aafsd^ejKio!ja! arcisj 

•adopt rueasures to sKn irauds, reduce ciienls’s comuliMnls and inwove iIk level of scr/ice.co reduce reputmiona! 
risk ' ' 


- establish (]» iiecf ssary aolons to inwmve rTyerrniwncc and evfliii teclHrOiogicol risks caused by sysienss break 
down 


- tnsnags an eftsetive culture ofehange 


- avoid sharing senior ofDcwi respoiBibiltli^ with LATAM 


• SCI etSsilvc mcasum regardni atoiwy Ssunderiitg issues 


• avoid laknig nccsstve asdil risks iu the credit cani ponfoiio and set setions to aase» this ris): ii> tin acktjiiate 
inaiurer' 
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TlKy luvetokJ ms i!!aitliEir')r»se!uanM|«ckis'fofiiv ey»''wS7,and'ht^'t6‘‘^ shared wiiholhfinin tlie barOw 
probably r^cognisinR thai CNaV do ueiwBKtobc seen*o c>egettinpacli«ly invoswed ui isiues iiai louch uj»ii Qis 
people tnihebsnk. tlicy wUi issue a t»nra! nanasenE!3 Icaeriaduf ccur$ie,-.viilioii! iiicbslinescdnecftlie loors 
se!i?itive area;, biu they vsnied lo 6611$ to my pcKpniA anenrion to lei uv know ot'itieir coocems. 


I iudicaicd 10 liifliii wcvvcK sM-areofiliew issues aDci were piagressH'ety tacSdtng them. { achdscu than ofilEiw 
af^wttttiictiis uf -i-'i cspeiieiKed Head of oouuszr risk witb exijcncnce in Asia, wiio airived b ectple of tveeks age. 
ami anew Head ot card Fraud fraoiGMO wljoanivedyewertay.llK Wptwnad WU^in trora Ken Harvty 10 review 
il'ic robissincssof'ihc IT operatioBS and the piamcdiritcnisl audit ofIT jn'> 4 fivcr.i&Ct. andthoiTEjorprogramaKof 
cwlsmsr file ce-ntralising sitdimagsas vhicflwooldgjve bS l*h»Kl KYC data for -Tmi^X-ney buwTerir^. F 
talked about ihetliatigcs wc arc maSciog’.osp^k Rcgfejittl ftoniMcr.lEO responsibilities m areBssucli asCrSM, IT, 
Risfcsnd Audii. but they advised that their S j Xc iMU cDgcent kese wsi wilh PFS. Kid I indisaied '.hat ric)- cetildslso 
cspici cJianga in-lhis area in the near ftKttrr. 


I said llnotu/c were rndittrkedou c]uiiciuc'.hebisniCKiiiaddsor{hclEirA:,aiid briiigtrig in specialist expenis:;. hut 
•hst C'ihurs change s-euld rsn happen cn'et nisht. However. 1 bslicvcd dies the infusion cf new tnanagetiwrii. 
combiiiod w-i!hchan|cs wc were plauiinslD inccidivesclKnics to pot moic emphasis do c-ustonrer uiisfaikm and 
business iiuality would help puslt the bank ui tic rtcw diicEibn. I coiaricnud Gut wC hdvc a young stsfT, snd while 
they iack^ ettpcncRcc, I was ccafidcni thsi if-tw were cfcarta oar business drectisn to ihctn, and gate them 
ajHmpriaic training, and measures. \vt couM a«ik€ rej« jjnjgress. 


J (old ‘Jkch diaj 1 wclconscd SiRicontis® to s« ins. and ihsl u-c wouy respsnd pcsitifcSj- ts she Tca!us£ctnsrtJ!5itjr. 
when it errives, ard dial I wouid also meet mi with thcii) ago'D m undiifi there on proersss with the issues not 
covered in the maiiageme-K iauer. 


They indicated tel ijiis waswhAt they wanted JC hear^ahd that they wasiW repo.^ back poshivcJy to Guilcrnw 
flabatz. llK Head ofllie CMdV. 


] wuk ti» oppomrany w refii’Od iliein c-f lite isssrc* tt»! 1 had aiicd with :b«n and Babaez two RwbtM ago on iE« 
PTU (prolil sharhig lax), where Bancotrer sed Baiutmcx h».d been al'oved to tai* action to jwoidpaycieni, snS they 
aefcnow Icdgcd rliar wevvoutd aiw havx to take action if wc were iv remain cooipctiiivc. widihcy inriieated ihai while 
dwy ditah like it. they would not ettstt provided that oar sslutisn wes withm the eacisting laws and regulaticrs. 


1 will I'oltow up on ali of thee poiiHs. but tboucki tel you sitould be swart. 
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Prcm: Susan A WRtGKT 
3«nf: rri Nov 46 15:5921 £007 
To: Warren G LEAMING 
Cc: DavUWJBAGt£Y 
Subject: Ma:dco 
ImpertaiK*: Nerrnaf 


I befieve you are visiting Msxteo shortly. 

One of my actjcn points Horn the Conference Is to IMowr up with Ramon GPP 25 appication In Mexico 
(and elsewhere witfnn Ramon's area of responsfeiity). as you will no doubt recrdl QPP2S is know perhaps 
more fenci^ aaoss Sw Group as 'Two strikes ( NOT 2 SH) and oU*. At the oonferencs Ramon rrentkHied 
that there are numerous eases of accounts with nvillipie SARs(ie in one easel!) In Mexico that lerrt^ 
open. ( would be grataftilff you could toOow up wt this during you* visft. Happy to discuss. 

Thanks 

Regards Susan 
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From: John F ROOT 

Senb Tiui Dec 06 16:01:10 2007 

To: Waron G LEAMiNG 

Subject: Fw; Warren Learr^ng HBMX DEC Vt^t issues 

iffliMrtance; Normal 


Re-send. 

— Forwarded by John F ROOT/HGHQ/HSBC on 08712/2007 lOOT - 


John F ROOT/HOHCVHSBC HGHQ 16/11/2007 

1Q:27 Phone No . 7092 S553 

•»0044 C207) 79S2 992 SS55 Mail Size: 3356 


To Wanen G L£AMiNG/HGHQ/HSac^SBC 

cc Oav1dWJBAGLEY/HGHQ^SBC@KSBC 
Leanmg HBMX DEC Visit Issues 


Entih' HSBC Holdings pt!;- HGHQ 


Warren. 

I am keeping a running list of Issues that you might want to raise during yourDecerrtMf visit k) HBMX. If 
you or David would Ilka to add to the list, please let me know. 

The lisi below is only partial, end I am constantly adrfing to It. llidre Is of course overlap with Davkfa visit 
recommendalkHis. 

Worse enmiai "Ji-poinr Cantrat Bank (Bamdco) inspection of HBMi than last year's. VVhy have Tressuty 
opersUons dnertoratad? 

Resourcing, espacially Regional head va. Mexico head: CI8M; and MLRO) 

Sinaloa rmsstve rrcney-leundetlng scherre USD 100 irAiion) 

Regional intagratton, e.g. Honduras, Panama reluctant to accept CMP requests ItomMexicQ, monrtorrng. 
eto. 

Clean-up of HBMX Trusts backlog 
Smootit, independent functionirv of HBMX MLD comn^se 
CiEM HBUS Venezuelan business through Panama 
Bantstmo business in regulatory and tEix havens 

Relations with Legal, Audit, senior maragemenL r^utotors (Mexico and Cenlrel America) 

AML systerrs (ntegralton (Mexico and Central America) 


Regards, 
John Root 
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GROL? AUDIT MEXICO 
Alimt REPORT !aJKMARVSCHEO(ll.f. 
ChQ KiJ^IKl'ABU- AUUm 


Name of Audit 

H5MX - MONTY LAlUffiMSG SETEReEXCE fMLD) 

Rejoin; Msrtico 


Bujudcn ur 
Cstener Grnop 

Onwal Suji^nl 

r anesittec 

HBMX 



Dale 

Inbcrent 

Rbdi 

CoMrelRick 

OrcraB Risk 


This A adit 

DEW 


Betou ^aodard 

High 


Last Aadit 

. 

WA 

K/A 

YU A 

W-A 



Nature oTBuiiiteu 


The ftfca* im'oNwJ »j itB j'imcb (I'usi’KW lines) sic icspwsibte fijr w*y*»S MLD processss 'Jcftitd siid 
Isarcdljy Uicel MID Depanmem on; XYC OCmuyoMrCi^ieiner). IBes oHegraiinv ^voper inpm oi'eutlonim' 

: infonriBiion inihc sysiem, valtdatieTi of aleru item bv ileDPLD amtelTecntrc response lliercte, 

Cue K llic Ibccguin^ Ihis nn iew 'itaa oitcwcg to levicte I^LD opciaoMS, yet is cm'cred a iiurniict of areas 
iBVPh-ed in III* detection ef ML activiiiet iBVlfoaapiiswewiAgffvansislsiraandreguteons. 

CondasionofAsdit 

Main coiinot veikiicssu iderv'ined during die audit u-cr a foUou s; 

MC , 

' Rcfubtoiy breaches in KYC iisuei sich aa ibc lar^ uimDcr of iiiiuMOplete cliCiH Tihs "mM (he iiiadei(u8ie 
preens ofSCC rdciciifiuaiioo aud inoiacriiiB acnos the ociwortL 

- Horn! Uu been j^iven un nrUnaun by Cie Rejubnerr ftou May iP to Nfn Oit to ensaue that s porlior o1' ihc 
client files {bwV'Ti as the UBA prei<e!-Bbo>j( l.Rm cunontm) am compleieil. Di« lo our corcems with the 
reliability of ihe system used lo measure this process is unclear oii exactly t^herr !l« bank is in TElatk» to beie; 
!tbi« Id iiieet tla$ deadline. 

- As a) May 07 HBMl tiiKl ath'ited Hie PcBiiMor we were a u'beieas ail audtl samples botb In ihis iiDiilc 
J and i!te reg.ular branch snidiu cooducted oser die year^c •iiueIi lower perccotj^e. The taller iiuinber is bard 

ig cxinipgtaie frpna 4 sanvic h«is Viii ik its K>«> >0 of fUo nneenantn. rncarting tia: Job in IuekJ io icarli 
UiAi til 6 months is very clisllcnging.. 

' TTu UBA nurnhei eutudn ihc almoii 6 anliion other ciicets the Gicwp ’us in Mexico h htch arc subjeel !o 
HSBC sown MLD policies, where sanipiinjt 8t» itiw; 3 snnilar kiu' number of complete riles. As thhpmblcm 

• bad besn idem! Issd same r.wslis tsjto the COO wssapootnScdKtc'-crRc.v.actsotThJMtes task force ronraswge 
this niwier. ftiniwr deixils appear in the repon. 

Delays tn repryiiiiii 

' • Delays in r<i}Wr\ht^ uiiirtukl iijuUEXlioiu 10 ihi Rp(p>lai6r due to incmscci nunbei of eases lo ixr sanction uy 
lie AML Coonyii'.ec and slow dtcts'JM-.uaiinj k>- the process. 

V-WPA.-illi.Tws ... 

' • Lnck ol'suftlcicn urdenitndlTi; ofihc IT ptgcessttsnd tools necenary toctiHanes MLD ocihlries mu) 

' capaeits' u c^'ktnecd by the iKk oi'xreliabhsyiXrxo'.iadtcikiTt files imep^ioivibiclequtfexbilit'r 10 screen' 
biueV HSsflndiiwiegtutiemoniicrTnsSCOPEP'seit. 

• Ttohit'TUi . 

• We abo noted the need 10 te-aisess the overall smtroacit to MLD uominp u a result ol' I'ailuR* lepularly 
identified in l>raiicti ttutliu, and iIe oeel to upgrade se\-eral of tic IT iysiena in use to ensure Itelier control over 
both Rfigelatgts ai!d Ciot4) politics and ptoecduret. 

To euu.m that tlierc is one ovotiU Imegnl approach 10 >esol-.< ihc issoest in view of tht rumber and in many 
casts scriouaics of the wetiaiesscf idetnintd. «e nvitid rectmimeiiil ^ cftaiimt of an Oversight, body, 
possibly a HBMX Money Lmiiidering Comtniiice. to iaytenxm belli « shen aiif ivKaei temi pint to etBuie ihat 
rJtc itsiKS raised in thl! repon caa be (uRr ittkouccL T^s body vr3 ssed le have auBIcisit cmpcmttTneai and | 
preaeiivny to dm dmigh some of the mcisunss needed to comply whh both tocsl and Cisup polieies and ; 
pratedums.especiaiiyiitllielniepeTUrdsitivoIrfil 1 


Rcsjwiiise frun Msusement 

The first nsponiaU' ibe audit is due on ITlAHWt 

V\ 


I Permanent Subcommittee on Investisations l 
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From: DavkJ W J BAGLEY 
Sent! Fri JsPi 0S!02!44 2008 
To: Susan A WRiGHT 
SU^ect: R6: US ISEuas • Various 
Inriportance; Normai 


Susan. 

An ubvfous learning point for FSMX is that If they ware contaded by US authorities then (hey shouid has'e 
thought to advise HSUS. They can go round the web, ocA just trough the midcSe of the web. 


Reganls 
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HSBC-BNI_E 0591006-tXt 

From: TERESA pesce/hbus/hsbc 

sent: 12/15/2006 9:59:00 AM 

To; ELIZABETH PROTOMASTRO/HBUS/HSBC@HSBC 

CC: ANNE LIDDY/HBUS/HSBC@HS8C*, DONALD W MCPHERS0N/HBUS/HSBC®HSBC;GRACE C 
SANTTAGO-DARVISH/HBUS/HSBC@HSBC; 

JOHN ALLISON/H®Q/HSBC@HSBC 

Subject: Re: OFAC - wire payments blocked from HSac offshore entities - USD 32,000 
Cre SDCT) and USO 2,538,939.33 (re Sudan) 

How is It that these payments continue to be processed by our affiliates in 
light of the GCLs? 


Teresa A. Pesce 

EVP//Managi ng Director 

Anti -Money Laundering compliance 

HSBC North America Holdings 

452 Fifth Avenue 

New York, NY 10018 

ph - C212) 525-6099 

fax- (212) 525-5769 


Elizabeth Protomastro/HBUS/HSBC 
12/14/2006 06; 02 PM 

To 

John allison/hghq/hsbc@hsbc 

CC 

Teresa Pesce/HBus/HSBceHSBC, Anne Liddy/HSUS/HSBCOHSBC, Grace C 
Santiago-Darvish/HBUS/HSBOSiHSBC, Donald w HcPherson/HBUS/HSBCQHSBC 
subject 

OFAC - wire payments blocked from hsbc offshore entities - USD 32,000 (re 

SDGT) 

and USD 2,538,939.33 (re Sudan) 


This email is to inform you of the following two payments, initiated by hsbc 
offices, and blocked due to ofac sanctions. The first was blocked under 
terrorist sanctions. The second was blocked due to involvement of a Sudanese 
SDN. 

value date 9 -nov-2006 

Debit: 000054356, HBME RamsTlah Br., Ramallah Palestine 

credit; JP Morgan chase, Tampa, fl 

3rd party; Arab Jordan investment Bank S.A., Amman, Jordan 
ORG: HBME, Ramallah, Palestinian Territory, occupied 

BBi; Acc/For further credit to Palestine investment Bank Head office Ramallah 
branch account 6171 for further credit to a 1 Aqsa Islamic Bank 
USD 32,000.00 ■ 

Note that Al Agsa Islamic Bank was designated by ofac on 4-D6C''2001 as a 
"specially designated global terrorist". The press release from Treasury 
stated that it is a "direct arm of Hamas, established and used to do Hamas 
business." Below are links to the press releases. 

http : //ustreas , gov/press/rel eases/po837 . htm 

http://ustreas .gov/offi ces/enforcement/ofac/action5/20011204. shtml 

Page 1 


E rmanent Subcominittee on Investigations ! 

, Inc. HSB03793250 
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HSBC-BNI_E 0591006.txt 
http://ustreas.gov/press/reTeases/po841.htm 

The payment was held at the direction of OFac and additional information 
requested, on 20-*Nov-2006, HBME sent a SWIFT message to cancel the payment as 
it was sent in error, on 7-Dec-2006, OFAC instructed HBUS to block the funds. 

Details are below on the payment blocked under the Sudan sanctions. 

Value date 6-Dec-20 Q6 

Debit: ■■■■■■Mi HSBC Bank plc Johannesburg branch 

credit: BNP Parioas New York 

3rd party: bnp Paribas (Suisse) SA, Geneva 

4th party: Sudanese Petroleum corporation 

ORG: Ethiopian Petroleum Enterprise 

ogb: commercial Bank of Ethiopia, Ethiopia 

OBI: lnv/M/10/2006. Dated Nov 05/06 

USD 2,538,939.33 

"sudances Petroleum corporation" is listed by OFAC as an SDN under the Sudan 
program. 

Please let us know if you have any questions or need any further information. 
Thank you. 


— Redacted by the Permanent 

Subcommittee on Investigations 


Page 2 
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From: Matthew J W KING 

Sent: Fri Feb 22 17:55:16 2008 

To; “Paul A THURSTON"; Graham THOMSON 

Cc: 'Richard E T BENNETT”; David W J BAGLEY 

Subject: CNBV 

Importance; Norma! 


This was the note I was thinking of sending to Mike - a bit of a brain dump and not fiilly up-to-date or 
polished bull thought f would send It to you as is because it might help focus the call we are due to have 
later. 

"Mike, 

My perspective on ttiese issues from my discussions with Paul Thurston, Graham Thomson and Chris 
Bentley is as follows: 

The issues raised by CNBV appear to be pretty ^milar to those raised previously with Paul. However, 
Whereas the CNBV previously seemed broadly happy with our remedial action plans, they have suddenly 
become more aggressive, Whether this is because of political pressure, the FlU suddenly raising 
significant concerns (which perhaps the CNBV thinks reflects poorly on them), it is difficult fo say. 

One theory about the FlU Is that they are reacting to our refosal to reimburse a public utility (which also 
ultimately report^nt^i^^n|stf^^inance^^HarQ^ntemal fraud, effected through our Internet 
services. ||||||||||||||||^^ but the CNBV has concerns about 

security arrangemen^nffi^TOaentaMio^eerunetwoned to us by the FlU. Whatever the truth of 
this, it is also the case that Mexico is suffering a major problem with drugs dealers and the Government is 
being very robust about dealing with them Hence any AML weaknesses may well be treated similarly. 
The 'evidence' obtained from the FlU does not seem very earfo-shattering. There Is nothing I have heard 
which could not equally be put down to carelessness or common mistake (I am not excusing this you 
understand). However, the necessary investigation work is st^i underway. 

There are areas of known weakness which management have been addressing but where we now need 
to revisit the current strategy; 

Moneyiaundering • This area was rated as Below Standard on a 0407 audit and work has been underway 
since then to address the weaknesses. The Chief Moneylaunderilng Officer is being replaced, albeit the 
FlU apparently regard him as trustworthy • management are well-aware that his departure will therefore 
have to be carefully explained. Various processes are being enhanced. David Bagley Is proposing to send 
in Warren Learning as a temporary measure to ensure these are now treated as matters of utmost 
urgency. 

KYC - My area of biggest Immediate concern - this has been a systemic issue for some time. Enhanced 
regulations were enacted a few years ago and impiemontalion of these has proved problematic for 
H6MX. One particular problem has been the requirement to undertake visit reports for every new 
customer at their home/businees address. Perhaps because of the extended HBMX branch opening 
hours this has proved particularly difficuit for the branches to achieve. 11 aiso Inhibits ceniraiisatlon of the 
account opening process which has been one of the key solutfons to similar problems elsewhere. We 
(Budit) and the CNBV have bofo identified a very high rate of exceptions (around 50%) to the process, 
though this level is disputed by the business. A pitot scheme has been running since 0307 to use Imaging 
(and hence assist centralisation). However, I now gather Audit is continuing to identify a high level of 
exceptions for that process also (around 30%). 

Given the concerns now raised by the CNBV and FlU (which apparently includes tapes of a drug lord 
recommending HBMX as the place lo bank) we now have to decide: 
whether the imaging process can be made to work to everyone’ satisfeclion. 
how quickly it can be rolled our across the whole network. 


Confidential Treatment Ret 


■ Permanent Subcommittee on Investigations 

EXHIBIT #27 


HSBC-PSI-PROD-0198508 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00705 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




692 


VerDate Nov 24 2008 


in Ihe meantime, whether we can continue to open accounts using the old, flawed process. 

!t sounds unlikely thalWB will be able to meet a deadHneofMAYOSto obtain sadsfaclory KYC on the 1.8 
million customers identified as high risk. ( am now not clear whether the CNBV will accept a further delay - 
the previous indications were that they were pretty relaxed. 

Documentation - This has been a problem since we brought Bital. I am aware the old storage depots 
have been replaced, but I am advised the processes eresHII a mess. Sorting this out needs to be handled 
as a specific project. It may be worth asking Macalister to run tliis. He is an IM currently with CMB in 
NY who previously had reponsibJIity for sorting out a documentation problem in the trust business ir> 
Mexico. 

Reporting to the FiU - We apparently route responses through a law firm. It is not clear why or irvdeed 
whether this is sinister or just inefficienL However, R does seem that incorrect evidence has been 
provided via this law firm. There is a very high volume of informational requests but we need to ensure 
these are handled with due care. 

Management Stretch- the CNBV has again raised the appropriateness of allocating regional 
responsibilities to HBMX management. It may be lhat you are already close to sorting this out 

Cross-border cash; the trends in this activity slili need to be clarified by HBMX but as I read the report the 
US authorities have a general concern rather than a specific one about us. and CMP last year Identified 
and acted on a cambio which has just been closed down by the authorities. We can therefore show some 
successes. 


nwpettusi^elpfijl background (though a bit tong). If you wish lo discuss please call me on my mobile 
jHIIIIIM i will be in France for the weekend but please feel free to phone at anytime, i have not 
copie^BMX though the points raised have al) been discussed with Paul. Graham and Chris. 


Regards. 


Matthew King 




HSBC Holdings pic 

Registered Office: 6 Canada Square, London E14 5HO, United Kingdom 
Registered Number 617987 


■ ••■Mik*****'***) 
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«aoamsot:30AWf 


i am out ctf the effica tamocTO)*, bu( thbik M shauU Jo Group Ml lMi fay ttM «nd ^ th« we^ • 

woutdabepoi^leforyoutofinBlIasyourdbcusslonewriin RiimandfeveddbecliaBeetey, onmy 
bahaW 

■Rianks 

Paul 

John fl nENCiAi.l>iaMXrHSBC 


iMOrzOOS 07:40 pjn. 


re PaiiATHURSTQNiHW«IH^C$HSaC 
- ce *B imonQTi« Gfc«oft*«T vnBn.gwd»gh«bcjoffuw» 
Subjw ( 



at we rsfeired U ybu a couple ol momta bade • the ottw^ 
miiTiarted, weatotnalnialn tmareliUafMlilp. Rweebuedon Ibe 


ware reiathiaty on Up of dw CH« 


<U (fleam the spedlica (atMd In Susan's emri wU) Rannn lomawDw and raven. 


John 

PaulATHURSrrON 
Ort^inal Message - 


:0 


rrmt eaul. A TilORSTOH 
pant! 03/04/2009 0\;24 t 
toj John R P 
Subjeat! I 
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"Suiifl'A 

WRtGrfrA«3HaNsac 
. HOHQ 

-- oi/tu.'aioa t(K24 
Phene No. 79935554 
f44(a)»7S92SS54 


7o NarnonGARCIMHSliGtmSaOSHeBC 

Wami 0 LEAlAKCVRLALSllSMrtlBliIBHSaCiSHSK,' 
J<dvlPROOT/HS4C»<S8CeN38C 
SubfM Q 

NSBCHdiSnii^plB-HSHa 




. Ramon, 

' Good to tBik to you yeet^ay. I IhotigmUwtKjU bswantMotiBetabnvIng upon ■ number o(!»suaaw(i 
: dtsatsoed yesiarday:- 
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ConipHnst 


-S. 


lompimet 


a~rtL. . y Cj^ ijT-o <- 

Money laundering 'sting' led to MSB's record penalty, says 
legal pact 

~ Jan 29 2008 BreU Wolf 




. Califomia-bBcecf money transmsner Sigue Ccfp&‘^at!an has agra»d to fcrfMt S1 Sm and spend $ 9 . 7 it. gi anlj- 
money laurulenng compiiancs this year to settle US Oepat^ent of Justice charges that It operated \^h a 
deFdent AUL program. SiguB's woes stern from the tact that dozens of Hs agents were snared by a federal 
sQng operation dubbed ‘Operation High Wtre' according loth* deferred prosecution agreeroenl, or DPA. 
reieas^ on Monday and cbisined by Ccmp&wf. 

; This record-setting Bank Serrecy AaparaKy — (he targesi ever suffered by s money services business — was 
weR earned, according Vo the DPA. Sl$, the agreement stales that Ste government will recomrrisnd the 
disriissst of the charge aga'm^ SlgLiein 12 months tf the hrm talus the agreed remedial action ard does not 
viotate the terms of the DPA 

wlatloris at Sigije were sedauasnd systemic, and clSov/od tens of miliiora of dcitors of suspicous 
financial Irattsadtons to be conducted through Sigue, indudirtg transactions involving funds rspracented by 
undercover US law enlorcemenl agents to be drug prbceeda/ according to the DPA, which Compffnei heralded 
In ari eediar artide. 

The DPA alleges that Sigue. an irua-naticnal money rernittance company that specializes in iransferB to Mexico, 
violated the Bank Secrecy Act, TtUe 3t USC Section 531d(h)1 end n22{B). According tb the'DPA's alatemeht 
of fects, diesa BSA vioisjorrs cx7;iii[«d hejuxanTi KOV6fi')ber£wQ3 and March 20Q5 and involved Sigue money 
transmitting agerrts. most of wWcb wwm “tnorn and pop" shop&: 

'Sigue euthoriced delegates knowingly accepted curd transmitted more than $S00.CX)0 of money roprvceoted by 
urrdarcoTerUS law enforcerMent clears to ^ prccseds cf drug tr^flrclcing. The money-used in the undercover 
operaiians was received by and wired throuah 59 separate Sigue aulhorizad delegates in 22 states," tfia DPA 
stated. 

'Drug money’ flows to ’seurce of suppiy* 

According lottie DPA. underco'^ Officers approached Sigue ager^sand asked for help in settdlng "dnrg 
proceeds' to thak 'source of6U|>piy* in Mexico City. In teality. ihe recipients ware undercover Mexican law 
enfercement officer?, it added. 

*TbB (US] urtdorcxver agent? Informed the aumortzed dategalas that they did not want law er^orcement to iearrt 
of the trartsBC'JoRS. and that they preferred iVt to provide any tormofidarMcation or address iTkfermstion. 

Mmen ^gue-airthorized delegates requested soma form ofxlentMkatlon from the undercover agents, the agents 
produced multlpte forma of identiflcaliofi cards, all in dHfeient names and bearir^g obMously different 
tikeresaea," the OPA stales. 

Some paas, many fall 

in total, undercover federal offtcers cuKlucitnl 64 suci:es&(ul Iraniecltoris through 59 different Stgue agerts. 
whie 24 agerts *grcperfy refused* to condud die iKieii transactions, the DPA stated, it added that ei 47 
locations, the undercover otnasr s and me Sigue agents 'siruciurea the cash transactnns by splitting large cash 
amouoiM over $10,000 Into several smader amownis to av«Hd tfiggerlng awreniry transection reporting 
threshoida at the Sigue corporate level ~ 

The OPA ales noted Ihet the Sigue agents who conducted the trenBactiorw may be charged wilS money 
laundering under Title 18 USC Sections 1956 end 1d57.ps may Sigue. if it violates the terms of the agreamenL 
It should be noted that t,he R.'mndal Crimes Enfbrcenrtent Network also asssesed s $1 2m cW^ money penalty 
against Sigue. defming that its 'failure to imclement effective Intemai controls, training orndependent tesOng to 
rTiansge the risk of money laundering vyas serious, long-stsndirvg and systemic.* PInCEKJ's eenaliv (PDF) will be 
satisfied by the SISin forreiture paid to the D^. 

The IdentfOasof the Sigue agents snareo by the sting operaUOn are nol revealed in court dccumenls, although 
Sigue's general counsel, Robert Pargac, told Compfinet that several have been indicted for money laundering 
arid the OoJ has said it may Indict others. He added that Sigue has terminated Ss ralationshib with around 2G of 
the agente accused of wrongdoins. 

“VVe think thal this is behind is now." Psrgacsaid. 


httpt//'iA’vvw,compUnei.convgiobaVnew5/news'amcie-btini?ri;f=‘10l562 
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CompLmet 


Page 2 of 2 


Outlook t>l«ak for many wiSBfl 


Sigue may fiava waatherod the Etorm, but if remairta to be $een whether its agepta' alleged misdeeds will lead 
to more n^sery for feilow MSBs. In recent years, rnany MSSs have themselves uriahle b find banks 
.wiBkig Id serve Ihem. Tlie reason is d^r. MSBs so hi(pi-dfik cusKHTter? end mnigaiing thass risks is cosily. 

A case such as that gainst SIgue grves banks yet another reason to treat MSBs as parleha. 



Coinpliiiet I CormBcUzcT Complfaincv ^ 
e ZdOBCninplirwtUd arK) Ks avnlrtoutors /WIdants nsserved. 


Tcptci C CondtnoiiS } Prrvacv Stategwni Acc«M«>iHr.r 
Conlagl Us .1 nSS PiKJawnef ' 
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wMi- Redacted by tbe PemiaiicBt 

SabconmHtee mi lavot^atloes 


rcoBi Michaal P GB0CHB6AN 
Sant: 10/02/2006 23>1L GMT 
To: Paul A THURSTON 

Co: Richard B T BBNNETTi Matthew 3 M XING; Stephen GREBH 
Suhjaefc: R«; CONFIDENTIAL - CNBV/PIU Meeting 

Paul 

This Is most dislurtilng and we will need to have the most thoroi^h of investigaliortt. 




Please keep me advised of atl developments and can Matthew and Davtd meal with me after GMB on 
Monday 

Best wishes 

Mike 


HSBC Holdings pic 

Registered Office: 8 Canada Square, London E14 5HQ, United Kingdom 
Registered in England number 817867 




Paul A THIJRSTQ>^ 

Original Messsga 

Vsam: Paul A THURSTON 
sent: 10/02/2006 16:49 CST 
To: Hleheel F GEOGHEGAN 

Ce: Richard B T eENKETTi Matthew J H RING 
Sutejeots CONFIDENTIAL - CNBV/riU Meeting 


Mike, 


I was asked to attend a meeting with the CNBV today 
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— “ Redacted by the Permanent 

Subcommittee on Investigations 


The meeting iftchidecl the Head of the CNBV (Dr Oulilermo 
Barat^^n^t^He^^ni^TlrmncSnntelflgenca Unit, FlU (Luis Urrutla}, the financial crime unit of the 
Finance Ministry. 


Guillermo Babatz referred to the previous dlseussloru that had been held with HSBC on the issues of 
Internal controls, which he knewwe were progressing, end said that this meeting has been asked (or 
because of edditlonai Issues that had been raised I n the lest two weeks ty Ote RnarKdat Inteaoence Unit 
that caused the CNBV to ba even more concerned. 



he Head of the 

CNBV infonned me that he considered these issues to be of sufficient significance that he would have to 
report Utem to the FSA, as our ta^ regulator. 


He handed me a dratl copy of the report that they had compiled which Is in two parts; 

1 . A CNBV report on operatSonai weakness bi HSBC in ntany areas, induding Frauds, Customer 
complalnb, IT taflurss. Money LaurKlertng processes. Culture, and Oiganhatton stnicture that they r»d 
prevkMJSly identtfied (and communicated in the prevtous nraetJng in October, which Is summarised in my 
note betow). The report now Includes a summary of the actions taken by HSBC to address each of these, 
but they ackmnvtedged that this was neither up to date ruM* comprehensive, and they asked me to review 
H arul revert to them with a correct, up to date, picture on all iha actions taken, so (hat they do not 
misrepresent the position. 

2. A report from the FlU setting out at a high level the evidence that they have obtained that has 
raised their concerns on Money Laundering adMties In HSBC, and that prompted them to report their 
concerns to the CNBV. The nujor points ere: 

the high levels of US Banknotes exported by HSBC In 2005 and 200a (considerably higher than any 
other bank) 

• Ihe high level of failure of HSBC to provide Information raguestad by the PIU (cortsiderably higher 
failure rate than other banks) 


missing documentaiion related to customers, not only for old accounts (which Is a convrtor) failing 
across afi banks), but of accounts opened since 2^)04, when new rules were introduced. They 
acknowledged the changes being put in place over recent months lo improve account opening 
documentation In HSBC but said to me *VVhsl were the manaoemeni or HSBC doing for the past 5 or 4 
yaBrsT" 

• the use of external legal firms to review intoimalion requests from the FlU. potenUally risking breech 
ofconfldentlaUtyonsertsHfve Investigatlaru • this practice b news to me. and to Ihe local audit team, and 
wiH be mvestigeted urgently. 
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• Redacted by the Permanent 
Subcommittee on investigations I 



b) We wilt review all die points raised by Vtd CNBV and FlU, check them out, and revert to them with 
a response setthQ out the actions that have been taken (or actions that vrlD be taken, for Vie Items which 
have only now been MenUned) so that they have a clearer ptctm of the progress that has teen made. 


e) The Head of Group Compliance wOl meet with them, (bDowIng up on previous meetings that they 
have had wHh him. so that we can review the report anA our response together, before they finelbe any 
report to the FSA. 

Uiev^dvtee^^har^emtait^fo^ Bagtey and Matthew 

Ouf security department invSH^^ is meeUng with FlU this 
affomoon to get the Information frornlhelr case files that relates to suspidous Internal activity, so we can 
convnence an Irrvestigatlon of these, i have asked Iniemai Audit to assist in reviewing the ofoer Hems 
raised (most of which came out of prevbus onsite inspacUons earflar last year, and are in process of 
resolution), and confirm the actfona that have been taken. I am arranglrq} for David Bagtey to visit next 
week, when he and i can review our actions and response, artd then he and I wID meet Jointly wilh the 
CNBV and FlU to fbOow up. 

It Is clear In this that our Head of Compllanee is not as highly regarded by the CNBV as had been thought 
by local and Group rrranagament, and Indeed appears to have misled us about the extent to which the 
CNBV have been foformed of. and/or are satisfied wRh. our actions. This will need to be addressed 
urgently as vreil during David Bagie/s vtsH. 

I wUi provide a forther update after the meeting nerd weak, but if you rveed anything forthar fo the 
meantkne, please let ma know. We will keep Richard Bennett and Matthew King updeled, and I'm sure 
they win report on this to the Group Audit Comrrrtiee next week. 

Regards 

Paul 


Forwerdad by Paul A THUReTONTHBMxrHSBC on iaroz/2000 03:27 p.m. — 

Paul A THURSTON/HBMX/HSBC 23/10r3007 02:13 sjn. To MIehaei F OEOOHEOANTHOHOHSBC^SBC 

ce 

CNBV Inspection 
cl 


Mike, 

At Ihetr request. ! met today with the Head of Banking Supervision, and the Supervisor tor HSBC, from 
our regulator, the CNBV, following iheir on sKe s^ramlnation of various aspects of our business, deluding 


Confldentlal - FOIA Treatment Requested by HSBC N. America Holdings, Inc. HSB09340566 
Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8966016 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00714 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



701 


VerDate Nov 24 2008 


Redacted by the Permanent 

Subcommittee on Investigations | 



Th«y wafted ma through a presenlaUon pacii which Rrstiy set out specific points that had arben during 
their inspection, but then moved on to more general concerns of the CNBV with HSBC in Meideo. These 
centred on; 


• weaknesses in Intamal controts which they saw in several areas of HSBC, tiling evidence of the level of 
credit card frauds, numbers of customer ebmptalnts to the bank eruj to the banking ombudsman, 
customer eormems that staff In branches do rwl have appropriate tralnino and queOfleatlons. frequency of 
IT faOures. and stow progress in tackling KYC data problerm and and money iaimdertng procedures. 

- corporate cuftura, where they comment lhai since the purchase of Bilal, HSBC has driven growth to 
credfi products and launched new products without adeguale controls. They atiotowlet^ed the addition of 
new senior executfvas Inctudtng the CFO and COO, end they welcomed these, but they are concerned 
that soma areas of the business have rtol charxtad at all to mentality, or approach, despRe the changing 
nature of the businass. end some tovrar levei staff have not been adequately trained to deal with the 
business now being undertaken. They Implied that they considered that we were stiB running parts of the 
bank as if thoy were slSl fiUal, despite the new ownership end the change to bustoes sproRIe. 

They also expressed concerns at senior management havtng dual r8spor^5ibUMes for Mexico and the 
ragi^ stafing that hhere ara many concerns on how management wlD be able to imptomeni strong 
controls wllhin the bartk In Meidco, whSe keoptog an aye on other countries”, 

Thefrftoat sOde reads as follows: 


"REQUIREMENTS 

As a result of the concerns pointed out, the CbSV needs the senior level commllrnent to solve the 
problarm stressed. In order to do that. HSBC naads to sat corrective prograrrenes. These actions should 
include the followtog; 


• set sbong Internal controls In key business and operaUonal areas 

• adopt nteasuras to slop frauds, reduce clients^ complaints and Improve the level of service, to reduce 
repuieUonstf risk 

• estabOsh tha necessary actions to Improve IT performance and avoid tachnotoglcai risks caused by 
systerTB bresk down 


- manage en effectiva culture of change 

• avoid Sharing senior officers responsIbfllBes with LATAM 

• set effective measures regarding money laundering Issues 


- avoid taking excessive credit risks In the credit card porifollo and set actions to assess this risk In an 
adequate manrter* 


ley w« tscue a normal management Jaaer In due course, without 
Including soma of the more sensing areas, but they wanted to bring these to my personal attention to let 
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rroknowoftfielrconesms 

i kidlcatsd to themwa ware aware of these Issues end were progressively tackHng them. 1 advised them 
of the new appointments of an experienced Head of consumer risk with experience ki Asia, who arrived a 
eoupta of weeks ago. and a new Head of cam Fraud from GMO who errived yeeterday, the he^ we had 
sought from Ken Harvey to review the roOustness of the IT ^eraUons and the planned Interna! audK of IT 
In November, end the maior prooremme of ojstomer file ceniraHsing artd imaging which wouM give us 
more robust KYC data tor anti-money laundering. I talked about the changes we are making to split 
Regional firom Merdco responsiblDtles In areas such as CIBM. IT, Risk and Audit, but they advised that 
their specifloooncerT) here was with PF3. and I Indicated that they could also expect changes in this area 
In the near future. 

i said that we were entoarked on changing the business modeis ofthe bank, and bringing inspaclalisi 
expertise, but that cutture change would not heppen over night. However, t believed diat the intoslon of 
rtew marwigement, corrtolned with changes we were fanning to Incentive schemas to put more emphasis 
on customer satistotlon and busirress quality would help push the bank In tha new direction. I commented 
that we have a young staff, and while they lacked er^rience. i was confident that if we were clear In our 
business direction to them, and gave them appropriate training. arxJ measures, we could make real 
progress. 

I (old them that i traicomed drefr corTting to see me, and that we would respond posillMly to the 
management letter, when it enrfves, erxl that I would also meet up with them again to update them on 
progress with the issues rut covered In the manegemsnt latter. 

They Indlcatsd that this was what they wanted to hear, and that they would report back positively to 
Gullenmo Babatz, the Heed of the CNfiV. 

I took the opportunity to remind them ofthe issues that I had rabod with them end Bab^ two months 
' ago on the FTVi sharing tax), vrttore Bancomer and Banamex had been allowed to take action to 

awld payment, and they ackrtowledged that we would also havre to take action if we were to remain 
ctwnpelldve. and they Irtdicated that white they didnl tike h, they would rut object provided that our 
solution was within the exfsilng laws and regulations. 

i wlO ibilow up on ail of these points, but thought that you should be aware. 

R^aids 

Paul 
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From: Paul A THURSTON 

' Sant Fri Mw 07 21:4329 ZTOS 

To:DavWWJeAGLEY 

ce: John R RENDAU 
&*j6Ct! Re: HBMX 
bnportance: ptormai 

AttactunantK jmage.O Qlf MEE71MQ ATTENDANCE NOTE - HBMX- Loopoldo • Api08.doe 


DavU/John, 

The corrnenB rnada &y LfiCpoido aiS 9jt!s cone&TJna. STiO I «KK^ appear -«8s more swan sf 
; thewB8ki»s9e8.8ndll>9COf*cerreofth9CNBV.e»ann»Tonha8lndieatBd.Tome,thejuryl5stIllouton 
Ramon, and we ne«tf to liave a discussion betureen the three of u». pretty soon, about the wttole ouesUon 
•~<s : of suuctirino the regionsl and Msidcan CMP responstoSSes. 

V;./ 

, Regards • ■ 


, Paul 



DnM W J BAOLEY/HeHCVKSeC Sant Oy; MarkM O ROACH 
D 7 rD 3 ra >08 QB ;42 ejn. 


To Pau(AThMRSTC»W«MXHSBC@t-«8C 
cc Jc^hn R REMI3ALUrs»XA1SBCO,“>5SC 
MBMX 

a 




Pali 


You wB recal that i carriad dirt an exit intervtaw wSh Lecpaldo PJKLng jsz Somsso. 1 attKA e C0|^/ of 9ie 
Cia note IhN I dctatsd dijrtns tny v!st end which has now Men typvd up. 


As I hope time wBI have aflowed, t miend discutsinp tfie comertt of my conversation wBh Leopoioo with 
John Rendall ivtth a view to;* 
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MEETING ATTENDANCE N0TE-I7*r*r«ir7 J«03 

Accndccs: Lc!>polcloRodri|;vczBoRosc(LRB) 

David Biglqr 

: Key points Tiised by LRB in an ex»l meedag weio 

1. He had islrcd to move from tkc AMLjobpnacipftltytlue lotbtTS with fcgHid to 
hi} oisvn person^ dv>l and criming UdgMk» cjqusure, tbe ride to bis physical 
security, the &ct that he did ooi tbraJe that (be job m'SS suitably graded or paid 
and boause be bad already m»le it ctnr when be origtoilly took Ac job dtat 

: (his would be a sbott-tenn post ncx long term, 

2. LRBwcntootooplBmtnsomedctaildiathiaperccptionafczpcBuicKi 
ciiaisal suetiaas was due to tbe cooc&ued pcof controls in the bank, tbe fact 
(hit tbae woe aiicgatioru of 60% to 7G%oflaundemi proceeds m Mexico 
went thrtsigh HBMX end bocatssbe (£d not timk Usat scfiiof msssgetnent bad 

- ssy comiKttmen! to robust AML cenpotS- He (botrgbt it wa> only a maCtBT of 
tinebefim^^nk Faced cciminal sasetiaas and cited asunibB' of cases, 
tBcludmgUpBSas exen^esoFtbe hodi's invtJveointiB aenvities wbicdi 
might Icsdio^cEank being saDcdoncd dreedy and him and menben of the 
(cim being sanctiemed personally. 

. 3. itwasclearthat LRB fcftvcry stimigly ibaindevBsf buairiCH beads within 

HBMX had absdutdy ns m^rect for A>dL ecses^ ssd the risks to which the 
Group was cqiesed a^ bad no inimtiem of ^i{dyisg scnskile or appropriate 
approadics. AgaiBhedtodanumbcrofacampIcsri^rodcapitcslTong 
recummuadatioiu with tbe CMP business beads bad fhilo] or rehised to dose 
actounu or indeed oo occasiois file SAfta. He dtougbl that there was a culture 
dut pursuing profit and (argeo at a!I costs and in fact bad seen no recent 
improvement in ifae standard of cantcots or (be ^pes of decisions bang ukeo, 

d.' He '#as critic^ of thclc'.'c! of resotsocstnhistesm and felt dtat his team had 
done mueb to keep die bank Out of trouble by wcaktflg exnbokin against 
impossible deadlines aad handling sigmfica&t volmnei of alcra including those 
from CAMP. A figure of some 14,000 pcrinoniWpcranauin? was cited. 

5. When asked, LRB indicated that he (bought he needed at least 35 new 
beadcount 

6. ' LRBwassceptkalabCMtdieatMlitycrlikeliboodofbeingableiomignrc 

processes to GSCs at least while tbe bank's sysems were so tmmanire (how 
could anybody check OB'liee and validate caasacdoos) but thou^t that tbit 
might be a tD^tun term sc^udoa twee bank sysrems insproved 

7. It wu dear that LRB felt CKCrenKiy stroMj^y about hi» Ire&tmeal and was 
rasenifo] both with regard to bis recent p^rmaace rsdag. the fta dsit be 
thought that the ML depnreaeat was beiag scapesc«t. s&d was disbelieving (hat 
the btnk could find no altenadva r^. On balance, however, he accepted that 
he was a diffieidt iadividual, had perhaps on occasions bees tactless and agiia 
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tbougb( that be would pnfcr to lotivt even tbougbt be wat likely to sufTcr 
econnsic hardship rather diaa say iiajob wbmbe fcii penonelly exposed. 

8. He was adamiot dtal David Leightai h^ pracnised him that ifbe did (he job 

for icD mooths be would be looked after Kit that Ibis coausltment had been 

TOeged upon. LRB was extremely critical of RG who he desciibed as bang 

. indecisive, weak anddesperstctoretunhisjobsndlBclangany underetsndiag 
of AML mauers. There was a detailed drKitsrion about the openrioa of (tie 
MLD comsitles chmrcd by RQ wtiere LKB iodicBted that be lbou]^t it would 
be ehaiied by lofan Rendall. Apin he fiell (here had been little improvemeat in 
the decirioo-makiDg witfain this Cooeiitiee. 

9. LRB was Ksptkal as to wbe^ tbe bank would be given an ateaskn of time 
widiiD wbich to retrospectivciy icreeiiaie hi^risk custancis and said wby 
StfOuld the autberities spven any fiirthereitteosios given dial the bank bad 
previously failed to meet csriicr coiRiRttntcRis. Kewesclcariyofthcviewthai 
^bvde was beading to a situation whexe ia due course it would be tanctiored 
or penalised and had seen nothing in recent mentfis or weeks which su^^jcstcd 
to bini Alt matters could isnsnove. 

10. LRB then referred LOB report he had been in die process of writing which 
would set out aad articulate ail of the various areas of weakness duf he thought 
existed. This lepon had not been fjfiished by biiD and be was still deciding 
wbetlier he would write it OB said that this ws very' such a nuRsr for L to 
decide upon personally and that OB would adlHcr encourage hini to write it, 
nor discourage him from doing so. It was veiy much bis own petsonal dedsion. 
Having said this, DB indicated to him friat if the report was produced and sent 
to DB he would dischanse his own personal obligations in bis cut real role by 
causng the rqiort to be caiefuDy considered and factored iota any wide worker 
other review that was being uaihinakeo. DB woild not just igaore it or bury it 
but equally would hnr m balance views capicBcd by LRB aga'mst views 
expressed by others and form a view. On balsncc. it seemed likely th&i LRB 
will submit such a report. 

11. LRfiaskedtfaatbtateamtneobss.pnnkidariy tbemoresfisiarmeinbenbe 
iOokedaftcrandTioinaoywaypenalisedfarhisdcpaiTuje. This was genuinely 
unselfish. DB assured him that he wculd da whn he can in this regard 

. 12. Ovenil, LRB gave the impretsian as iuvii^beas dedicated and commined to 
his work, having real and gcnLcnely feU concerned. His opirione were very 
firm, die conversition extremely cordial but at no stage were there any 
auggettioos that be felt that iodividtsah, including individuals within CMP were 
inaoy waycompromisedoiberdtaap^apshyreascDOfiocompeteoccarpoor 
manag^roent. Heelearty feels badly treai^ but accepts thatsonc of tbe 
eensequences have been brought on by hinasdf not least asking to be moved. 
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From: John F ROOT 

Sent: Wed Jul 30 21:46:30 2008 

To: David W J BAGLEY; Warren G LEAMING; Susan A VfftiGHT 
Subject: HBMX Visit Update 
Importance: Normal 


It has been an extremely productive trip. Below please find a summary of what I have discovered so tar; 


LtSD Ceyman Accounts 

There are 35,000 accounts with a rrionlhly total average of USD 400 million. Many of Srese accounts were 
opened by Bital through Its New York branch. When this branch was closed, the accounts were 
trarrsfaned to the Cayman branch, which was opened 11 1980. 

The real surpn'se was the existence of an HBMX audit in January 2008 on KYC Ibr the USD Cayman 
accounts. It Is not dear who in AML responded, and how. ^anfc looks all around. I should know more in a 
few hours. 


The report, which is In Spanish, concluded that KYC control was 'below standanl". A sarrpling showed 
that 15% of the customers did not even have a We. For the files that taJuU be found, there were serious 
failures in following Group procedures. 



CEO Luis Perra has stopped all new Cayman accourils. CNBVwere said to he a bit surprised at this, and 
not entirely happy that a source of USD was beittg Ibredosed. 


As for the existing accounts. Ihe manaBement pbn Is to offer to cfents to transfer l^em to another Group ; 
entity, currently envisaged to be HSUS (allhouQh an actu^ Cayman entity was also briefly contemplated). 


Fixing the Cayman accounts will be a struggle. How do you locale cRenis when there is no file? 


High-Risk Trsnss&lons 


Since the beginning of the year,^|^Basub<dIfeciOf in AML, has identified 1,1W high^sk accounts. 
Of those, 270 have been canceBed, most with SARs. These tfigtyrtsk accounts include USD Cayman 


, ■ “ Redacted by the fermaaent 
.Subcornmitfeeoii lnVertlgsitiori<; ; 
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Much progress has been made. John Rwidail and Bie team have worked very terd. wBh concrete results 
to show for IL f attended a lengthy meelmg of the project tet night and came away very Impressed wlfli 
what they have achieved. I will forward a number of usefol reports to you on toe current situation. Audit 
think that much more can and siwuld be done, but the COO and hts team have toe proper risk-based 
app^ch. 

Reportm 

is extremely busy, with meetin gs to attend e very day and many reports to write. I have" 
n that I will lisise regularly wito fHliHBfor the reports we require so as to ease the 
; burden on him.|^^nd I have discussed the new reportins template and how we should proceed. 

Operating Loss in Colombia 

Areceirtmishap in Colombia illustrates whatweoreup agarnstln the region. 

: Our treasury in Colombia sold rather than bought repos, and endad up with no securities with the Central 
; Bank to support the sale. We expect a *penalty not a Rne', whitir would appear to be a distinction without 
a difference. The current estirrrate Is USO 560k. The key teue. according to Graham Thorrson, is that 
; someone in Colombia signed off on th^r bting FIM-compHarrtwhen they weren't. He is In^estigatir^ this 
^ point, and also Why he was only informed last Friday when toe problem came to Hght two weeks ago. 

The same concerns for O^mbia, e.g. FIMcompaartce. affiiy of course to Central America. Key 
managers are tellirkg us that they ere following Group procediees when, In many cases, they aren'L 

: John Root 

30JUL08 ■ ■ • ' 



a^ed with hir 
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From: John F ROOT 

S«it: Tub Aug 05 08;35;l2 2006 

To:DavidWJBAOLEY 

SubjBet: Re; Fw; HBMX • CAYVVUsI AC^UNTS 
tmportence: Normal 
Attachm»t>tB: Doc Unk-htm 



Omid W J BAOLET/OllomSBC 05 Aug 2008 To G«l«m TH0MS0N/h©MJW3BC@KSeC 
08:00 Phene no. 7B81 0645 

44 20 7S91 8645 Mail S)m; 2M6d ^ 

F* H8MX - CAYMAN i^5COtlivTS 
c( 

EtiS/ 




Groham,' 

VMawilon the basis of this Just weri( on the essumpBon (hat notfting has been done to date . Ido f^d 1 
surprising ttiet there can have been no response and yet the audit was closed out is this a breach or are 
you In audS becomirtg softer . 

Regards 

— ^Forwanl»dbyDevidWJBAGL£Y/0MOrHaeCan05r0&/200B08:D6->< 

btefdww J W KlHdfOOU MA 

dStOSfGHOrXSSC Sant Ijyr. LA A 
TESTEFVMOR INA OtCyHGWVKSfiC 05 Ai« 

200e07;12 Phene fw.7®e 21176 
44 0 30 res 21176 Mas $»■«: 20467 


To DaM W J BAOLEY/OMOftlSBCOHSBC 

cc 

S’*!® Ra:ISw;HaMX- CAYMAN ACCOUNTS 
c( 

EttUly 
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To Motftw J W KWG^USM WA GH£yHGHQ«SBCeHSBC 

^ AJrr»ite BOLA^«aSA«MX«S 8 C@HSnC. 

Chrta.RBCKTLEYQhsbe.ecim.mx 
Sutija r,;Fw;HBMX- CAYMAN ACCOLI^/TS 
ct 

Eriffiv' HSBCHcldincspfc-HGHQ ... 


Matthew 

, I refer lo OUT recent emaite. , - 

I am now received fartrwr otartficaUon from tSAQ on the report recommandallon status. 

.. Noresponsewasrecerved toBowinotheiuLje ofinefe^onin APRoe and KsrecommendaUons were 
"ctasedorinAISarKllrKluJed in me matrttofbranchcontmJweakmBses, which GAO routinely 
discloses with the business. 

PertodIcaOy GAQ reports on mBnagemanrs progress on these iiaim and continues to check on . 
compliance standerds as part of Is regular branch audits, whereas aware from reports to audit 
committees etc, braruh standards ha^ fia0«d until recentV to be in^oved. Project Restauracton ts now 
recb^ng fiat potion and has Included the higner rWi Cl customer atxnunts In Its risk based ramediatlon 
approacTi. H8MX CEO has sifipended S^e prsvecon o< Ct accounts to new cusaomem. 

Regards 

Graham Thonson 

Head of Group Audit Letfri America & the Caribbean 
Tel (52) S5 5721 6238 


Graham THOMSONfHBMIKiHffiC HBKX 
:CH/QB/200e 23:19 Msfi sic«: 1sei0 


Matthew J W KING/GGM INA GHQ/HGHCVHSBC 


MsOhM J W KING^GCy INA Oriham THOhWojwBMXfrI&BCQHSSC 

GHO/NGHOMSBC 31/07/2008 11:44 t.rrv 

ee 

Re: Pw: HBMX • CAYMAN ACCOUNTS 
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Graham, 

lAhal is thB position wfth the audit report? Was % sent to me under standirrg instrucfions? How many of 
the rBcorrynendations rem^ outstanding and are these included in the reported stats? 


Regards 


■ • Matthew . . .... 



; Of^wm THOMSOWAtMOOHSac rtSMX To EfrtlsonJ^OHSO^wl».com.in]t 

JiyOTWWB 1T;3e Man SIm: 11613 Arsjy GeMTft«MX,fHSeC^S8C. DavW W J 

aAQLEV/SMOHsaC^SBC. Un PENA 
l£Q£UHaM»HSBC9HSBC,R«nCA.GARC1A^wbc.cam.fm. 
Meahsw J W IQNGKSGM WA GHOlHGHCVHSeC 

StAJe R»:Pw;HBMX-CAYMAMACCOUNTS 

■ et 

Eraiy HSBC HoUInps [Me - HGHQ 


Emibon 

( first becarre aware of a Cayman Issue on Monday (26d)) at LAM RAC when CMP reported ih^ a ^ of 
USO SO k had teen levied on H8MX . On Tuesdey I asked fbr a copy of the Incident report CMP had sent 
te GMO. A respoTTse Is perrdirtg. i have chased egatn this raorelng. I shal advise further once i fnve 
received a copy of the report 

Regards ■ . 

Graham Thomson 

KeadofGreupAiidltLaanAfnertca&thaCarlbbean 

TeJ(S2)55 3721 62M - 


Emilson ALONSO/HBMX/HSBC 


ErrdlMnALONSOmBMDCmSeC 31/07/2008 To 

liioes.fn. 


Lute PENA KEG^BMlUHSBCtaHSBC. 
QEm'.HBMXAISBCeHSdC. Orehcn 
THOMSDNMBMXrtiSBC^HSdC 
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ce Owtid W J eA(A£Y,OrfCVHS8C® HSBC 

PwHBUX-CAYMAf^ACCOtJNTS 

d * 


G»rrti«in«i. 

Can you put iT» aware about tHs par^uiaf 'probtsm. wftlsh 1 am not aware of? 
EmBBon 

:-^Famart*dbyEirtlsonAlONSO'H8M»HSBCon31JOT/20WI1:09a.m. — - -• 


To Richard E T BEr4NETT/H58H;HSdC(g|HSBC 

ce Mldml F (SEOGHEGANntQHCVH^COH^C. Efftilson 

ALONSCVt«MX/HS»::^^C!, Matff>aw J W KTNG/GGM NA 
(jHCYHGHCVHSBC^&HSBC, John R 
ASNCMLUH9MX/KSaCQHSBC. Ld» PENA 
KEGELXBMXftS&BCQHSBC 
Subja veiaix - CAYMAN ACCOUNTS 
d 

Enl«y 


Richard 

Vito have been In discussions with HBMX CMP wUh regard to certain potentially susftotous trer^actiora 
MentiflBd by roiAlne transadton monitoring. This Initial report has wfdened into a more general issue as 
detaSad below. Whilst ws con^ue to IsBow up with tSNtK, 1 thlnlc It is appropriate to provide an initial 
report as tolkiws; 


4^;^ David WJBAOLEY/QMQWBBC sere tv; 

Manon O ROACHAIGKOiHSBC aiJU 2006 
00:48 am. Ptx>n» no. TBSi 8845 Mail Sbe: 
5742 



I am awailsig torther detats of the suspi:iou& activity edanttfied, but in brief H appears that our CAMP 
mMiitoilno system identified significant USO rsfTtttanees being made by a number otcusiormrs tea US 
company aflaged to have tteen Involved in the supply of ekcmfl to dregs cartels. Appropriate repoits have 
been tSad and have apparently enabled the authorlUes to identify slQn^card relatad sctrrily passing 
through other banks. This ted to a reMew of the wey te etolch HBMX operates USD-denominBSsd 
accounts through Its Cayman branch. 

HBMX holds a Category B bankkig licence in Cayman which aHows them lo provide banking services 
anyMmere other then to C^men resktants. 

The Ocartca, inherited from Bittf . allows HBMX to provide USOdenominated serAces to pef5ons 
damlslted b Maxico. Metocsn regutatton apparent prohtotts indiv^sg Mstoeans (l.e. norvoorrxxsto) to 
hold USD-denominattd deposit accounts in Mexico. The branch cunenOy holds USD400m and 35.000 
accounts. There Is no physical presence b Caymert and effacthreiy frorit and back offlca ser<dBes are 
provided on the ground In Metoco. AKhough HBMX ware recently tered UBC6D,000, tor fire Inappropriate 
promotlan of these sendees b Mexice. I emadvtsed that CNBV are aware of thee^dslance ofthe 
aooounts and lervtoes and have raised no oortcems. HBAOf ate ixmevor sensibly re^tewlng the position. 

I have atsd asked CMP to review wfrether there are any similar oparatians in LATAM. 

There continues to bee raaltoous on toe level of uSO^nominatad aedvity b Mexico by CNBV and 
otoer bodiea. and toe extant of HBHOCs scd'rity In dds area. This accouni base has to therefore be seen 
as tiigrwisk from an AML and reputsftonal perspective. 
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Apparently an mjditcvriadoul in ^oe'oT the Cayrhan branch acthHttas was rated as beknv stshdani and 
idanMiad slgnMcant KYC weaknesses, h be Important (o ensure that these accounts wfll be covered 
by the various account remediation (vocesees undeiway In HBMX. and as a priority area. As a precaution 
HBMX have iSEusd instnicUons that no new accounts be opened pending a review of these actMUas, 

Wa »e also checkhg whether etiy siriiilar activity tnaH In LATAM. 

i vria report futher in due course, but thought S irriportstt to prnvida prellmiriGry r8p«tt. 

Regards 

DavidBagiey 
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Froia: John F ROOT 
6«n«; Fn Sep ^2 1S;14;17 2006 

To; Adrian CRISTIANI 

Cc: OavU W J BAGLEY; Warren 6 LEANING; Susan A WRIGHT 
Subject: Pw: Cayman Accounts 
importance: Noimat 

Attactimants; image_0.gif; Ooc Link.htm 


Adrian, -- 

A( VWrren Leambig's request, belw ^ease find a recent breakdown of d>e USD Cayman accounts at 
HBMX (le. held by a branch of HBMX with a 'Category B* offshore Caymsi license but no physical 
presettce or client documentation in Cayman). 




TheHBNK ‘nestofaDor)* project chislred by John Rend^l, KBMXCOO, is endeavouring k) regularise 

these accounts on a rtsk-iasls. Account opertingdQcurrwnialien Is generally poorer non-Hxistsnl and 

Ihers is a lot of work lo do. Money-taundering risk Is consequently high. 

Regards, 

.John Root •• • 

i — FonvanJed by John F ROoT/OMCyHSBC on l2/0e«006 15;05 

Ramon <aARCWHSM»HSBC®HSBC04 Sep 12 2006 15«4 f*U Size: 372B1 To John F ROOT/GMCVHSBC®HJsB 

CO Maria SALAZARmBMA/HSaC®!- 
Subja Cayman Accounts 
ct 

• Entity . • 



John, 

Please find etuched information requested. Regards. Ramon 


CAYMAN ACCOUNTS 
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Customers were dasstfied hi emefsency tights considertng their trensactenal behaviour as -follows: 


4 RED 5SC siatus, bladi HsLs and customers with one Oi more reports to ihd authority (SARs) 

were considered. 

YELLOW Customers alerted by C^P system wIShout SARs 
-WHITE Customers with no coincidences m the two previous ranges. 


John F ROOT/GMO/HSBC@HSBC 


John FKXITKSMO/HSBC^SBC 11/09/2008 06-51 am. Tfl Ramen GARCA'HBMX/HSBCtgh 

' cc 

Subjn Cayman AMourtt 

' ct 




Ramon, 

Could you please send me figures for the Cayman Accounts? How many? Total? SARs filed? CD? Be. 


Regards, 

John 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8876785 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00731 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 


718 


VerDate Nov 24 2008 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8876786 


4 

14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frtn 00732 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT I 



719 


VerDate Nov 24 2008 



Confidential < FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8876787 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00733 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 


720 


VerDate Nov 24 2008 


by the Permanent 
-subcommittee on investigations 


ProinJ 

Sent: Thu Nov 27 02:38:42 2008 
To: Jaime J SAE NZ: Rarmn GARCIA 

Sut^ecf^erioiBb' consider restrictins the product Oe^lara accounts in zona frontsm Product 63 
Cuenta Maestra en Doiares P.F 
Importance; Normal 


JaiTTiB y Rarruri, 


In the same way we have already restricted newC«Mnwn Island accounts trom opening, due to the 
massive misusa of them by organised crime, I thlrdc It Is at)out time we sedously consider recommending 
to the business, that we can not support their msnsgefnent of Doflars accounts in the zona frorttera 
Product 63 Cuenta Maestra en DoHars Personas.Fisicas. 

have suti^red three cases this wesh wd-iers doCam accounts based in the zDi%a frontera have been 
opened widi the apparent sols inlsnSen of using them for money laundering. 


The pettern fe as follows: 

1) Accounts are r^ned at various branches in Cd Juarez (or other border areas within ^Icmofthe USA) 
in dollars product number 83. 

2) Declarations ere made by the customer in their branch KYC questions of iow eecoum movemem per 
month c*h one case the client irtdicsted he was gantg to mcve usDaoo a rnontti. but in &ct moved 
USD1.4Mn!l!l!) 

3) Cash is then depofsted in branches far from the bonter (Toluca artd Edo de Mexico.) The inc&ndual 
depoisis are rrormaiy USOSOK but R is one aietomsr. standing at one cashiers wirKSow. depolsting ten to 
twenty bundles of USD60K. The total is USDSOOK to USD933K m one customer transaction (aibeR 
seperated into 20 bundles) 

So %r the lota] ofthle cash hes surpassed USD3Mn in two y.iee!s. These are the accounts 'to he\e been 
notified about, but I imagine that there wilt be mariy more In me coming weeits/months. 

There are very apparer'l breaches of procedures In both ti>ebrar>«hes that opened the accounts, and the 
branches that are receiving the tinds. (Please seeb^ow) 

It (s my belief that the prefDessIonat money lauoderes have got wise to our procedures, and are now going 
to 'Tilt and run* us. They wilt open accounts, useihem totaurxierasmuch money as possible, In a short a 
time as possible, and then elthar close the account mansetves, or wait for our procaduras to do H. 

The normal tims scale In a typfcat case, to dose an account is three months . from when the first 
CAMP/ROI alert comes in to the AML area. As you know It Is then passed via the CCC to UCE who then 
have to locate (he file, and provide it to LGA tbr 6>em to stvl their process. LOA say they take on average 
R a 30 days, but with the resturation project, their backlog is now almost 2.5K cases. 

In another case i am worklig on. the dtent has eiready been notified by LQA that the account Is going to 
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be dosed, and he is using his last two weeks to move as much rronsy as possible. Solar this is USOIMn 
in three days, to add the the USD9Mn that he has sucessfUly ^ndered ki the last ttwee months. 

It is my opinion that we am not 'PrevsnAng* anything. We are altcpwing the organised cr'siinals to lauider 
th'isf money, aoA ^ly attar three rronths do we tSnd manage to stop them (t^ cioEtng tha account). Sy 
wNch time they have prosMy opened up another debars accoi^t In a fake name, and started the whoie 
process again. 


The first assent'ei thing that must bo dono is a bank wide email explaining In clear and simple terms tha 
cash dspoisi amounts that are laid done in CMP Pti) 050003. 

In my investigation so fer, NOT ONE 8INOLE PERS^ has heard of this circiiar. and no one is fbllowing 
It. 

It is my opinion tiiat unti PFS can property educate their staff In tha correct procedures tor dealings with 
these types of eccounts. then the scccunt should be removed from our listof pfoducts. 

If we were rigoiresFy stickirtg to this procedures, then I am confident thaitwa would serlousty restrict the 
ftow of dollars hto ourorgainsatlon. lam aware that this is a theme that has been raised by Luis PeNa 
and the CNBV. 


For your Information the part that t consider most relewan of CMP PLD 05OOD3 is below: 


4, Optmeiones en efetiiaa am ilofares Js hts Esiedas Vmidot tie America 
QttaM ettriciamviM prohibidaia rea/daciondcimsiguienfaeiperociona: 
EsitsiAu de Glfos Ba?Karli>s 

Coitipra yesiU dr chagnes dt vSajtn e ao clfeniesABturioi 
f'etiia d& Cfiogua ch Caja a ttsuarios. 


HSBC ho esiablecido el srgiilenie meetmiima de escolomiento de aprohocldn Mznua para e! mtmire (fe operoctones 
(dep6atfosy refirai} en efeedvo con ddlarei de los Esiodos (/Riiht de Antdrico: 

ffhtei del Facaliado 

^cctfn'vo de Cuenla (PFS) 

Lider de Unfdad de Segoclo (PFS) a ^eautvo <ie Cuefita (fnudndote de otnt Se^tentos) 

SHtkitni€i<»‘(todot ton Segmentos) 

Director (lodoi los Segmaitos) 
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Dii-^oe ^ecuHvo (to^as As* Segntemos) 


Nn XK reqiMrtra rvntihaciiin m el ir6mUe de openscinnei en ^ectivo can dilares de los Esiadai UnUkiS <te Antir'KO 
qua rcalieen personas flsicas, pormonios tr^erlores a fox 10,000.00 ddJares, asl como de aqiiolhs qtte Hewn a cabo 
p&sonas morales, por manias injeriores a los 30,000.00 dAloret. 


We have had ciiants dapoist usDd33K iff (Mie day irt bond^. This ddpolst Should hava been 
approve by the B.^ec . but It hss never reached Isra Nor it appears have any of the straller depoisis 
reached even the levels of SubOirectorsI 

!t needs to be made clear that arty brarKh mclevins more than US0100K total with one customer 
(regardless of how the customer wants to seper^es die depotsts) (hat has not notified their Sub> 
Director , wil be si^ject to Zero tolerance policy enforced by UCE and the 3 ub-DIrector. who should 
have been told . 

This matter is not Fraud so PIP resources need not be used, and It is not necessary to involve AJVR. in 
evsiy case as tha evidence is very obvbus, and easy to prove through branch csfi movemants. Of 
course ^ same Zero tolararfce should apply when the cash depoist IndIcstB Directors and D.E]ec need 
to be infemied. 

PF5 Channels and Products should be able to 'police* toemselves in this matter, and i repeat that if we 
stick to these procedures the money launderes wtli qiacAiy become very bred of wahtriQ to 
authorisation from Our senior managemeni, and wW carry out Iheir bustoess in another financial instiiukin. 

! creatiy appreciate toat this Is a complicated Issue, but witfiout 1^ arsd decisive action v.'9 wfil never slap 
our3eK*ss being irsed by orBeneed criminals. 

Thanks and regards. 


— - Redacted by the Permanent | 

Subcommittee on Invesflgafions i 
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From; DevW W J BAGLEY 
Sent Thu Nov 27 0e:24;53 200 & 
To: Warren G LEAMING 
Cc: Richart E T ffiNNETT 
Subject Re: Mexico 
importance: Normal 


Thar k you arxJ all noted. 

V^at ) fnd most frustrating is the way in which new ssues constantly errrerge however rruch time is 
spent with HBMX 

The practice of changirro USD in the branches presumably wkh little or no ID for non customers is In 
brea^ of Gmup policy. When looking el our U&O exposure how can this have been missed. 

The SAR fifir^ Is just daft as is allowing an account to operate pre- closing and taking toe long tc close. 
Are you able tv chaiieriye ttte irrvOivei'i'iCttt Of'egdl tfuS pitMcSS. if not Subject lu Richard's views can 
they gear up their effort in tWs area. 

Regards 


MSBC Holdings pic 

Registered Office; 6 Canada Square, London E14 5HQ. Un'ted Kingdom 
Regietered in England number 617967 


Warrcn G LEAMING 


Original Message •>-- 
mn: Warren G tEAMiHC 
S*aC: 27/’ll/200e 01:29 GHT 
To: David w J BAGLEX 
Coj Plehaxd E T BENHETT 
Subjieet:: Re; Nexieo 

DBvId/RIchard 


Mike Oeoghegan today vtsUeri Ihe president of the CNBV GuBermo BebaU with Luis Pane HBMX CEO 


Confidential - FOIA Treatment Request 


I Permanent Subcommittee nn Invcstiyatinn, ! 

EXHIBIT #35 I 


HSBC OCC 8875605 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00737 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




724 


VerDate Nov 24 2008 


and Emiison Afonso. It was anticipaied that during tha discussion life Banfcs con^ls on AML would arise 
fonmwkig Paul Thurston's m e eting CN8V rn March. Ramon and I conl/ibuled to a briefing paper Ibr Luis I 
Mike which Is attached. We had anticipated that the CNSV would be comfortable with (he anprovements 
that had been made wKh the controls but that they may stil be concerned with the actbns of iha Bank's 
staff in accepting deposits without apparent KYC/ due djligence{ie has the message penetrated down to 
the rank and fSe). 

A! the meeting apparently MSce acknowladged the CN8V may bs concerr>ad around the Banks controls 
on Ah«_ The CNBV president, who was accompanied by Patrido Bi*stamanle (Ripervisinn) and Pablo 
Gomez (AML) noted that slgnttlcant progress had been node to the Banks controls but they remained 
very concern in respect ot 

1. The USD Cayman accounts and the stow speed of remediation 

2. The sheer volume of US Dollars that HBMX repatriates fm^orts 

Between January and September KBMX repatriated USD 3b, 38% of the msrket which is double 
Banemex U$D t .3 b whi^ constitutes 17 % of the market ai^ yet Bansmex is the biggest Bank in 
Mexico and HSBC is 5th largest. The authorities ere concerned that whervever there Is a sarious MUD 
scheme HSBC seams to be involved. CNBV ^so wonled that the USA authorities are concerned at the 
very high tevste. 

Apparently Miia told Luis ihet he Is Is not holdbig Itim responsible bccsuss he is new but directed him to 
sod ihe problfifTt out. Vi^en Lulfi said ttWs coitid result In tost profits of many bUlions Mikes clear response 
is that nothing Is worth risk lo our reputation. 

Luis called a task three meeting this afternoon mat Rsmcui attended. Durit>g this meeting It became dear 
that we are vary good at buying/acqulrtng dollars but we do not seem to sell them and hence our very 
high repatriation figures. 80% of our dollars cometiom nwey exchartge business at branches, there is 
DC fimrt on the amount of dollars mat costumers can convert to pesos and Ibr non customeis we convert 
up to 3000 dollars, andtlo not require any KYC. 


Luis has decided mat dracortian measures ere required artd he is proposing 

1. The uuri'eitt beeze on opening USD Cayntan accounts wffl cordlnue indeRnitely (there ware proposals 
to reopen as esriy rtexlweekV In addition no new cash deposits will be accepted to the existing account. 

2. HBMX win ceese to buy. sccepl. sat! U3 cash ter al customsis. 

3. all remediation must be completed by 31 January (earlier than ptertned March) 

Business are reviewing how to imptement and wili meet again on Friday momertg. 

In the 2 days I been here a has become apperent that 

1. While romediafton efforts hove progressed they have in some instants been very slow, particularly 
axQund phase II oarporate accounts. In addUlan there appears to be a huge back-log In closing eccounts 
as mis la a legal process managed by legal. Pending closure customers can continue to operate their 
accounts which may be part of the reasons for muitipia SAAS. Jaime's team is producing figures but there 
ae reports of accounts that MLD commtttae ordered closed in March continuing to operate. 

2. now to resolve eAccounts with multipio BARS not being closed in breech GPP 25. it seems that BARS 
are fSed before w« have complete information as to whettier dnere is a need te file them In order to 
comply wKh local regulation. We are also reviewing (he practice of Director Qenarais being able to sign- 
off accounts that can rerrtain opea 
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3. We are revienvtng the crtterla fbrhigh (red)inBdiuni(yeilDv)>ow (white) ciistoirter risk profiles. 

Obvtousiy this wit! evolve over the next few days. Mikes visit and Luis proposed actions are considered 
exSremeiy ssr^^ivs hers in Mexico and local managefnant want to pet tnair ducks in a com before advisirtg 
OMO frurmlty so will be ntuch appreciated ff the above cotM nt^ be treated as inftrrralion only and not 
disseminated without discussing furtt>er. 

Best regards 

Warren 


(attachment ‘CEO Resiauaracion Scriptdoc* deleted by David w J BAGLEY/GMCVHSBC] 


David W J BAGLEY^-26/1 1/2008 22:52:21 — Richard 1 was at the leyal awards dinner where I 
note you were a luditc. Durin g this I took a call fiom Warren where because of 


David W J BAGLEY/SMOMSBC Nov 26 2006 
2Z-52 Mail Size; 3181 


To Richard E T BENNETT/H6BK/HSBC 

cc Wanen G LEAMING^.1^ LGA MEM.'HBME'KSBC 

Sutijt Mexco 
ct 

EnUfy 


Richard 

I wes et the legal awards dinner where I note you were a judge. Eiuring thb i took a call from Whrren 
where because of where I was I could not prolona. Core was however that at MFG s meeting with CNBV 
they raised concerns re the Cayman accounts and amount of UGD going to LiSfrom HBMX. Am catching 
up with Warren in tfie momirtg. 

Regards 



HSBC Headings p»c 

Registered OfTice: 8 Canada Square. London E14 5H<X UnHed Kingdom 
Registered in England number 61 7967 
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From: \Atarrcn G LEAMiNG 

Sent: Mon Dec 08 14:01:30 2mB 

To: Ramon GARCtA; John R RENDALL 

Cc: John F ROOT: Susan A WRIGHT; Cstherine BUSSERY; David W J BAGLEY; Andy GEMT 
Subject: Mewco Visil 
Imponanee: Normal 


Ramor/John. 

Please find attached the droll emo'd saUino out nry high level Ihoughts foBowing my recent visiL Could i 
please thank boih for tto time that you took to spend with me durbiQ my visit during what was a very 
busy and turtxilent tbne br you both. It was of c^slderable value In clartiying many of currant issues 
In Mexico and Central America artd I hope that I added value b respect of my discussions with those on 
the ground. 

De^te the reservations e)q>ressed by the CNBV tn respect of the quantity of US dollars repatriated and 
progress of remediaiion. I was heartened to note that they also acknowledged the significant progress 
that has been made in respect of (he compliance and conliok over Ihe past twelve months and 
since ihe CN8V meeting wBh Peu) Thurston in March. If you feel that I have neglected to mention 
something or you have arty Issues with my conclusions expmssed in my draft nolo please let me know. I 
intend to send the note to Luis Pena by i^riday. 12 Decert^r. 

Regards. 


Warren 


DRAFT EMAIL TO LUIS PENA 
Luis, 

As you know I vlstted HBMX between Tuesday 25th Noverrber and Friday 28th November, i spent my 
lime vrith the Compliance and AML team In Mexico and thought that I would offer the to0ov/ing 
thoughtsfconcbistons as a resuB of my dscussions. 

Submission of SARs witWn 38 days. Currency local reguiallon requires that If suspicious activity Is 
recognised dial a SAR should bd niod within 30 days. It is epperent that in many lnstBrM:os the business 
are nol providing the inlbimalkin required to the Comi^lanca deparbnanl to dsfanr&ne whether e SAR 
should be subrrutted or not wfthin the 30 dey pertod. Given the regulatory requirenient and the absence of 
appropriate kifOrmaSon in order to coma to an apprapriaie conclusion, SARs are being subnfitled when 
the htfornwCon is subsequently received It is not possible to retract lha SAR even if Die Inforrrrabon 
reveals that it was not appropriate to subrrot the SAR. Accordingly the numbers of SARs lhat are being 
subnrtiited may weB be too high and given the GPP25 requires thM accounts be considered for closure 
after two SARs are subintted. we may wen be closing accounts where there Is no need to do so. This Is 
both unfair on our customers and causes Increased work. I rwte thal the regulation is to be extended to 
60 days, having said that pressure should be bought to bear on the business to ensure that appmprtatB 
informafion is submitted to Comf^nce in fme for them to come to a conclusion and submit SARs wHhin 
30 da^. 
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Closure of accounts • backlog and blocking. accounts are to be closed, either as a result of the 
remediation prograrraite or as a result of a difeciem by the CCC comrrdttee. poBcy in HBMX requires that 
such accounts be sent to Legal who w3l instruct at attorney. Apparently the taw requires dial customers 
be appropriately notified. It is apparent that there Is a signirtcant backlog (3,959} of accounts to be 
closed. Of this amount 675 accounts pendng closufe were ordered to be cksed by fha CCC on suspi^n 
that they are used for money laundermg ectlvky. You wiD note that some of these accounts are very old, 
infectitappears that there are 16 accounts that were sent for closure in 2005, 130 from 2006. 172 from 
2007 and 309 from 2008 that remain open. I am advised that based on legai ^vlce R Is not possible to 
btock the accounts before cfosura andaccordln^yal! of these accounts remain open with 
transactions being conducted on them wbidt atso Increases the numberofsubsequentSARs being 
submated to authorities, i would ask that the legal adwcs be reviewed and if appropriate a commercial 
decision be taken because i was advised that Scottabank do not use attorneys or th^ Legal department 
but notity customers using certilied ma9. 1 have also reviewed tmnsletlons of the appOeable legislation 
which appears to omCrm this. High proOs accounts that Public ARan have advised should not be closed 
because of reputational scnsHivfties should be reviewed at OGA level b ertsure appr^riate rwnadiation 
arMjfor closure. 

GPP26 • DGA fetters . This Group pdlcy requires that If two SARs are submitted the account should be 
considered for closure. HBMX policy alknvs the accourU b remain open if there is a DGA tetter. There are 
a large number of DGA tetters and I am not necessarily confident that ap^prtate due dtOgance is done 
by the business trefor^igHetorsar^ubnrinedJ^wwiiHeoi^iat hlsbrinHy there have been two 
very s'grrificant cases flHHHHHBHIHHBHI where Comp^ce recommended that 
the accounts be dosed and (hat the business had taken a commerc'iai dedsbn and iitsisted (hat they 
remain open. Sifosequent events have revealed teat these cases inv^ved blatant and systematic AML 
which has caused tee Bank naich embarrassmenL II Is importenl teal the businesses ensure that 
appropriate suppotl/due difigence is conducted before eomptetfon of the tetters. 

CCC/AML Committee. The CCC currently meets monthly and whilst it has improved it appears (hat there 
are stffl many Instances where decisions are too stow in being taken and the closure of eccounb Is 
deloyed significantly by business requests for more time. The presumption seems b be In foNOur of the 
businesses views which needs to change to a more Con^tence orientated balance. I have asked Ramon 
who chairs tea committee to take a much stricter approach goir>g foiwanf b ensure that suspicious 
accounts are closed quckly. i have also asked Ramon to consid^ whether tea frequency should be 
increased b atow more tln^ consideration of serious cases or auihorily delegatsd so that dacisfons can 
be taken between meeiings. I have also asked teat the mealing only deal with high level cases and that 
tee vast majority of cases currently dead wSh at tee Committea ba dealt with outside the Committee and 
only come fo tee CommiHee where business and Compliance cannot agree. 

issues arising from your CNBV visk. I am aware that following your visit to tea CNBV with EmDson 
AkMtso and Mike Geoghegan that you have decreed:- 

a} That as of the 1 si January tee Bank wai not accept USD cash deposits nor provide exchange services 
fry US doDars. Aconrdtngly no dollars will ba eccapied by tee branches end travellers cheques wHI nol be 
sold to non-customers end wriB be sold to customers on a limited basis. There remain AML Issues in 
respect of trevefiers cheques which historicolly ore very high risk from an AML perspectivs end 
accordingly we would expect (hal the Bmlls ere reasonably fow and teat there are very stror^ controls te 
place b ensure (hat branches do not abuse the rules. 

b} Thel no new Cayman dollar eccounts be operied untfl foil remediation of all existing customers. 

c)Tnet as remediation for bote tee Cayman accounts tfrd tee restoration project be completed by 3lst 
January. Yexj are aware that remedtatfon has been slow for the Cayman accounts and also for Vto CMB 
phase hnro accounts. We folly support your impetus to speed up tee remediation of such accounts. We 
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also note that (n respect of Cayman ft is proposed etat accounts be closed and our above 

convnents bt respect of the account etosure backlog ar^d speed need to be addressed. We are also 
aware that examples are to be set both on a branch and iridtvidual basis lor failure to foflow procedures 
with respect to account oper^ng. O and V guldeUnes. We fully suppmi appropriate action beirxg taken 
against aif Indlriduab who do not comply with the Group's policies. 

Transaction ibnits . There are a rubber of bansaettan limits, i suggest that the following be 
reconsidered as appropriate iirrits artd conlrots be put in place * 

a) There is no Enut on the Bank selling cashiers cheques to customare when they ore peld for frwn the 
customei's eceourd. This should be sub^ to appropriata Grnlts ertd controls. 

b) There is no ibrA on customers depositing traveBers cheques to their accounts. 

c}The Bank wBl sell up to S2S,000 of travellers cheques when it is paid for from the customer's account. 
This appears too high and as discussed above we would encourage (hat a reasonable Omit be Imposed 
and strong controls be put in place. 

d} There is soma confusion around the iimils on wire Irarrsfers which should be reviewed. 

CMP/AML Rescaurces . Hovirtg spent lime wllh Jalms Saenz. Ihe new Head of AML, I think that he has 
good potential He has our fu9 support and one of his first lasts is to review the resources that he has at 
hb dtspoaai and what ^vtty tttey conduct i kr^w that John Randall has recently approved a new 
headcount of four wtdeh wQ be very welcome and k) addilion t have asked Jaime to review all activity 
currently undertaken by the AML team to ensure that th^ are not conducia^g activity Oral sh«ild be 
ccmiucted by the busbress and to maximise the use of resources on a limety basis. It appears that in 
addition to advising the high, medium arrd low risk parameters that the team has also been asked to 
actually identify customers thol meet these parameters which would appear to rrte to be a business 
activity. 

Camp Analysis . While some work has been done of tennitrg the camp alerls more work In required cm 
refining the 'soft rules’ to produce focussed meaningful alerts. 

Effidartdes can be obtained by a) analysis of the high and medium risk categories on a sOghily more 
sophisticated basis than has been dorve In the past by anafysino the type of activity on the accounts. This 
may have the effect of actually reducing the number of and medium risk cases to be remediaiad. b) 
more focussed (inning initralives rather than dealng with 'ftsues on an ad hoc basis and. c) introductiDn 
of review sarrtpTmg of customer fitas to ensure high quality KYC/customer veils Inckiding supportive 
documentation. More detaitad risk based reviews by CwnpEonce and tnlemsl Control of the business 
appear necessary. 

{ am aware that a ’AML Shock Ptan’ is being implemented and this will assist greaily In moving the 
erT4)ha5is/betBnce of approach to openlng/managlng customer accounts to group standards. 

I took forward to any comments that you have or would v/etome lurther d'seussion. 

Regards. 
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HBUS Banknotes NY - USD Bought from or Sold to Customers in Mexico; 3-Month Period (Nov-06 to Feb-07) 



SBVA BANCOMER SA (7 branches) Bank Purchases $164,025,000 $23,795,000 $80,690,000 $6,862,700 $3,502,000 $40,000 $1,790,200 $280,704,900 

BBVA BANCOMER SA (7 branches) Bank Sales $2,595,000 $340,000 $1,308,000 $488,000 $108,000 $15,200 $15,300 $4,869,500 

HSBC MEXICO SA (16 branches) Bank Purchases $341,301,000 $65,230,150 $290,120,760 $23,967,140 $13,766,570 $53,800 $7,956,015 $742,395,435 

HSBC MEXICO SA (16 branches) Bank Salas $600,000 $200,0(K) $440,000 j^QjQ0___^^35^000_^_______$0 $20j000____$1^355,000_ 


CASA DE CAMBIO PUEBLA (9 offices) MSB Purchases $28,520,000 $13,740,000 $146,199,000 $5,347,000 $1,708,500 $510,200 $465,600 $196,490,300 

CASA DE CAMBIO PUEBLA (9 offices) MSB Sates $0 $0 $0 $0 $0 $0 $0 $0 

CONSULTORIA INTERNACIONAL (4 offices) MSB Purchases $93,425,000 $18,119,000 $73,643,000 $4,887,000 $2,508,500 $17,000 $1,127,900 $193,727,400 

CONSULTORIA INTERNACIONAL (4 offices) _ <0 — $0 


Ail customers in Mexico 
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BANKNOTES-NY Selected Customers' Activity Alerts & Trsders' Explanations for USD Purchases & Sales from 2005>2009 


LCO ravisws currarit & prior eiqjlansiions from trader & dierriafonsiMtfi into nKYCproMn and recant actwity for ontomerand country (fn CBS) to confirm. 

LCO uses independent sources (onmtemel) as needed to validate hformatfon provided try Ifflder(<ouitsm.reminar>ces, trade, economic & political rtews/evenls. FX rates. QBS deal inquiry screaits. etc.}. 
If variarrce (actual vs expected) appears potentially suspiciovs, LCOsriould teaearcfWinvasti 0 ete and r^od actwity accontingiy {internally & ejrtemaRy). 


Country 

Customer Name 

Alan/ 

Revtew 

Dste 

Currency 

Traded 

HBUS 

Safe 

USDEtit^ 
Ainounl 
(in (tnuund*) 

Country 

Risk 

Rating 

Client 

RIak 

(SCC) 

Tradera' Explartatfons S 

Folfow-up Info raguastad/obtainad by Compllanea 

GUATEMALA 

r ‘ - 



Dee-07 

USD 

P 

S1 1.360 

Cautionary 


The financial market in Guatemala waa provert weak and inefficient 
during 2007. and as a result some coneoHdatlon ar>d resinicturing were 
part i}( financial reforms whereby banking sector was reduced. As 
such. Irvfustrtal has gradually increased their USD d^xjslls and 
Oscember/January are typical months ki which family remittances are 
recrived. 

GUATBMU 




Apr-08 

USD 

p 

$16,353 

Cautronaiy 













during May is a dtrset result of Increased tourism in Guatsrrtals where It 
is sIKl reasonably Inexpensive to vlatt. and also directly genetated by 
their cNents in die airlines sector. 

GUATEMALA 




Dec-os 

USD 

p 

$19,970 

Cautronary 


Seasons) increase due to htiidsy period.^^^^^B^^s <ma of the 
largest bat^ks In Guatemala, as such arid due to the (act that they have 
a large brar>ch network throughout the country they receive a greater 
number of cash deposits, esp«clillyifur 1 r>g high peak lourisiand 
hoHday seasons. The bank is also a receptor of USD banknotes which 
dstVes from family lemiitancae which typically increase durtng this 
Mrtod. 




1 








GUATEMALA 





Mey-OS 

USD 

S 

$2,099 

Cauitoriaiy 

see 

New client • Figure is not actuat, applies to reversal ol purchase on 
same emount. 

GUATEMALA 



if 


Aug-OS 

USO 

P 

$7,795 

Cautionary 

SCC 

In Guatemala a mid-year bonus (Bono U) Is given during the month of 
July. Thanhs to This peyment the financial laelor fend 1 o asparlence 
cash Butplitses which generate consumer expeditures in electronics, 













MEXICO 



2 ^ 

O f« 


Jan-OS 

USD 

P 

$16,107 

Standard 


e new ciieni for 1 . 1 s. This time oi the year. Mexico has more 
surpiue In cash than any other time of ihs year to the vast numbers ol 
Mexican visiting relsttvss/famiiy durireg the holiday season. A lot of Ihs 
surplus from the markel comes in to the banks In the early part ol The 

MEXICO 



s i 


Feb-09 

USO 

P 

$20,747 

Standard 


The is a relatrvely new client and the volume level is in line with the rest 
t)l the market rrartlcloants durtno this hme the vesr. 

MEXICO 



era 2 

» 9 


Apr-0$ 

USD 

P 

$25,206 

Standard 


New client, which we have started to operate in duty. 2004. Slowly t»rt 
surely, we ere getting a bigger share of the volume against corT^jeiitlon. 

MEXICO 





Mey^S 

USO 

P 

$19,299 

Stanrlard 


With the increase of clues whore wo make picktfljs lor Bnorle. we are 
slowly bu 1 surely taking away business from compelllbn and 











Incmasino our share. This is part of the marketino efforts. 

MEXICO 




Ocl-05 

USD 

P 

$24,374 

Standard 


Client is slowly moving a larger peremtiage ol their business Irom 
comtMifitlon loHSBf. -riua to better terms. 

MEXICO 




Nov-OS 

USD 

s 

$9,224 

Slandard 


Sales are seasonal for M||||H'v«Ve bean very aggressive in pricing 
against our main compelitw in Mexico, artd have closed additional 
transactions. The volume la wHtiin expectaiiorvs. 

MEXICO 




FeW>7 

USD 

p 

S22S69 

Standard 


The increase in volume is due to tv»o reasons. IJeatly in ihoyear, ws 
tend to see high volume repatriations from Mexico due the end of 
rear/winlef return of Mexicans from the USA 2} Excess USD 
iccumutaled due to no pick-ups from specific branches lor 4 weeks. 
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BAN KNOTES-NY Selected Cuetomors' Activity Alerts & Tf»def»' Explanations for USD Purchases A Salas from 2005-2009 


LCO reviews current A prior axplanalJons from trader & elieni alorrg wifh Into h KVC prnfAes x«f recent artlvHy tor cuettmer end country (In GBS) to confirm. 

LCO u$es indepetidanl sources <on Internet) as needed (o vaBdaie inbrmetion provi^by tredsr (tourism, remittances, trade, economic & pofitfcal newa/evertts. FX rates, GBS deal inquiry screens, etc,). 
If vsrisnce (ecloal vs onpected) appears potentieify suspidous. LCO should rsieareMnvesi'Bate etrd report selfvlty accordogly (intemafly & eirlemafly). 


Country 

Customer Name 

Atart/ 

Review 

Date 

Traded 

HBUS 

Purohaeaor 

Sale 

USD EquIv 

Amourtt 

(WifhouMnd*) 

Country 

Riek 

Retina 

Client 

RIak 

(SCO 

Tradws* Explanatlone A 

FofloMp into requeeterVobteliMd by Compliance 

MEXICO 


Mav4)7 

USD 

S 

$6,100 

Standard 


Doe to the approach ot the holidays (summer vacations) in Mexico, the 
demartd ot USDS Increases ^gnHicantV- Also, our toglstlcel process of 
sendtrtg various couriers to Mexico, on a weeMy basis has given us the 
oi^rtunity to offer a more aRracilve pricirtg to the customer. 

MEXICO 


JuM7 

USD 

S 

$9,000 

Standard 


Due holidays (summer vacations) in Mexico. Ihe demand of USDS and 
Iwolgn currency increaaes slgnlUcandy- Also, our lo^sticai process of 
sending various couriers to Mexico, on a weekly basis has given us Ihe 
opportunity to offer a more attractive pricing to the cusiomer. 

MEXICO 


Now-07 

uso 

S 

$6,500 

Stairdard 


The Increase in s^la Is mainly due to ff>e approach of the Christmas 
season, in which wre begin to see a higher demand ol US to Merdco. 
||||Hi|fcas always requested iiuoies for iHs season from various 

ffreir decision was based solely in the cost. Since mlt^ysar 
we have made loglalical chang^^rfft^nports to Mexico, this hat 
given us the opportunity to olfeia||mP set rate, and as a result. 
w4ian they need to import the omriRutoinatically pieced rSreclIy ivith 
HSBC. 



1 

H 








MEXICO 


on 53 

ST ^ 

s s 

I i 

Sf O’ 

«s 7 


Sep-oa 

USD 

P 

$25,694 

Standard 


had weakened, due to Ihe instability of the USO, The volatIBiy ol MXN 
currency In the last monOi. has ghrsn the local market the opp^nity to 
sen all USD that thvy had acerxnulatad far tha oppoflunity of a batter 

MEXICO 



oc!-oe 

USD 

P 

$59,750 

Standard 


Due to Ihe linancial crisis and tha volatillly of the MXN eurraney. locais 
have setiing USD that had beetr accumuieted tor the oppertuntty of a 
better rale. 

MEXICO 


O rs 
= -0 

11 


Aug-oe 

USD 

P 

$8,995 

High 


Durirrg summer season In Mexico, extorts istkI to decrease as the 
demand of USD locally Is higher due to local holiday seesoh. 

Addinonatly ovemll volume in Mexico is lower than a year ego due to e 
decrease In tourism caused by the ftoaitclal crisis and the swina flu 



” 3 











S' 

3 

Wr 








banknotes business when HBMX stopped accepting banknrtos from 
clients. 

MEXICO 




Aus-09 

USO 

s 

$5.1 96 

Standard 


Not actual sales, entries were cre«ed to reverse purchases that 
needed to be amended. 

MEXICO 


Jan-07 

uso 

P^S 

$fS6M*$1DM 

Standard 


should be US02.068.000 (more reesonebls). There Is one deal on the 
GBS for USD6,7B4,000.- that was a mistake and was reversed. 
Therefwe In GBS you have a Purchase and a Sen for the same 
emount. 

MEXICO 


Har-07 

USD 

s 

$6,524 

Statxfsrd 


mnrfllv rmemtkms . 

ME3(ICO 


Jul-00 

USO 

s 

$3,042 

StarKfard 


lamerAbOjn May, 2006 several branches 

HHlHjill^rhfch were orVy actir^ as servicing branches (only 
received USD), have become luB branches providing the complete 
jwrvlcfl of seUIno and purchase from customers. 

MEXICO 


Ocvos 

USD 

p 

$318,319 

Standard 


have selling USO that fwd been accumulated lor me opportunity of a 
belter rets. 
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BANKNOTES-NY Selected Customers' ActMty Alerts & Trsders' Exptanstlons for USD Purchases ft Sales from 200ft*2009 


LCO reviews cufrenl & prior explanations from usder & diervt atorig «rtlh Mo ki KYC fmfiles and recant sctivtty for customer and country (In QBS) to eortfirm. 

LCO utesindepandent sources (on fntemeQasneededto vahdst* irtlotmatlanpnr^M by irsder (tourism. ramiRancss. trade. ecorKXiile A polltieal news/events. FX rales, G6S deal Equity screens, etc.}, 
if variance (actual vs expectsd] appears potentially suspidous, LCO shoultf rassarcMiwesilgaM and report activlly accordingly (Irttetnally & axiernaSy}. 


Country 


Alert/ 

Aevtew 

Date 

Currency 

Traded 

Purchase or 
SMa 

USD Equiy 

Amovnt 
(In emaate*} 

Country 

RIak 

Rating 

ClhHil 

RIak 

(SCO 

Tradara' EapUnatlona & 

MEXICO 

1 'V \ 

Aor-OS 

USD 


$1,077 

High 


Fioure Is not actual - a reversal of a purchase of $t .076,000. 

MEXICO 

\ 

May-09 

USD 

s 

S1.22C 

High 


Figure Is not acuM. appliee to a reversal of a purchase on the amount 
of S1.215.2t)0.00. ar>d various CTFs off-sets deals. 

MEXICO 

X *<51 x 

Jul-0» 

USD 

s 

$1,326 

Hl^ 


Not a live dsal, transaction was created to reverse traife B0907003350, 
client reoorted irworrect amounL 

MEXICO 

w ^ 

\ 4^ X 

Aue-d9 

USD 

p 

$t22.9W 

High 


During summer season In Me>^. exports terKf to decrease aa the 
demand of USD locally is hr^er due to local holiday aeasott. 

Adefitionaity ovemR volume In Mexico la lower than a year ago due to a 
decreasain tourism caused by the finertcial crisis andihe sMrte flu 
slluBlion in BWs courttry, 

^ piesme in the local markal artd 

sktee H8MX stopped sccepting loieign ciffrency from their clients, they 
were Bt4e to capture part of this volunte - compensating the overall 
decrease In total aurplire (tom Mexico due to drop in tourism and family 
ramlltancas. 



Mar-os 

USD 

s 

S5.SIS 

Standard 


Ravenial Deals. 



od-oe 

USD 

s 

S7.airl 

Standard 


This is n rtrvetaai dsal to correct a buvdeal iflotri error. 

MEXICO 



USD 

s 

$7,678 

Standard 


The Sales volume is rtpi actual activity, but. rather reversal of deals on 
the systam due to change in shipment dalas'ertd or denominations. 

MEXICO 

CASA DE CAMetO PUEBLA $A OE CV 

Pa»-oc 

USD 

p 

$IB.337 

Standaid 

see 

Tht Is a relatively new client and the vokime level is in Hne with the rest 
ot ihe maikel partieipantt duilrtg this time of the year. Furthermore, our 
pricing and vahia dale etruaure has knprovad (he cllsnn ablllly to 
compete eggressively. 

MEXICO 

CASA OE CAM8IO PUEBLA SA DE CV 

MarOS 

USD 

p 

$24,595 

Standard 

see 

kVe commenced business with tNs name on November 2004, the 
monthly average Is not the True 12 month averaga. Our barter pricing 
and more coAeetion points is landing us more business versus 
comoeUtion. 

MEXICO 

CASA DE CAMBIO PUEBLA SA OE CV 

Octets 

USD 

p 

$27,746 

Standard 

see 

The volume is consistent with our expectations. We have also 
commenced business with their Cancun branch that is translating 1o 
more busmeas. 

MEXICO 

CASA DE CAMBIO PUEBLA SA OE CV 

NOV-OS 

USD 

p 

$35,092 

SlarKfard 

sec 

Increase due to additions coKecdonfrom 3 diriermi 
locallons/branches. 

MEXICO 

CASA DE CAMBIO PWEBLA SA DE CV 

Feb-Oe 

USD 

p 

$38,742 

Startdaid 

sec 

This volume is <kje to two reasons. Ijearlyiniheyear. we tend to sea 
high volums repalriationa fiom Mexico due die end of yeaoVrinter return 
ol Mexicarta from the USA 2} Client Is slowing growing its business 
volume as a result erf bener cash (low thanks to dealing wlih HSBC i.e. 
faster turn around <rf banknotes. 

MEXCO 

CASA DE CAMBIO PUE^ SA CV 

Mar-0$ 

USD 

p 

$53,90! 

Starxlard 

see 

Clleni Is slowing growing its buskiess voKirTte as a result of bsRer cash 
(low thanks to dealing with HSBC I.e. faster turn around o( banknotes. 
Client has aiao captured more bustnese ikie to other participants 
disconi'nuBtion of bu^ness 

MEXICO 

CASA OE CAMBIO PUEO^ SA OE CV 

Apr-Oe 

USD 

p 

$54,206 

Standard 

sec 

With HSBC, client gats credit same day as pickup In Mexico wN^ has 
Improved tfisir cash flow. In turn, they are passing part of the savfrtgsto 
Ihetf client by givkig their clients same day value too. As a tesuRed. 

CCP Is atuacilng more business from the corporate cNents. 
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BANKNOTES-NY Selected Cuitomerm' Activity Alerti A Trader*' Explanations for USD Purchase* & Seles from 2005*2009 


LCO rsviewi current & prior expfenalions from trader & client aiong wiSt Mo in KVC profiles and recent aciViiy for customer and country (In GSS) to confirm. 

LCO uses (ndeperrdent smjrces (on Internet} as naededto vBlIdatetrttormatlim provided bytradar (touifun, remlllartcea. trade, ecortomte & political rtew^evems. FX rates, GBS deal Irtqulrysctaens. etc.). 
If varisrtca (actual vs expected] appears polenilaRy auspicious, LCD should resMrcMnvesligaia and report aclKIly accordingly (internally & externally}. 


Country 

Customsr Nam* 

Aleity 

Review 

Dste 

Currency 

Traded 

HBUS 

Pufchaae or 

Sale 

USD Equiv 
Amour* 

(kr eieuaaid^ 

Country 

Risk 

Rating 

Client 

RlaJt 

(8CC) 

Tradere' Explaiwtione & 

FofiovMp Info rsqueeted/obtained try Complltnc* 

MEXtCX) 

CASA DE CAMBIO PUEBLA SA OE CV 

Sep-06 

USD 

P 

$76,569 

Standard 

see 

Mexico as a whole and mors ^eclficatly CCP is the premier 
couniry/msb USD rerrrittar. There Is an large pr^lelion of Mexican's 
woridng in the U.3. durfrrg ttre summer mondis (landscagtring) that send 
money back home (raligiouily} to their famHIee. 

MEXICO 

CASA OE CAMBIO PUEBLA SA DE CV 

Mar-07 

USD 

P 

$113^67 

Standard 

see 

Part of the vtiuma Increase for fills name is the end resutf of SerfA ntx 
saividng MSB's • which has fneroased the wallel size for other local 
payers. In uMifion. Torre Ma)s»r branch which opened forbusinees 
operations in lata January had eaphned mora business due to atralegic 
location. 

MEXICO 




Mar -06 

USD 

P 

$19,300 

Standard 

see 

(Client Is sNfiing volume previously ^ven to corr^tltlcn, 

MEXICO 




S«p<l« 

USD 

P 

$26,700 

Slartdatd 

see 

This is a new dienl that has BN relationship with compelifion. Our 
aooresatve oiidna and exceRenl ser^ce Is landino us more volume. 

MEXICO 




Otc-CS 

USD 

P 

$45,859 

Standard 

sec 

Bank of America has terminated their relationship with ail MSB's. As 
such, we are gaining more share of Ihe watlat inflh Wachovia in various 
cities In Mexico. 

MEXICO 




FaO-07 

USD 

P 

$69,797 

Standard 

sec 

They have begun to operate 2 additional branches. In addilion, 
vnhimes are wUhin the exneelaHons dua to the season. 

MEXICO 


1 

« 



USD 

P 

$74,429 

Standard 

see 

In comparison of June 06. we have begim to operate 9 additional 
branchsB. OOL (Mid June OS, Leon, Lsi* December 08 and Cencun. 

Mid December 08). Also, Client is elowlngehtfllng their complete 
businese to H8BC, which wee ortglnalV ehered with BORA. 

MEXICO 


V> 9 

e n 


AU947 ' 

USD 

$ 

$1,800 

Standard 

see 

As a result of our new structure In wfMdt we are seru^ng the values via 
airfreight, allows us to del'tyaryany day ol the week, versus file ortginsi 
scheduled vfiiich was once a week (via courier), we have bOM able lo 
capture Ihe melortlv of their business. 

MEXICO 


3 o- 

Si' ^ 

S - 

0 ? 

1 “P 

i| 


Oct-07 

USD 

S 

$6,000 

Standard 

see 

The USD sales increase Is a combination t* two factors; (1) American 
Express has slopped sellktg T/C‘s to CC'a In Mexico, they only sell 
them to banka, and CC'a can not puiohasaT/C's from banks. Nrmiafly 
CD's would spnt their local sells, in cash and in T/C's. due to this 
situation; their ctients are rmUrely purchasing cash. As a result (hair 
demand for USD has increased. {2} Our new log'tstlcal structure In 
which we Bia sending Ihe values via eidrelght. afiows us to delivery any 
day ^ the week. 

MEXICO 

C 

(TO " 

H 9 

S’ 

a 


Mv-06 

USD 

S 

$2,000 

Standard 

see 

Due 10 the hoHdays (Holy Week M Mexico during Match) demand for 
USD Increases signlHcanfiy. Mao. cUeni has Ihe advantage to order on 
a daily basis, versus scheduled days (Tuesdays and Wednesday), 
which has given them more room to negotiate s^ to their focal cHenta 

MEXICO 

C 



Apr-OS 

USD 

s 

$6,000 

Standard 

see 

Due to the heydays 'Spring Break', the demand lor USD and EUFIO 











have MTiprcwed our operational alructure and have been able to prav'xfa 
the customer a mom atiracfive schedule and pricing. 

MEXICO 

c 

i! 



dul-OB 

USD 

s 

$7,000 

Standard 

see 

Due lo ihe high season (summer vacaliona} the cash demsnd 

Incmases sionlficanilv in Mexico. 
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BANKNOTES-NY Selected Customers' Activity Alerts & Traders' Explanations for USD Purchases & Sales from 2005-2009 


LCO reviews current 4 prior enplanaiiofu frorr* Ireder 4 dieol elong wISi Mo in KYC pralHes end recent activfiy tof cuelomer and country (in GBS) to contlrm. 

LCO uses indepertdent sources (on interne!) as needed to valldaie iniorrnaUon provided by trader (toortam. remrltancaa, trade, economic 4 poiHical newafeveno. FX rates. GBS deal Inquiry screens, etc.). 
If variance (actual vs expected) appeers potantla»y auspicious. tCOshooB fBaearchfirwasOgats and report activity aeeordIngV (intemalty 4 externally). 


Country 

Customer Nems 

Alert/ 

Review 

Oete 

Currency 

Traded 

HBIIS 

Sale 

USO Equiv 

Amount 

thownOs) 

Country 

Rteh 

Rating 

Client 

Risk 

(SCC) 

Tradcra' Exptanatiorui 4 

FoltowHTp Into raquaetedfcAtalned by Compliance 

MEXICO 



Oct-OS 

uso 

P 

S55.261 

Starxtard 


Due to the (inarndal crisis and the volatility of the MXN currency. locals 
tave sellir>9 USO that had been accumuleted for the opportunity of a 
belter rate. 

k«xk:o 


Dec-os 

USD 

s 

53.500 

Standard 

see 

Seasonal trtcrease due to holiday period. Mexico has hislcmcaily 
ordered USD and EUR during hikday periods for traveling purposes. 

MEXICO 




feO^Ot 

USO 

p 



$57,033 

Standard 

SCC 

The increase in purdiases fa due to two reasons: 1} Beginning January 
1. 2009. HBMX stopped receltring USD cash and we have begurt to 
receive higher vr^umes of USO cash from our local elienu kt Mexico. 

2) ElfectMo March 31, HSBC wiS exit the Bankfiolas relationship with 
CIS, end as a direct result they have been collecting their entire surplus 
From other locations to relieve th^ Inveritory for tfris dale. 

MEXICO 

MEXICO 

MEXICO 

MEXICO 

MEXICO 


I 

II 

^ 73 

ft 

S 7 

II 

re ^ 
o r« 

11 

on 2 
» 3 

o' 

9 


Apr-OS 

USO 

p 

$6,342 

Siartdacd 

SCC 

Client is slowly growirtg its business vtriume as a result of better cash 
now thanks to dealing mrith HSBC I.e. faster turn around ol banknotes. 
Client has also captured more business due to other participants 
discominuation of buskiess 


Mar-07 

USO 

p 

$10,223 

StarKla/rt 

SCC 

Part ol the volume Inciesaa lor this name is the end result ot BofA not 
servicing MSB's which has moeased the wslisl .tize. AddltlonBl volunte 
was received from 

to sale their OSD exceee to HBUS durtn^QT^ 


Mey^tr 

uso 


$4.0CIC 

Standard 

SCC 

Due to the approach ot me holidays (summer vacations} In Mexico, the 
demand of USDS artd foreign currency Increases significantly. Also, our 
logistical process of sending various couriers (o Mexico, on a weekly 
basis has given us (he opportunity M offer e more altracflve pricing lo 
the customer. 


Oct-07 

uso 


$8,200 

Standard 

SCC 

The USO sales increase Is a comblnelion ol two factors; (1) American 
Express has stopped eeWng TIC's to CC's in Mexico, tfiey only sell 
Ihemlo banka, end CC'a can not purchase TJC's frwtt banks. Normally 
CC's would split their local sells. In cash arxJ ki T/Cs. to this 

situation ; their clients are entirely purchasing cash. As a resdt (heir 
demand for USO has increased. (2) Our new logistical structure In 
which w« are sending the values via airfreight, alkrws us to delivery any 
day of the week. 

MEXICO 




Apr-OS 

USD 

8 

$7,000 

Standard 

SCC 

Increases tlgnificanrty, locals tend to do kilsmatlonal reurism. Also, we 
have improved our t^eiallonal ttnrcture and have been able to provide 
(he customer a more aitractive schedirie and pricing. 

MEXICO 



SepCS 

uso 

P 

$3,778 

Sttu^rd 

SCC 

due to a eompMa restructure of ttieir diertt portfoBo. Total volumes In 
Mexico are increasktg due to (he kitemadonal ilrrancial crisis and 
consequent devaluetion of the Mexican Peso. The volume for Intercam 
is 26% lower (hen same month last year and die iircreese when 
comparing wllh the 12-Mo averaged Is explained by the general 
increase of the volumes irt Mexico, partJeufarfy if we have in 
conskfenition that US02.1MI were purchased on SepterTTber 30ih. 
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BANKNOTES-NY Selected Customers' Activity Alerts & Traders' Explanstlons for USD Purchases & Seles from 2005*2009 


LCO miews currant S prior utplanationa from trader S cKeril along wriSi Mo h KYC profilae and recent aclMty for customer and countiY (In G6S) lo confinn. 

LCO usesfndependent sources (on Memet) as needed to validate MoirrMion provided by (laderdourfsm. reminances, trade, economic A poStlcal ttewa/svents, FX rates. QBSdeat Irtquliy sereetts. etc.}. 
It vailarKe (actual vs expected} appears potentially susplcjous, LCO should issaarctVIfweslioade and report activity accoidkigly (intemelly & extemaDy}. 


Country 

Customer Name 

Men/ 

Review 

Date 

Currwey 

Traded 

ybu& 

Purehaee or 
Sale 

USO Equiv 

Amount 
(In etewaanda} 

Country 

Risk 

Rating 

Client 

Rtek 

(SCC) 

Traders' Explanationa & 

Foltow-up Info requestedfobtalned by Compliance 

MEXICO 


Oct-«s 

USD 

P 

S12.614 

Standard 

see 

Dus to Ihe firxancial crisis and the volatility of the MXN currency, locals 
have seTirig USO that had been accumulated tor the opportunity of a 
better rale. 

MEXICO 


Oec-O* 

USD 

P-fS 

$fOM«$SM 

Standard 

SCC 

Purchases: Client s<M excesa cash of elmosc $5Mio on 12/31 to dear 
nvenlory at (he end of the year. 

Sales: Seasonal increase due to holiday period. 

MEXICO 


Feb-09 

USD 

P 

$8.9S2 

Standard 

SCC 

The increase in purchasee is due to two reasons: t) Beginning Jartuary 
1.2009, HBMX stopped racelvtng USD cash and wo have begun to 
recelva higher volumes of USO cash from curtocelcfienta In h^xieo. 

2} EHective March 13, HSBC will axil the Banknotes relationahip with 
tnleream. and as a direci resutl they have been collecting their entire 



1 








W-l-'.-ll-l— llv.ilw lU 



1 


Mar-os 

USD 

P 

S3.63C 

Slandart! 


dinni. which wn have started lo ooeraie in January. 20QS. 



1 


AurHIS 

uso 

P 

S10.69< 

Standanl 


Vew client, voiuma Is within expectations. 

MEXICO 


H 

^ 3= 

2 & 


Jaivos 

USD 

P 

J5,1I2 

Standard 


In 2UU/ Vftvani under a lesiructure when adding an addrlionaHHi 
branches to their network, natlomitde. At that Hma. they were supplying 
a8 Ihe new branches wflh the surplus of Ihe Main Branch. This process 
has finalised and completed, we have begun to receive their eniira 
banknolet sumhis. 

MEXICO 


g a 

S'? 


Mayri» 

USD 

S 

*2,000 

Standard 


This pertlcuiBr dlent always request quotes trom various Banks, end 
wHI close transection considering the following; day of dellveiy and 
loviwtl bldtfer. Transaction was closed considering that w« were able to 
consolidate sMpment will other banks end oHered an atiraeilve quote 
which was accepted. 

MEXIICO 


9 (• 

= 3 


Nov-Oe 

USO 

P 

*6.428 

Standard 


Due to the iinancial crlsfs artd the volatilily of the MXN currency, locals 
sold USD that had been accumulated for the opportunity of a t»ner 
rate. 

MEXICO 


s i 

ST. 3 

(TO »» 

ce a 

S" 

a 


Jsn- 0 » 

USD 

P 

*11,220 

Standard 


As of January 1, 2009 HSBC Mexico rrsnagemenl announced that the 
bank would no longer receive USD cash deposH^^m formaL As 
such, other banknote ckenis In Mexico, Inckrdln^^BiegBn to collect 
oart of the cash surplus In the local market. We will conduct a new 
voiurna review In order to update ths KVC with rnore realistic values. 

MEXteO 




Au9«9 

USD 

P 

$3,600 


SCC 

During summer season in Mexico, exports land lo decrease as the - 
demand of USO iocaBy Is higher due to local holiday season. 

AdditionaHy overah volume In Mexico is lower than e year ego due lo a 
decrease in tourism caused by (he financial crisis and the swine fiu 
silMfioj^ this courrtiy. 

■HHWs currently openmg new branches and aggressively (nirsuing 
more busirreas that has led it to grow Its verfume in comparison to the 
3851. We ate also told that they are giving HSBC more of its business 
than BofA. 

MEXICO 


Sep4)9 

USO 

P 

$8,326 

High 

SCC 

(jimilllllllll^ cunently opening new branches and aggressively pursuing 
mo^Tusmess that has lad It to grow its volume hi eorriparison to the 
past. We are bI» told that they are giving HSBC more of hs buslnese 
than BolA. 

PANAMA 


Apr-OS 

USD 

P 

*2.600 

Cautionary 


This is a new dient since June 2004. The volume Is within out 
emectations. 

PANAMA 



USD 

P 

*3,500 

Cautionary 


We sterted lo do business wt8» them in mid-June. 2004, The volumes 
nre vrith our nxrrrictation 
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BANKNOTES-NY Selected Customers' Activity Alerts & Traders' Explanations for USD Purchases & Sales from 2005*2009 


LCO wiwfs current A pdor explanations from trader A efiert along wth info In KYC pioflias and racaoi aerify for customer and country (In GBS) M confirm, 

LCO uses irtdependent sourtas{on inlemat) as neadod to valicJaielnionfBeonpiwMed by trader (tourism. lemlHartces, trade, economic A polittcrt newa/events, FX rales. G0S daalirKiuiry screens, etc,). 
If variance (eciua! vs onpecied) appears potenflaHy suspicious. LCO shoiAl resMicMrtvestigate and report acilviiy accoidirtgly (intwnslly A externally). 


Country 

Customer Name 

Aien/ 

Review 

Dote 

Currency 

Traded 

Purcheae or 
Sale 

USD Equiv 

(InHMWMnd*] 

Country 

Risk 

Rating 

Client 

Risk 

(SCC) 

Traders' Eiplinatlona S 

Followiip info requeetedfobtalned by Compflence 

PANAMA 


■itn-Ct 

USD 

P 

$1,400 

CeuUonaiy 


imHIHK lutd been shartr^ the banknotes business between BNP. 
and HSBC. We have (rfjtained 100% of the business. 



Mar-oe 

USD 

P 

$t.80C 

Ceuiionarv 


Volume within exDecied levels 

PANAMA 


Mey -06 

USD 

P 

$2,650 

Ceutionery 


On Vie average the bank exports two times per month, however during 
Mav 2006 they had residual cash from the previous month. 

PANAMA 


Nov-06 

USD 

P 

$2,050 

CauUonary 


Accumutated volumes from October, which vrhere tx>t repatriated due 
to local htriidavs In Panama. 

PM4AMA 


Feb-07 

USD 

P 

$4,750 

Cautionary 


On the average the bank exports two times per month, however during 
February,2(507 they had residual cash from the previous momh. 

PANAMA 


AU9-07 

USD 

P 

$5,660 

Caulioriary 


m^IPPkvas sharing business with BNP ^/..and the remaining 
■with HSBC. They have began so repaitlaie tfie 100% of their business 
with HSBC. VolumM within ewacbitions. 

PANAMA 


I 


Jart-OS 

USD 

P 

$7,050 

Cautionary 


imHwas sharing business wdch BNP 30%.Bnd the remaining 
70%wfth HSBCbymld July 2<307 they hevB began to repatriate 100% 
of their business with HSBC. In addition to this.s is Ihe Oiistinas 
Season, which we normatly see the rapelrisfiort by following month 
iJanuerv). 

PANAMA 


^ as 

e 7 
? & 
s ■ 

? a 


Apr-OS 






mainly based upon our itinerary changes on shipmentsfron^a^a. 
Ws hod exponed the last day ef the prior month, but 
normally exports on a weekly basis), was not ready (or export the Iasi 
week ofMsRdi. raoorlirrothe tat of Aoril. 

PANAMA 


2 <s 

3 a- 


Sep-09 

USD 

P 

$2,140 

Caullonaty 


Previousiy^i||||§was (tot only a Banknotes cfisni, but also was used 
ss a local providwfQrHBUS In Panama. HBUS was vaultir>g other 
ellent'a values facities • until the day of ihe exports. TTtis^^ 

gave us the opportu^ lo collect practically on a deify basis fo^P||||||||| 
facilitated them with Issue of the local sisurance. once the 
shipment was cotlecied from their facilities In was within the HBUS 



cmianent 

investigations 








insurance and vaulted of th^my|Hl''SuR. After the decision o^^^p 
toseHall their USD excess to BNP, they also exiled the setvic^^^ 
vaoltino for HBUS. This has aflected tramendously our banknotes 
business MttM||||||||||||M in the past would report Iram 2 to 3 

times a woek^^RSS^^^rtly report the day prior lo the shipments, 
vdik* is done of«ce a week. As a result weVe began to sea a decrease 
of volums *roiT^|^|^||||||||||||||||P 

PANAMA 


Apr-OS 

USD 

P 

$3,640 

Cautionary 


We have resumed to trade with il>mmbraitul>S!iice the beginning 
of 2005. hence the Increased vokirn^BN Profile will be updated during 
review. 

PANAMA 


May-05 

USD 

P 

S3,Z55 

Cautionary 


The increase Is due us making collection at ti>«iHIIBIrse Trade Zone 
branch i.a. we have added another locatiorVbianch to make pickups. 

PANAMA 


Aug-OS 

USD 

P 

$3A50 

Cautionary 


increase due to additional collection from a dllterant locatiorVbranch. 

PANAMA 


Oct-OS 

USD 

P 

S4.300 

Cautionary 


conscious effort by the bank to keep an optimum inventory and avoid 
additional costs of funds. 


76061,162 
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B ANKNOTES-NY Selected Custotners' Activity Alerts & Traders' ExplartaUona for USD Purcheses & Sales from 2005*2(X}9 


LCO rBvfewsojrrem& prior explanations (rom trader Sdlent along wlh Into in KYCpiofiles and (Kent activity for customer and country (in GBS) to conflnn. 

LCO usesinrfependsnt sources (on intemet) as needed to validate information provided by trader (tourism, mmlflancea, trade, economic & political rteMCevanls. FX rates. GBS deal lru|uiry screens, etc.!- 
If variance (actual vs expected] appears polen^aHy suspicious, LCO should reiaatchrinvasligate and report acilvlly accordingly (intamally & exiamally). 


Country 

Customcf Nsrrw 

Alert/ 

Review 

Date 

Currancy 

Traded 

Purettaaa or 

Seia 

USD E(|UiV 

Amount 

(tnewuMW*) 

Courttry 

Riak 

Rating 

Ciimi 

Rlak 

(SCC) 

Tradtra' Explanatlona A 

Foltowmp Info requeatedlobtalhed by Compliance 

PANAMA 


Fab^fi 

USD 


$3,600 

Cautionary 


The excess in purchases is due to two reasons: (1) Seasonal (carnival), 
we land to see an htcrease oi volumes during this season due to 
tourism; {3)d|||||||Pl<as added more corpomte ctionta to their 
poittoTro and as result we have begun to see ihe tnereasa In the 
expQtuJjjHmiPeiqMndad their business with corporefe clients In 
the glHKee^ide Zone. These corporate clients are oriented lo the 
retail business oi any kirrd of products (perlumea. toys, elecironles, arc] . 
Moreovar, the European tourism is havlrtg a strong purchase power. 
Increasing MgrtiTicantly the convnerdet activity in the FTZ 



Mar-05 

USD 

S 

S1.»9( 

Cauiionarv 


nnvenMl Denis 

PANAMA 


Aug-05 

USD 

P 

$18,550 

(Uutionaty 


Because oi a strong maritatirrg slrategy.SVlies been aUe to expand 
the local elieitt base, Increaslt^ tha repatriation ol Bank-Notes. 

PANAMA 


I 


Sep-05 

USD 

P 

$24,755 

Cautionary 


WHhln our expectation, client had tnlormed us ol their loctri marketing 
strategy. They ara latgel'ng more client locaiy with aggresslva terms 
lj>. making ejections from major relal outlets at no feae. This is 
landuto them more vr^ume. 

PANAMA 




Oec-OS 

USD 

P*S 

$2SM 4 $7M 

Caubonary 


The increase is due to an additional collection at ihel|Hmrea 1 rade 
Zona bran^ i.e. we have edded another ktcatloivbranch to make 
nickuDs. 





Mer-05 

USD 

s 

$2.0S( 

Caubonatv 


Reverse deal to modllvoriclno 




Mav^ 

USD 

!$> 

$2,065 

Cautionary 


Reversal deal no B060500S5B3 to correct deal Incut 





Oct-os 

USD 

5 

$16.e3C 

CauUortarv 


This Ka mvenaridnal tocorrectabuvrltMlinout error. 





NowOt 

USD 

S 

$3.64C 

Cautionary 


Reversal deal 

PANAMA 


£• O’ 

S - 

e ? 

» -0 

II 

n 2 

o' 

a 


Oct4)0 

USD 

P 

$3,925 

Cautronary 


Previous lyJllllll was not only a Banknotes ctrent • but also was used 
as a local ptoSaer tor HBUS in Panama. HBUS was vaulting other 
dlartl's cash A valuablea in Hfj^tacHliles • until the day erf the exports. 
This gave us the opportunity to collect practically on a dally basis for 
Muttibank, Inc. This laclliteted them with local ktsursnee, orne the 
shipment was collected from mel^dtltres R was witNn Ihe HBUS 
insurance and vaulted ot the^HH^Bult. After the decision olimH 
to sell ail their USD excess to BNP. they Mso exrfed the servkw of 
vaulting for HBUS. This has affected liBmBTtdously our bankrwtes 
business vdtitflHHHBBfr P^til they vAulcl reoprl from 2 to 3 
limes a week but now can only report Ihe day prior to the shipments - 
which is dotte once a week, As a resuH we’ve began to see a decrease 










PANAMA 


Apr-05 

USD 

P 

$1,635 

Cautionary 


This la a new dieni trfrtce May 2004. The volume of April is in line wlUt 
our expectation and the 12 month average on this table is not e correct 
renecifon of Its montWv averaoe. 

PANAMA 


Sep<tS 

USD 

P 

$3,035 

Cautionary 


^HHHhad bew deviating slowly in the past months their 
repatrfatlon from, BNP to HBUS. We have obtained 100% ol the 
business. 

PANAMA 


Oae45 

USD 

P 

$2,755 

Cautiwary 


We have obtamed 100% ot their business since October 2005, 
volumes within our eweetations. 

PANAMA 


Oct-06 

USD 

P 

$3,129 

Cautronary 


On the average, bank Is eigiortlng weekly, however during early 
October, thev had residual cash from the orewous month. 

PANAMA 


FeMS 

USD 

P 

$4,350 

Cautionary 


The increase that we are actually seeing Is mainry to Ihe Camiva! 
Season (tourism), In which we lertd lo see an Increese in the volumes. 


76061.163 
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BANKNOTES-NY Selected Customers* Activity Alerts & Trsders' Explartatlons for USD Purchases a Sales from 2005-2009 


LCO reviews curreni & prior explanations (ram trader & dlent etong wiffi mto h KYC profites and rvcant scflvHy lor customer and country (in GBS) to confirm. 

LCO uses Independent sources (on intamet)asneededtova(id8(einfoRMtionproviMby(mdef (tourism, rwriinancas, trade, ecorwmlc & poMical rtaws/eveMs, FX rales, GBS deal inquiry screens, etc.), 
it variance (actual va expected) appears poteniiaity suspicious, LCOsftould mearcMnvesfigete and lopoft activity accordn^ (internally & exlemany). 


Country 

Customer Name 

Alert/ 

Review 

Dsts 

CunrarKy 

Traded 

HBUS 

Purchase or 
Sale 

USD Equiv 
Arnoum 
(In UieuMnde) 

Country 

Risk 

Rating 

Ciiant 

RIak 

(SCO 

Traden' ExpiarwtlMts A 

PolleviHtp info requestod/obUilned by Compliance 

PANAMA 


Apr-OS 

USD 

P 

SS.030 

Cauiionaiy 


The volume Is not correct; we had to modify a deal in order to catKal an 
c^ration. The actual volume of the Purchases: USD3.8MM. 

PANMAA 


May-os 

USD 

P 

S4,640 

Cautionary 


This year dre busirtess acUvity from the^HKree Zone has been 
stowly Increasing, as a result the surplus of USD will Inciease as well. 

PANAMA 


Oct-08 

USD 

P 

S6.71S 

Cautionaiy 


The excess in purchases due mainly^^h^ddrllon of added tmore 
eotporaie clients (wholesalers based Irimitpree Trade Zone) (o their 
porttoVo and as result we have begun to sea die increase in the 
swohs. 

PANAMA 


Oct-09 

USD 


S6,64D 

C3aul<onary 


Although the PanBmanjjryjiatitel has become a challenge for the 
Banknotes business.^||HH|hes been one of the few Banks in 
Panama that have continued to export die 100% of tha excess USD 



1 

a 

(£) so 

V S. 

S " 

3 7 
g Q. 
zr w 
7 

Z ^ 
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fact that HBUS will not s»o^jniJ^w reach a minimum amount to 
covar our fixed cost, anddi^HBpald the cash ona week from 
prior month, in onSer ki ship thru us. Average haa been consrstent 
dutina 2009. 

PARAGUAV 



Nov4)5 

USD 

P 

SS4,S0D 

Caubonay 


Increase Isdue tofhemodificationB’ol die tsx regulaltoni ol Paraguay, 
for the sector o> pennABi computers araf related components tha tax Is 
exonerated from 1 1/1/2006 to t2/31/2005. We have learned (hat 
clients have decided to sell aB Ihe USD excew to the local banks 

Instead of the house exchenoes. 

PARAGUAY 



May<0S 

USD 

P 

S76,590 

(3aut>onaiy 


The increased volume was driven by Ihe increase ol activity of 
corporate cneni^nom^r^ales at eieeirontcs, computer software 
and hardware. 

obteiimtOanknoias businees from the corporate sector. fllHHi 
HB^Hked reported to conduct banknotes business widr 72 
Peragus^m Corporations generating the USD^ars and loreigrt 
cuTToncv banknotes surplus. 

PARAGUAY 


S 5 
“ a 
« «* 
ts a 


Dm-O? 

USD 

p 

$77,00C 

Cautionary 


Starling in December we increased our lirghl's frequency, from one to 
three flights per week. This aHowod our clients to krprpve their caeh 
flow and be more aggressive, ktcreaslng the toial volume of the 
business. 

PARAGUAY 


s 


damOS 

USD 

P 

$8,800 

Cautionary 


The vcrfumo is witWn flio erd/ecled range during this lime erf the year. 
Hfstortcaily, we have seen more cash in the madret from banks dus to 
holiday season Stopping. This cornes back to the bank for llquidatkMi. 









PARAGUAY 



USD 

p 

$3,260 

Caultonary 


In line with Monthly Trade Volume Estimates. They shipped in January 
part ol the cash th^ collectad during December. That's why when you 
compare Dec-W Ve Oec-OS you see a reduction in the USD acUvity but 
an increase when you compare Jan-07 Vs Jan-06. But overell activity Is 
about ffte sama. 

PARAGUAY 


Jwl-07 

USD 

P 

$2,652 

Cautwiary 


HHjHjllll^^HBras some voiaiiflty in the mondtly volumes but rfiese 
^ura^lr^On^^h monthly trade vdumes esttmales. Currently the 
main reason lor the surplus of USD in Peraguey Is due to lourisla 
comktg from Poi do Iguazu, BrazH and Puerto Iguazu, Argentina; going 
to Ciudad dtrf Esie for shooolna. 

PARAGUAY 



USD 

P 

S4.eoo 

Cautionary 


Starting in Decerrrfjer wo increased our flight's Iroquaocy. Item one to 
hres flights per week. TNs allowed our clients to Improve their cash 
flow errd be rrrore eggreastve, increasing Ihe total volume of the 
business. 


page 9 of IS 
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BANKNOTES-NY Seteded Customers' Activity Alerts k Traders' Explanations for USD Purchases & Sales from 2005*2009 


LCO reviews currant & prior explanations riorrt traders cBerttalongwM) Infci’nKYCproiaM and recent activity (or cuaMnrerand country (ki GBS) to coniitm. 

ICO uses independml sources (on mtemst) as needed (o validate jnlarmatlonpronM by (radar (toirnsm. rernttancea. trade, economic & potliicat newafavents, FX rates, GSS deal Inquiry screens, etc.}. 
H vsrUnce (actual vs expected} appears potentially suspicious, L(30 should reseaicfi/irtvesligaia arrd report activity accordingly (Intemsily & extamally). 


Country 

Cuatomer Name 

Alert; 

Review 

Date 

Currertcy 

Traded 

HBUS 

Purcheaeor 

Sale 

USDEquiv 
Amount 
(hi OteuMna*) 

Counhy 

Risk 

Rating 

Client 

Risk 

(SCC) 

TratSera' Explanallona & 

Followsip Info requaatodlobtalnad by Compliance 

PARAGUAY 




Nov-Oe 

USD 

p 

$4,900 

Cautionary 


USD vtriumes In Paraguay are seasonal and ihats why the monthly 
volume was higher than average. Additionally, as a way to improve their 
liquicfity. this bank reduced the charges lor accepting USD from the 
retaH sector and Ihareiore they were able to kicraasa the total amount 
of deoosits In their USD accounts. 

PARAGUAY 



DeoOS 

USD 

P 

$11,500 

Caudonaiy 


Ourir>g (he last law rTionths.H||lfl|||||||||||||^ kesfMng a larger 

Inventory ot USD notes tharrusSSul^^Jaylo Improve Iheir liquidity. 
Thev are cumendv exnnrdno thek surti^. 

PARAGUAY 



JarvOS 

USD • 

P 

$21,200 

Caullonary 


During the last lew promolli^ new 

USD deposits by krwedng ihe chargess to their clients lor deposits In 
Idteign currency, they in^ement this strategy as a way to improve their 
lioulriiev Dosftiffli. 

PARAGUAY 


■■ = Redacted by the Permanent 

Subcommittee on Investigations 


Oct-OS 

USD 

P 

$1.0S0 

Cautionaiy 


In PataguaywB are observing a shift in the banknotes business where 
HRIs taking (ha place o( the USD and at a market level. Total USD 
volume Ns sianificant tower. 

PARAGUAY 



Jan-OS 

USD 

p 

$6,150 

Caullonary 


Thevolumelswithin the expected range during this time ol the year. 
Historically. «w have seen more cash in the market from banka due to 
holiday season shopping. This comes back fo Iha bank for llquldaiion. 

PARAGUAY 



oct-oc 

USD 

P 

$2,285 

Caullonary 


The benknoles volume decreased is due to the loss o1 maikel share ol 
Ihe eeipoislB sector. Corponts clients decided to transfer bank activity 
^^P|»g^jm|j|gj|j|g|Wftj^6rtalnty of the closing of 

PARAGUAY 



Feb-«7 

USD 

P*S 

S3M * $2M 

Cautionary 


The USD SALES were not ah actual sMi. it was a reversal deal made to 
modiiy an operation. The actual volume was USD purchases lor 
USO1.OCX3.0O0.. 

PARAGUAY 



Feb^ 

USD 

P 

$13,668 

Cauliorrary 


The slightly higher suiplus is from the market due to kicreBsed 
commerce Irwn tiaveters end buyers from the region coming to Culdad 
de Este Id purchasea etecbonic goods. The cemivat season in Brazil is 
a Ikne when Brazilian lake ehort trips to Ciudad de E^e tor sHoppk^. 

PARAGUAY 



Mar-os 

USD 

P 

$13,995 

Cautionary 


The volume is in ikie wittr our expeciationaggpivieu new Corpotal^^^ 
CTenUComputersar^ejeclrania^^acenyw^JJeh^Qt4B® 

paying dividends to increase tf» volumes ol deposits and supportt^^ 
fmporl arrd export businesses In Asuncion end Ciudad del EetaX|||MI 
has a significant segment ol dients imm Ihe Jewish community In 
Paraguay. [Monthly Voluma estimate of purchases USDIA.OOO.OOO.OO] 

PARAGUAY 

PARAGUAY 




Aug-OS 

USD 

P 

$20,675 

Cautitmary 


im^^HHIIluis gained market share due to aggressive 
marketino and tower nrfcirjo to local cHtmts. 


Nov-or 

USD 

P 

$11,085 

Cautionary 


Due to hs geographical tocalion. Utis bank has many climts In the 
aorihuslness sector and ttierefors thak volumes are seasonal. 

PARAGUAY 



D«e-07 

USD 

P 

$16,981 

Cautionary 


Starting in Oacember we increased our flight's frequertcy, irom one to 
miee frights per week. This allowed ate clients to improve didr cash 
flow and be more aggressfva, irtcraasirtg the total voluma of (he 
buslrtess. 


76061.165 


739 




Confidential & non-public OCC information OCC-PSI-0000590Q 


< 

CD 

D 

03 

CD 




T3 

> 


o 

o 


a 

o* 

'< 

X 

O) 

m 

o 

z 

> 

a 


X 

o 


I 

(n 

U3 


BANKNOTES-NY Selected Customers' Activity Alerts & Traders' Explanations for USD Purchases ft Seles from 2005»2009 


LCO reviews current & prfor eiplanaUens from trailer 4 Client atonflttWi intein KYCproNea atfid recent aciMly tor cvsiomer and country (in GBS) to confinn, 

LCO uses Indepoivtoni sources (on intatnet) as needed to vaKdate Intofmatlon provided by Iredorttouiisiti, remittances, trade, economic & politicai rrewsfeverts, FX retes. GBS deal inquiry ecreens, eta.). 
If variarice (actual vs expected) appears potentially suepicious, LCO sboi*t rasearclVinveellgate arul repon activity accordirtgly (ioternafty 4 extemaliy). 


Country 

Customer Name 

Aten/ 

Revtflw 

Data 

CurrerKy 

Traded 

HBUS 

Pufchaaa or 
Sale 

USD Equiv 
Amount 
|ii« iheuaeiMi) 

Couniry 

Risk 

Rating 

Cljant 

niak 

(SCC) 

Tradera* Explanatloite a 

FolloMHjp info raqueatad/obialned by Compllarwa 

PARAGUAY 



May4fl 

USD 

P 

$16,935 

Cautionary 


SitKe last Novernber,(||||||||||||^^ able lo capture some of 

:heir compeWor's clients^cmaS^n^volumo of their benirrwtes 
cparation; addiBonally tiurirrg last year they opened some rtew branches 
aliowingthem to further erqMnd Ih^r business. 

PAfiAQUAY 



USD 

P 

$13J81 

Cautionary 

WrtcnLisl 

SfKe we exited our relationship w>Ui|mi|||||||Biiie lusi of the banks in 
Paraguay ate competing to cc^jture tfxrir market share, increasirrg 
mrsnthiv volumes. 

PARAGUAY 


Mar45 

USD 

P 

$3,000 

Cauitotvity 


HSBC on Jutw 2004. We did r>ol have staftstics for March 2004. 
IMnniNv Vnlume estimate of ourchases USDS, 000.000.001 

PARAGUAY 

PARAGUAY 




Apr-OS 

USD 

P 

$5,500 

Cautionaty 


We commenced business with this client mid lest year arxi the average 
Is not the tnjereflectionof its mofJthly volume. The activity Is to line with 
our axeciation for this state ownetl bank. 

Redacted by the Permanent 
Subcommittee on Investigations 


MeyOS 

USD 

P 

$6,000 

Cauliortary 


This is relatively rtew client and the volume is to Hne ttoih the 
extMKtatiofi. 

PARAGUAY 


Jrm-OS 

USD 

P 

$8,500 

Cautiottary 


BNP first trade was executed on June 23rd, 2004. SHF exported tn the 
monlh of June 2005 tOOIk 0 « the aetWty gerteraled with HSBC. 

PARAGUAY 

PARAGUAY 

PARAGUAY 

PARAOJAY • 

PARAGUAY 



F«b«7 

USD 

P 

$2.50Ct 

Cauttonaty 


due to some concern about the security of Ihsfr Intemattonal banknolae 
bustoess St a eensaquenca of an arlverae result In a iagal litigation 
against the Paraguayan Oovemmaru. They ate (tying to restart (he 
businass and hopefuKy we will see an tocraasain 'tha acthtiiy lor this 
Bccouni. 


Apr-07 

USD 

P 

$4,000 

Cautionafv 


During more than a yaar they were elmosl toacllve to the intemeiional 
bankrrotoB business due to li^atiof^MtosHh^ataguagr^^^^ 
GovemmenUn Swiuerland (^jjjjjjmilHHIlHHBHHiiV* 
■■lllllBII^ Ihey are restarting iheir totamatlorial (toeretlorts. 

^syMto^peci on us other than the reduction of (ha volumes with 
m|||[jj|i[|||||||||| They rvere liquidaling the surplus ol USD to the local 
rnarXei and ftoaBy was exported tor some olher banks to Paraguay. I'm 
sartdlng an E-mail with the call report seperetely. 

“ 


USD 

P 

$2.00C 

CauVonarv 


This is a new rlinnf and the volume is in lirw with our expectations. 


Jun-OS 

USD 

P 

$8,950 

CauHonaty 


New r^ationship wflh||PIBtarid the first trade was executed on May 
18lh. 2005-Slowfy but sw^y. they are giving us most of their businesss 
that was orewiooafv Itouidated tocallv. 



Oet-OS 

USD 

P 

$7,900 

Cautionary 


^HHHB'''t>'T> 9 uoy is a new client that commenced business 
wfth HSBC on 05.23.05. "nje volume Is consistant with our 
moeciailons. 

PARAGUAY 

PARAGUAY 

PARAGUAY 


Feb-oe 

USD 

P 

$6,000 

Ceuiionaiy 


g^OOS^hevcrtume Is irt lino with our expectations. 


Mar-Oe 

USD 

P 

$9,000 

Caultorrary 


||H||||||||||H bankrtotes exports of US Dollars on May 

23^00^^™^olume is In kne with our expecialiona USD2mm per 
week. 



N0VO7 

USD 

■ P ' 

$6,090 

Cautionary 


Dub to its geogrsftoicai localion. this bank has many clients in the 
aortouetnese arrctor and therefore their volumos are seasonal. 
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BANKNOTES-NY Selected Customers’ Activity Alerts & Traders' Explanations for USD Purchases & Sales from 2005-2009 


LCO rwio*rt current S prtor explanatlors from frarter « client alortg *»»» Worn KYC profitos and recent activity tor custwnar and country (In QBS) to confirm. 

LCX> uses independenf sources («i Intemel) as needed to vaildale Wormatkn provMedby trader (tourism, reminartcas. trade, ecrjfwmic & polilical newa/evants. FX rates, QBS deal InQulty screens. ete.J, 
if variance (aeliiai vs anpected) appears poterttiaSy suspicious. LCOshouW reseatctvWtvasliflate and report ardivlty accordingly {internally & exiomally). 


Country 

Customer Name 

Alert/ 

Review 

Data 

Currency 

Traded 

HBUS 

Purchaae or 
Sale 

USOEcpilv 
Amount 
(In UteueuM*) 

Country 

Risk 

Rating 

Client 

RIak 

(sec) 

Tradera' Expfinatlona & 

Foilow-up Info lequested/oDtalned by Compllanee 

PARAGUAY 


JuMW 

USD 

P 

$8.78f 

Cautionary 


The volume o1 the Banknotes business in the Paraguayan market 
Increased mainly due to the strong BrazHlan currency exchange rale 
that prronotedthe commercial activity in Ciudad del Esto.TTila eflect 
was not tuDy reOected belore with this client, because due to the soya 
larvest season a targe amount of USD 0ankr>otes were needed locally. 

PARAC5UAY 


Nov-Oa 

USD 

P 

$8,273 

CautionaiY 


USD volumes in Paraguay are seasonal and thaV^jfh^h^nonthfy 
volume was higher than average. Addlttorraliy,1HHlHm|Pk 
growing Iheir business slrongl^ ffiey are expanding tbej^e^^^^ 
warvehes and also they are In (he process of acquirirt^BB||||||imi|( 

PARAGUAY 


Uay^lS 

USD 

P 

S7J)32 

Cautionary 



The USD activity for this bank has a seasonal component related to 
agricultural business. Additionaity due to lower prices for agribusiness 
products, IHce soya, there wes a reduction on ihs amourri of US notes 
needed to cover the local demand artd consequently there was art 
Increase In the surplus of notes exported. Volume is within expected 
values. 1 



1 









PARAGUAY 


If 

^ 33 


Jul-09 

USD 

P 

$12,422 

Cautionary 


SIrKe we exHed our relstiofvship wrihl^IBHItlie rest ol the banlut in 
Paraguay are competiivg to capture their market share, increasing 
moniNvvohrmes. 

PARAGUAY 


2 » 

1 - 
a 

s ®- 
xs 

o ? 

a ? 
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8«p-09 

USD 

P 

$S.35I 

Cautionaiy 


in ths city olf||||||||||||||||||Hpnd haii been 
focused In provicfing iheir services to the agrleuhural seetor and 
ihsrefore their banknotes volume had a strong seasonal cemponeni, 
wWi^ implies a high volBtlHiy In monthly volumee when comparinoi^ 

1 2-Mo Averase. Thty aw currently in me process ol acquiring mi||||||||| 
|||||[[||||||||||||Hv which will allow them to expand their buskrees 
and provida Iheir services to a broader customer base. AddiHortafly In 
Paraguay we are observing a sMIi In me banknotes buslivess where 

BRL is taking the place ol the USD and al a market level total USD 
volume Is slgnHICBni lower. 

PARAGUAY 


tra r? 
aa a 

S' 

a 


Mar>OS 

USD 

P 

$12,000 

Cautionary 



im^Bincreased the Corporate Client Base. Mandate from 
imiprasii for 2005 is to growth. Racar>tly. counterparty boire^ 
the credit card bu^ess from Citibank. The desk also rs-Mred 
||||||||||mH|H|||||HH^^ Is wetl regarded in the market. {MorANy 
Tred^cl^r^Umai^^irchases USD12.000, 000.00] 










PARAGUAY 


Jen-07 

USD 

P 

$4.S00 

CauKonary 



In line with Monthly Trade Volume Esiimatos. They shipped in January 
part of the cash they collected during December. Thai’s why when you 
compare Dec-06 Va Dec-05 you see a reduction In the USD activity but 
an increase when you compare Jan-07 Vs Jan-06. But overall activity is 










about me same. 

PARAGUAY 


AUO-07 

USD 

P 

$6,000 

Cautionary 


branrmes. They have significant fluctuation in the volumes, as 
mentioned In the KYC proIHe, due to varlatkms In the level of 
fnmmetcn. Total vctiumc Is vrithin exoeetations. 

PARAGUAY 

L™ — 

Oec-07 

USD 

P+S 

$15,000 

CauUonary 


throe flights per weak. TWa allowed our clients to improve ttieir cash 
flow and be nwre aggressive, mcreasing the total vc/ume ol the 
hiislnrm. 
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BANKNOTES>NY Selected Customers’ ActMty Alerts & Trsders' Erqstenstlons for USD Purchases & Sales from 2(K>5'2009 


LCO reviews current & prior sxplariafions from tredar ft client slong wtth Mo in KYC prefilei end «Bt«H setMly tar customer end coorilry (In GSS) to confirm. 

LCO uses independent sourees (on tatemct) as needed to vaMdale jnloffnahcnpoMdedlur trader (tourism, remittances, irsde, eccnomte & pofticaf naws/avenfs, FX rates. G6S deal inquiry screens, etc.). 
II variance (actual vs expected) appears potenfiaily susiaeious. LCO should reseercMovestigste and rapotl scilwily soconlingly (Inlerrtally & extemalty). 


Country 

Cufllomer Nema 

Alert/ 

Review 

Oats 

Currency 

Traded 

HBUS 

Purchaae or 

Sate 

USD Equiy 
AntounI . 

{In KiouMnd*) 

Country 

Rlik 

Rating 

Cllani 

Risk 

(SCC) 

Trodara' Explanatlona & 

PoItowNjp info Taqwaated/obtalnad by Compliance 

PARAGUAY 



Uul-os 

USD 

P 

S9.00C 

Caolksnary 


The voluma of the BanKnolas business in trie Paraouayan market 
irwreaaad mainly due to Ihe strono BratiHanwrrwic^xchaoga rale 
that promoted Ihe commen»l actlvily ir4mi||||||||||P||^ This afleci 
vres not fufly relleeted before with this clianL because due to the soya 
harvest seas<»i a large amounl ol USD banknotes were needed localty. 

PARAGUAY 


Jan-OS 

USD 

P 

$fi,S0C 

Cautionary 


The USD activity for this bank has a seasonal crMnponsnt related to 
louflsm end <»mmetca in the trt-border area. Voluma Is consistent with 
Jan-08 vdome arid witNn expectations. 

PARAGUAY 


r~ 

1 

Mar- 0 » 

USD 


57.500 

Ceuiionary 


The USD acihrily lor this bank has a seasoned component related to 
tourism and commerce in the tri-boider area. Additionally due to lower 
pricae (or agribueiness products. Ilka soya, there was a reduction on the 
amount of US notes needed to cover the local demartd end 
consequently there was an lr>craue in the surplus of notes e^wned. 

PARAGUAY 

= Redacted by (he Permanent 
Subcommittee on Investigations 

_J 

Au94>* 

USD 

S 

$2.(XW 

Caufionary 

J 

Not a live deal, transaction was created to tevensa trade 609Q8D(X}654. 

PARAGUAY 


Auo4S 

USD 

P 

$19,500 

Caubonary 


on 8>e pay of USD - they had a lot oi srnsll denoms thet they wanted to 
gat fid of so ellani ware lerced to take them. They are slowing moving 
away from Ms spedsl cendiion and willing to pay out In brand new bills. 

PARAGUAY 


NovMM 

USD 

P 

$12,379 

Caulionary 


USD volumes In Paraguay are seasonal and that's why the monthly 
volume was higher than avarage. In this case the monthly volume Is 
Mimnsi ihAMma than last vear monthly voluma. 

PARAGUAY 


Fab-0« 

USD 

P 

$10,673 

Cautionary 


*13 gat berck part of the voluma iheir iosi last 
year, Increasing thek USD exports. tZ-Afo Average lor previmrs year 
was about $12MM. to Paraguay, there Is an in-Dow ol US banknotes 
originetad In the commercial actwily in Ihe tri-border area, and an out- 
flow ol U9 banknotes caused by payments from agitauslnesses to Ureir 
workers and suppliers, last year the soy prICBS were extremely high and 
thonsiorealatgo Bmouni d( US nolea ware used by this sador, 
radttolng the lota! surplus to bs exported, this year Ihe soy price >s 
4Q%tower. reducing the amount of US notes needed to cover the local 
demand and consequently Ihere is an increase in the surplus ol notes 
exported. 

PARAGUAY 


Jlri-OS 

USD 

P 

$13,034 

Cautionary 


Since we exited our relsticmshlp iinllllllllllllllllllll^ rest of the banks In 
Paraguay are competing to capture their market share, increasing 
momhtvvdiflTios. 



URUGUAY 


Mar-05 

USD 

P*s 

$S.8M * $5Sh< 

Medium 


At the beginrring ol Match a finenciai iostiiutioo was susperrded by the 
Central Bank origlnatirtg some uncertainty on the market, and severe! 
Banks bcHi^t USD to be able to resportd in the case that the public 
start to wfthdfflw deposits from the system, situation that finally didn't 
haooen. 


May4i5 

USD 

p 

$8,963 

Medium 


They are collecting ell ihe old notes from the barring system (before 
series 19961 

URUGUAY 


JwMIS 

USD 

P+S 

$43M f SOOh 

Medium 


The correct purchase vdumo is $3.1 12 mio and Ihe sales is $20 mi. 

This (fitterence Is due to reversal deals passed alter logisitaat hardsNps 
were encountered to delay shipmems. The steady demand from 
Uruguay due to the unwinding ol the deposits that wore frozen during 
the ilnancial crisis In 2G01/02.Th!s Is a gradual process. 

URUGUAY 
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BANKNOTES-NY Selected Cuetomers' Activity Alerts & Tndert* Explanations for USD Purchases & Sales from 20(^2009 


LCO revfevn current & prior explBnallons from trader A cSeni along trfth info bi KYC profXm and recant aedvitir lor customer and country On 06S) to confirm. 

LCOusss Irtdependant sources (on inlemet) as needed to vaKdata Inlormaeon pn>videdbylmd«r(lourfsni, fetninancea. trade, economic Spolfticalnewa/evenQ, FX rales, GBS deal Inqidiy screens, sic.}. 
II vanance (actual vs expected appears potenHally suspicious, LCO slMuldteseatchAnvasligale and report actMty accoidrngfy (Internally A extemafly}. 


Country 

Custwner Name 

Atertl 

Review 

Date 

Currency 

Traded 

' HBUS' 
Purchase or 
SMe 

USD EcfUlv 

Amount 

^WeiKMidil 

Clountry 

Risk 

Rating 

Client 

Risk 

(SCC) 

Traders' Eiptanatlone A 

FoDowmp info raqtMatedfobtelned by Com^lanee 

URUGUAY 


Fei>4M 

USD 

P 

S15,<X)0 

Medium 


This Central Bank is collecting the old notes Irom the local market and 
exporUrtg them. They are planning lo keep doirtg H and Ihe goal Is to 
dean the Unjguayan market of notes older than series 1996. 

URUGUAY 


I 

« 

e 58 
^ a. 

i 7 

3 Q. 

I'-? 

!- 
1 i 

SI. 

(S' 2 

(B 3 

S' 


Mar -OS 

USD 

S 

910.000 

Mecfium 


Al Ihe beginning March a financial rnsUtulion was su^iended by the 
Centnd Sank originating some uncertairVy on the market, artd severe! 
Bartrs bought USD to be able lo respond in the case that the public 
start to withdraw deposits from the system, a sHuallon that finally didn't 
haooen. 

URUGUAY 


Apr-C6 

USD 

S 

910,000 

Me<8um 


In gwterel they do business wHh BOA but as we could provide them 
with a ebmrMhtve rate thev closed this deal with HSBC. 

URUGUAY 


Oct-0$ 

USD 

P 

93.288 

Medum 


Thay axport small derwmlnaiion and used notes that they ere not able 
lo redrculale In ihe local market^wwns^enominadamolas come 
Irom leieH chenta located It h not 

Irom any one particular dienOnwanal^ the activity of this client, 
they have only dona two eirpoits lotallmg around USD3MM eardi. Both 
lhase shipriwnts were in tlartpma of SOs, 20s and 10s. These notes 
were accumulated over a period of 3 or 4 menihs and has no demand 
in iha local market for (hesa denoms. The ptelsned danom by clients is 
the $100 denom. We so lar did rot encounter any iTW|or luue with 

USD counterfeits In Unrguay. 

URUGUAY 


Mar-07 

USD 

P«S 

96M * 99h' 

Medrum 


They sold an excess ol small denominailQn and bad condition note* 
that they were not abla (o redrculata in tha looal market and then 
ourchased new USD in tOOsfvreolacinothem. 

URUGUAY 


AU(F<I7 

USD 

P 

98.665 

Medium 


They sold an excesaol amall denomination and bad condition notes 
that they were rrot abta lo recirculate in the local market and then 
Durchased newUSOIn lOOsforreolacirKithem. 

URUGUAY 



JamOS 

USD 

P 

$7,950 

Madrum 


They sold an excess ol small denornktailmi end bad cortdilion notes 
that they were not able to recirculate in the local market 

URUGUAY 


Mey^S 

USD 


$3,771 

Medium 


They sold s^ excess ol small denomlnalion and bad condttion notes 
that (Iwv vrere not able to recirculata in Ihe local market 

URUGUAY 


Jui-OS 

U^ 

P 

93.157 

Medium 


They sold an excess small denominaikm arxl bad condition rtotes 
that thev were not able to recirculate in Ihe local market 

URUGUAY 


SepOS 

USD 

s 

915.000 

Medium 


Due to Ihe curwil tinanclal crisis in the markets, and ths consequently 
devaluation of die local currency, there is an incrsesing rjemand for 

USD banknotes in Uruguay as a way to keep Ihe value of savlnga. 
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BANKNOTES'NY Selected Customers' Activity Alerts A Treders' Expianatlons for USD Purchases & Sales from 2005-2009 


LCO reviews current & prior exptanations from traders client alorrg with Wo In KVC pnililes and recent ecdvfty (orcusiornerarKl country (in OBSj loconnrm. 

LCO uses tndependeni sources (on rntemei) as needed to vafldete Wonnaiion provided by mdarilourfsm, remiitancss. trade, ecorwrr^ & poilitcal r>ew»fevents. FX rates. GBS deal tnoufy screerts, etc.). 
)f variance (actual vs eKpectad) appears potenbeliy suspicious. LCO should reseaicMnvesagate and r^d acllvily accordingly (intsmaHy & extematty]- 


Country 

Customer Name 

Alert/ 

Review 

Oats 

Currertcy 

Traded 

HBUS 

Purcheas or 
Sale 

USD Equiv 

Amount 

(tnthMMndi) 

Country 

niak 

Rating 

Client 

Hleh 

(SCC) 

Trsden' Explanations & 

Poliow-up Into rectuaeted/obtalnBd by Compllenca 

URUGUAY 


Redacted by the PermBncnt 
Subcommittee on Investigations 


Oct-08 

USD 

S 

*72,000 

Medium 


Due to (he international (Inartcl^ crisis and tfta economic uncertainly 
generated in Argentina's economy, as consequorKS o( the relonri of the 
Penslori FumA announced by the goyemmani. there was a high 
demand USD banknotes Irom people exchanging their savings in 
USD arxf withdrawing the mortey Irom (he bank's account. 

Argentina and Uruguayt»v^H^!y Irdegraied economy, (hay are 
both members of th^lBHHB^'^dhrstorlcally (he Urugiayan 
BCWiomywBS relaied to Argentina. Uruguay's banking system has a 
higher reputation tharr the Atgentirrean one, and therelore. many 
wealthy Argentines have thmr aavings deposited In Uruguay, tharafore 
(haireliant base is reacting not only (a the kttemationai Wnciat crisis 
blit also to tha added noise created by the Argentinean unceiiaJnty. {as 
an examine. Unrguay auKared a severe financial crisis in 2002 as a 
consequence of the AigantlnBan finendal crisis in 2001) 

URUGUAY 


reb^ 

USD 

P 

*13.616 

Medium 


They sold an excess of smali denomination and bad condition notes 
that they were net able to radTCulaie m the local mailuit. The months of 
Dec, Jan & Feb are ihe peak ol the tourism ectivlty In Uruguay and 
cortsaqueniiy there Is a Urge amount ol USD drculaling In the eounlty. 
Typicsliy. the banka will fry lo use it to cover their own needs, and they 
win exoon the surolus. 

URUGUAY 


MBy-09 

USD 

P 

*4.iie 

Medium 


They sold an excess ol smell denomination end bad condition notes 
that they were not aUs to recireulaie In the local market. 

URUGUAY 


AugOS 

USD 

P 

$5,624 

Medium 


They sold an excess ol small denomination and bed conrtitlon notes 
that they were not able to redrculate In the local market. 
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VerDate Nov 24 2008 


From: 

Sent: 

To: 

Cc: 

Subject: 

Attachments: 


Boss, Joseph 

Tuesday, June 22, 2010 6:36 PM 
Tabor, Teresa 
Boss. Joseph 


FW: HSBC 

MSBC lnitia|^0Coniact.doc 


From: Vivenzio, James 
Sent: Wednesday, July 29, 2009 5:24 PM 
To; Stipano, Dan; Belshaw, Sally; Dailey, Grace 
Cc: Boss, Joseph; De La Garza, Elsa; Wagner, John 
Subject: RE: HSBC 


Mere are my notes concerning my conversations the ^M\gents^!w|lihav^B|mKset up a meeting in 
Washington with everyone on this email, the twof^Bagents and request that they put 

together some sort of a lime line for us since this case goes back rrearly two years. 

Regard s/JimV- 


From: Stipano, Dan 

Sent: Wednesday, July 29, 2009 2:02 PM 

To: Stipano, Dan; Belshaw, Salty; Dailey, Grace 

Cc; Boss, Joseph; De La Garza, Elsa; Vivenzio, James; Wagner, John 

Subject: RE: HSBC 

I spoke further withfl||ft Me wants to know if there is a U.S. supervisor for HSBC-Mexico. He also wants to know when 
we expect our exam to be completed. 1 told him I’d get back to him on these questions - please advise. 

Separate from my conversations, Jim was contacted today by two BHigents who are also involved in the investigation. 
They provided Jim with additional information about particular accounts, etc., and requested a meeting with us. We 
should take them up on this. 

From what I can tell, this has the makings of potentially being a major criminal case - we need to be all over It. 

Jim. please weigh in here concerning the substance of the call you received. 

Daniel P. Stipano 

Deputy Chief Counsel 

Office of the Comptroller of the Currency 


From: Stipano, Dan 

Sent: Wednesday, July 29, 2009 1:44 PM 
To: Belshaw, Sally; Dailey, Grace 
Cc: Boss, Joseph; De La Garza, Elsa 
Subject: RE: MSBC 


Redicted by the Permanent 

Subcommittee on Investigations 
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I think the important thing is that we take a dose took at the Banknote area, which it sounds tike we are doing. I would be 
particuiariy interested in the bank's level of due diligence on its Mexican ajstomere, and a review of transaction activity 
involving those c ustomer s to ensure that the bank is satisfactorily identifying and reporting suspicious transactions. 1 wilt 
circle backtotheHSon this and let him knowthat we are in the process of conducting an examination of the 
Banknotes area right now. If he identifies any key areas for us to consider looking at, I'll pass them on. 

Daniel P. Stipano 

Deputy Chief Counsel 

Office of the Comptroller of the Currency 


From: Belshaw, Sally 
Sent! Wednesday, July 29, 2009 1:30 PM 
To: Stipano, Dan; Dailey, Grace 
Cc: Boss, Joseph; De La Garza, Elsa 
Subject: FW: HSBC 

As Joe indicates, we are in process of a review of this area now. The specific MRAs from our prior review had been 
cleared. If there is something we should do (or not do) as a result of this investigation, please let us know. 

Regards, Sally 


From: Boss, Joseph 

Sent: Wednesday, July 29, 2009 1:25 PM 
To: Belshaw, Sally 
Cc: Boss, Joseph; De La Garza, Elsa 
Subject: RE: HSBC 

Sally, 


We do not have supervisory responsibility for HSBC Mexico. The last Banknote examination encompassing the 
geographic area of Mexico was our "New York" Banknote examination whicrfr was conducted in 2005 (copy of Supervisory 
Letter attached). As you can see from the letter we had a number of MRA’s involving consistent oversight of theKYC 
and EDD process, instances where the customer information, required by the bank’ s internal policies and 
procedures, was not obtained and/or the infonnation obtained was not properly analyzed, instances in which 
profile information was either not obtained or the analysis of the information was inadequate, no monitoring had 
in fact occurred for those clients subject to conditional approval and the specific monitoring instructions of the 
BSA/AML Director, lack of identifying PEPs and that the current category of SCC clients does not account for 
the potential for reputation risk based on other adverse risk factors to include clients fi’om jurisdictions that 
have, or clients who have, based on current events, become subject to enhanced regulatory, legal, media or other 
public scrutiny. 

We are currently conducting a "New York" Banknote examination which includes Banknote clientele from the Mexico, if 
there is something that we should be doing to as^st in matters, we can take the opportunity to do so during this current 
examination. If we are to take on some additional work during this examination, please let Elsa de la Garza know as she 
is acting EIC as I am on annual leave starting tomorrow. 


Joe 


Redacted by the Permanent 
Subcommittee on Investigations 
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From: Belshaw, Sally 
Sent: Wednesday, July 29, 2009 12:33 PM 
To: Boss, Joseph 
Subject; FW: HSBC 

Joe: Let’s discuss. Sally 


From: Stipano, Dan 

Sent: Wednesday, July 29, 2009 12:32 PM 
To; Belshaw, Sally; Dailey, Grace 
Cc: Wagner, John; Vivenzb, James 
Subject: HSBC 

Sally and Grace, 

This morning I spoke toflHHHBHHHHIiBi AUSA in the Eastern District of N.Y. fllHHHftaid that his 
office is in the early stages of investigating possible money launderi ng through th e repatriation of U.S, currency through 
accounts at the banknotes division of HSBC-N.Y. The scheme that ■■i^Blimdescribed is similar to activity that we 
have seen at Union Bank, Wachovia, and Zions. Baacally, the way It works is that drug money is physically hauled 
across the border into Mexico, then brought back into the United States throi^h wire transfers from casas de cambio or 
small Mexican banks, or else smuggled across the border in armored cars, etc., before being deposited in U.S. 
institutions. According toBHHH most U.S. banks, recognizing the risks involved, have gotten out of this business, 
but HSBC-NY is one of the last holdouts (afthough. interestingly, he said that HSBC-Me»co will no longer accept U.S. 
currency). 


wanted us to be aware of his investigaUon, but he also wanted to know; 1) whether the OCC has 
supervisory authority over HSBC-Mexico; and 2) whdher we have done any recent examinations of the banknotes area at 
HSBC-NY Of so. he would tike to see a copy of the ROE). I told him I didn’t know the answers to his questions, but I 
would get back to him. Can you help? 


Thanks, 

Dan 


Daniel P. Stipano 
Deputy Ch/efCounse/ 

Office of the Comptroller of the Currency 


— Retlacted by Hie Permanent 
Subcommittee on Investigations 
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Conducting an Enhanced KYC for Grand 

Cayman Accountholders 


Proposal to Update the Strategy to Control 
Risk arising from Grand Cayman 
Accounts 


HSBC m 

The world's local bank 

o o 


76061.174 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8874560 





VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm 00763 Fmt6601 Sfmt6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 


Background 

HBMX CEO requested to conduct an enhanced due diligence (KYC) for 
all Grand Cayman CDAs DDAs. 

► The Bank has been recently fined for offering this product in Mexico, and money laundering red 
flags have been identified. 

r On 28JUL, CMP gave instructions to suspend this product. 

► On 31JUL08. Segment Directors were requested by CEO that an enhanced KYC will be 
completed for all Grand Cayman accounts before 01DEC08. 

► As of JUL08, in Grand Cayman CDA/DDA product there were 49,937 customers, and its portfolio 
was approximately USD 1,500 million. 

r Currently, this product is expected to be re-opened, as long as necessary adjustments to systems, 
processes and documentation are made, with stricter controls, and if Group Compliance’s sign-off 
is obtained. 

► On 26SEP, Segment Directors reported that almost no progress has been made in enhanced KYC 
completion. In addition, a central validation of enhanced KYC quality is not in place. 

y According to Remediation Project results, success rate in file completion is approximately 25%. 
This means that if this strategy is followed, it will not be possible to complete more than 25 % of 
required enhanced KYC Forms by 01 DEC08- 


:i'': SS 


d that it will not be possible to complete 
01DEC08 


IT. '1,.. 


{rsBc<z^ 
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Actions Taken Up to Date 

The institution has taken mitigating actions for risk arising from this 
product. 

> Implementing online controls to identify if customers are blacklisted people/ PEPs at HSBC 
account opening. 

> Implementing a monthly control for customers who make cash transactions and USD 
transactions over USD100K. 

> In order to re-open the product, it will be required to conduct an enhanced KYC of all new 
customers and cash deposits will be limited to USD 10K, for individuals, and USD 100K, for 
corporations. 

> Updating Circulars and Work Instructions Manuals applicable to this product. 

> Detailed Analysis of risk profile of approx. 50,000 Grand Cayman customers as shown in 
following slide: 
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Existing Risk Arising From Grand Cayman Accounts 

Significant Risk degrees from Grand Cayman accounts is in 3341 
customers, i.e., 6.69% of total customers. 


Total Customer / Grand Cayman Accounts by Risk Degree 


Traffic Light 


Description 


Customers I Accounts 


High Risk 


SCCs. mainly customersreportecl to the authority 1,314 

(SARs) and/or with: transactions over USD 1 0OK. ; (2.63%) 


2,240 



Customers with normal transaction profile, since 
Low Risk alerts had not been generated by monitoring 
systems for them. 


46,594 

( 93 . 31 %) 


I , ‘ ' TOTAL “ 49,935 


. 57,262 


61 586 
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High-Risk Customers - Present Status 


Cystonsrs'iIwUpi 

mnmaittda^ Mten 

CKmImmiis 

i.$u 

2^ 


■ I'lji.ijiiil !'i' i r'.i'fi'i i£' Air'i 'i"rr'i"i.'iLili'ri'i.'4i'ir!;; ", i 

I'lriMwipjIfiljM I, 'piiir.'i Ml'" 1 i! .'Or'i', f 

'li li'n; ri,,l 'V''' i r I'lii I'll'il.ilj, 


Status 9 and 13 


nc'uded in 
Ri“niediation Effort 
1 ' Ptia e 

Not included m 


To close these accounts, once respective 
segments have confirmed it. 

Completed A,,tion The e account have 
already been purged completed automat cailv 
c o ed or will be closed through Legal 


^ <1 To conduct an Enhanced KYC by 310CT or 
Remediation Efforts (I ^ 

and II) 


258 


33 


153 


. 395.: 




195 


&0¥npi!iarfSfff 

3 currently workirig on the application of tf 
and white groups. 

lelsame’rhetlncJd' to arhoer. 


HSBC<X> 

Tliu wctldi: local bank. 

• • 

5 


76061.178 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8874564 




VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm 00767 Fmt6601 Sfmt6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 


Proposed Strategy 

A risk-based strategy is proposed, which needs less resources 






4 572 custpmerfi'ies’are beihg,prepared;.to;b.e.completed;;%s^^^^^ 

Remediatibh Efforts 2nd', phase, {inplubing central'quallty pbntrpij../ :^ 

4, Ineorporate isa custonierstntdthis efforts . 

4 To close immediately 258::bustdnniers with. status 9 and iS:-' ^ :; V 


4 To complete the examination of file completion status and follow a rriethod similar , 
to that developed for red traffic light. 

4 These files should be completed by 31 OCT08. 

White 

4 Schedule the completion ofthese files for the Third Phase of Rernediatioh Project;! ;; 
.starting in NQV08..' 

4 Apply . a permanent monitoring tofthis Universe .so as, to giyepriority.itol the files of : , 
thoseeustomeWwhose riskstatusimayiincreaseTrbim time tbjtime to arhber/red: : : r 

■ ; traffic:-|ight,\;;'.'!',',.v,;;’':L. 

4 In addition, a conttdl yyiif be implemented to monitor risk associated with dramatic t 
changes in transaction profile. 


HSBC«> 

kvotfct’e .Ideal hflnk 
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Strategic Options for Managing Grand Cayman Accounts 
Risk 


strategy I Advantages I Disadvantages 


Continue with 
present strategy to 
complete an 
enhanced KYC for all 
accounts 


► File Completion Progress will possibly be 
25%, ar)d as a result around 37,000 ; 
accounts willbe closed. 

► Remove all existing risk by closing ► The funding from this product will be; 
all accounts of this product lost. 

massively, effective from DEC08. ► There Is not a dual control for checking 

enhanced KYC and file completion. 

> It is not possible to complete enhanced . 
KYC within established timescale. 


Risk-Based Strategy 
proposed in this 
document 


4 Implement a better risk control and 
Close high risk accounts 
immediately 

4 Incorporate diis documentation into 4 If enhanced KYC completion for white 
Remediation n traffic light customers is deferred, a 

4 More focused Work Load for certain risk level will continue In place, 

branches, 

4 Dual Control for checking progress 
achieved in File Completion and 
Enhanced KYC Completion. 


HSBC<I> 

Tlw wmld's local hank 
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H3BC*BNI_E 006571 l.txl 

From; DtNISE A R;tLLY/HEU5/HSBC 
Sent; 5/25/2001 8;1B:28 AM 

To; CAROLYN VVIND/HBUS/HSBCg’HSliCAMERlCASjANNE LlDDY/HaUS/HS6Ce!HSHCAMHHlCA5 
CC; 

Subject: BANK M£LU 
FVI 


- Forv/arcfed by Denise ARe»lly,4lBUS/H58C on DS/25/20C1 

D9116AM — 

Michael B GaHagher (3 REPUBLX on 25 May 2001 00:54 
Note 

25 May 2001 00:54 

From: Vtjc,Sa=| 0 Gallagher RCPUOLIC Tel: 212-523-56S0 

Titlfc: ?'.<pcu:ive Vice P'esid;»n» Location; 452 5th Ave, Tioor 5 

Vv'orkGroup: 

Gioba! rymts and Cash fylymt Mail Size: 456BO 

To: Denise A Rt'illy/HBUS/HSBC^HSBCAMERiCAS 

cc; Douglas 5tofberg/HBUS/H53C 
Subject- RANKMELLI 

i wish to bo on tnc record as. notconifortabie v/ith this piece of business. . 
Michaol 

Forwarded by Michael B Gallagher/HDUS/HSBC on 05/25/2001 

12:53 AM - - 

Denise A Reilly 1® H5BCAM£R1CAS on 22 May 2001 13:45 
Note 

22 May 2001 n-AS 

From; Denise A Reilly HSDCAMERICAS Tel; 302.636. 2500 
Title: Senior Vice President Location: Oelawiup 

WorkGroup; 

Paympnt Services Mali Size: 451 18 

To; Carolyn WYid/HQUS/HSBCiglHSRCAMfRlCAS 
AnneLiddy/h-3U5/H5BC@HSBCAMERiCAS 
M.'chael B 0‘ailagheiVHSL/S/KSSC^:rRepub}ic 
iubjerf RAN.KMHIi 

Page 1 
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H58C-BNl_E 006S7il.t:xt 

FYi 

FoAvarded by Derise A Reijly/HBUS/HSBC on 05/22/2001 

0S:45 AM 

Brian W R)CHARDSi®HSBC 
22 May 2001 05:32 

To- Denise A Reiifv/HaUS/HSEC@H5BCAMERICA5 

cc: John R WilKlNSON/.HBEUyHSBCl^KSBC 

Peter C 5LSNK/HB£U/hS5C$JHSBC 
Subject; BANKMELLI 


Denise 

i refer tolohn Wilkinson's EMail of 18MAY01. 

^ ' 1 met Mclii yesterday arid enquired re names of the principal benefidariei of 

V • their payments - as you wilt see from the atud>ed Call Report, as expected, 
Me lii could not assist. 

Brian 


Attachment: cf '20010521 BWR NH Sadeghifar Nazer Pour)ann.doc.zip 
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INSTITUTIONAL BANKING 
(CIBIBL) 

CALLDATK:21MAY0I CBIDrBKDQ CALL KEPORT NO: H6J84 


liA.SK NAME: flr.nk Mclii Iran rilONE: DZC'? 600 3635 

ADDRESS: 4 Moorgatc FAX; U7.C7 796 2132 

Lordon 
EaR6AL 

PARENT; 

GROUP KJiLATTONSHIP MANAGER; Cfcjs Buicher 


MARKETING CATEGORY; MLP FL/\aE OF CALL; Rcstaunint, Vinters 

Place 


PKKSO.\(S) CONTACTED ANDTITLE(S): 

1. Mr AKmad Sacleghifar, Director General 

A. Majid Narcr, Head oF Corporate Lending & Trade Finance 

3. Mr Soeed Pciirjant, Cash and Payments Manager 


HSBC GROUP CALLING OFFICERS: 

1 . Dr N Hetnapour. Iran Representative 

2. Brian RichB."Js, .Area Manager, Middle East &. Africa, CiB '3L 

3. Phil Smith, 5 ISBCPerfailirig 


RELATIONSHIP/ACCOUNT plan OBJECnVKS; 

1 . Increase Trade Business with aedii constraints 

2 . Develop Treasury rciatioxsidp wltljin credit constramis 

3. Gttnin an increase ir ncconrtt ;>citvi!y bn: ro; SSI 

4. Obtain CLS regis-ntion 


CALL OBJECTIVES: 

Discuss USD Rccoun: 

2 . Discuss forfaiting opporiunitics 
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NARRAXrVE: (RELATIONSHIP INTORMATtON, BUSINESS DEVELOPMENT*, 

COMPETITION/OTHER ISSUES) 

Business BeveJopinent 

• USD account - draft proposal handed over fw Mefli perusal, EKplalred the 
Customer Cbaner would follow after ncgoiiatkm with Mclft managemenL OLAM 
explained, and stressed iu use was unconditional to our oHcr. Was informed ihat 
total paymcji! flow was rearer 300 per day, with USD 2 bio MMK. As expected, 
unable to answer HSUS enquiry re main beneneJarics - Iran imports from many 
countries and countless suppliers Worldwide. 

• Lloyds - BWR astonished lo learn that MelH has moved most of its USD business 
from RBS to Lloyds, and has opened a treasury settlement account with Standard 
Chartered. Ho-wever. stUI seem Iretn to use HSBC. 

■ CLS * nut known by any Mciii person.nel present Touched upon the structure and 
advantages of using HSBC, including the same portal interface as OL/^M. Details 
-sought. . 

• Mciii London seek a “dedicated" silent confirmation line. Homapour indicated hts 
support - IBL will process with FCC. 

Other 

• HSBC Tehran is establishing lines of credit for HKBA and HBAU re grain 
exports 

• HSBC is progressing its plans to open a "virtual bank" in Kish offshore centre - 
opening planned for mod 2002. It remains o joint venture with NIC (in which 
Mctli is a shareholder). 


PARENT.AL SUPPORT/PERFORMANCE: (CAPITAL, ASSET QUALITY, 
MANAGEMENT, EARNINGS, LIQUOim") 


• Mein Bank pic will comraenee business end JUNOl 

• The new UK subsidiary will be the vehicle for a planned expansion into Burolnnd- 
Mellt present!)- only has branches in Germany ( 1 ) and Paris 

• The initial capital will be USD dOOmio 


ACnON: 


1 . 

2 . 


3. 

4. 

5. 


Revise Tender document - 1 W/GPCM 

Establish invoice structure - J W 

Prepare Customer Charter - iW 

Send CLS details and place on mailing list - GPCM 

Can M'c assist re “dcdicaicd" London CCR line? • JW 
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mSTIUBUTlON: 

Usity circulation. J Richards, N Weir, 0 Aytwnrd, D Reilly, P Blcnk 

NEXT CALL DATE:2H01 CALUNG OFFICER: B W Richards 

DATE OFTfllS REPORT; 21 MaY 01 SIGNATURE: 
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From: DENISE A RElLLY/HBLiS/HSEC 
SenS7-'12/2001 8:22:53 A-M 

To: DOUGLAS ST0LBERG/HBUS/HSBC@HS8CAMERICAS 

CC; JOEHARPSTER(giRNB.COM;MtCHAEL B 6ALlAGHERyHBUS/HSBC@HSBCAMERICAS 
Subject: Re: Bank Meiy 

The foflowing memo is background information on the Bank Melii business, 
prepared by John Richards, Group Representative Iran. AdditionaUy, in a 
conference cad that Joe Harpster, Compb'ance and I had vrith HQEU and Richards 
cn 6, '27, it was relayed to us that the Group (with the bacicng of Bond) was 
looldng to significantiy grow our presence in Iran. Current lines of credit 
were reported to be SSOOm, trade lines of SlSOm and growtii was anticipated In 
trade, cash management and Internet banking. The Bank Melfi clearing was viewed 
by Richards and others as not only profitable as a standalone but also key to 
winning additionai business. 

It should also be noted that at the time this i^i^Kwition came to cur 
attention, HBEU had already consulted wjft MatIhewKIng and external 
counsel and advised a comfort level from bati\ quarters 

Given the seriousness of the business proposal, we continue due diligence on 
the transaction flow. The decision is primarily a Compiiance4.egal one and we 
are working closely with them ort the operational feasibility of any proposed 
trarrsaction flow. 



From: John L RiCHARDS/HSBL/HSBCAPAC Te!; 9821 204 0467 
Mail Size: 4106 


To; Brian WR!CHARDS/MDBK/HSBC@HSBC 
co: 

Subject: The Central Bank of Iran 
Dear Brian 

We have been approached by the Central Bank of Iran to take back their USD 
clearing business from Natwest. In prirwipal I am teen to do this but on the 
dear prciviso tirat it can be done protitabty and on a sustmabie basis. 

One of our key objectives for the year is to develop HSBC% Asset Management 
activities in Irart and with the Central Bank now mana^ng the dl price 
stabalization fund amounting to some USOIObn there is considerable scope for 
this. Obviously many foreign banks are chasing the same business and so we need 
to demonstrate some competative or relational advantage. The fvoposal from the 
CenPal Bank was therefore not unwelcome. 

I hsd an initial meeting with Mr Nowbehar Director Int) Dept of the Central 
Sank yesterday along wtth Nigel Weir who is visiting Tehran. I emphasised that 
if we were able to do this we would need to have detaied discussions so that 
we are dear what is required of us and what we require of them. The Central 
Bank manage their transactions through Bank MdB London and the intention 
would be that negotiations are held with Mr Saderighfar. 

i would like to end up v.'ith a v.'ritten agreement so that all parties are aware 
of what they are committing to. Although r^egotiating with Iranians is a 
frustrating activity we are in a strong position. They have become disatisfied 
witii NatWest and with tiie exception ofLLoyds, who will have the same issues we 


Confidential • FOIA Treatment Re(P 


| Pernianent Subcommittee on Investigations ! 

EXHIBIT #41 I 


■A. 


HSBC OCC 8876128 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00774 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




761 


VerDate Nov 24 2008 


have there is IMe cximpetition. I also assume that our iechndogy advances 
will make the business more attractive than it w«s in the past 

I shall be gratetu] for your thoughts on this and your adwce on how I should 
take ttiis forward. Nigel is here until Thursday and if possible I shaS be 
grateful for your initial feedback before he leaves so that ( can discuss the 
matter further with him. i am sure that he will take this up with you himself 
but at the end of the day negotiations will be in London and will be 
driven by you. 

Nasser and I wH be in the UK on Feb 14th 15thtoh^p hodt a presentation to 
a number of Iranian Bank Managing Qrectors in assodation with Robert Gray and 
the Investment ban k. Subject to your views we can join any negotiation meetings 
that are arranged over that time. 

in summary if we can make this business indeperMiantly profliabie and 
sustainable the benefits that we can derive particulariy from the Treasury, 

Asset Management and Investment bankir^g spin offe vnill be srijstanb^. t v/ant 
therefore to agree a strategy of how we go forward and v4io we involve before we 
make any further contact so that I am aware of aB the issues involved. 

I appreciate your help with this 


Best regards 


John 


Douglas Stolberg 
H JUI2001 18:23 

To; Denise A Reilly/HBUS/HSBC@HSBCAMERICA& 

cc: Joe, H8rpster@mb.com 

Midiael B Gailagher/HBUS/HSBC@HSBCAMERICAS 

Subject; Re;BankMei!i 

Denise and others, 

Wth tiie amount of smoke coming off of this gun, remind me again why we think 
we should be supporting (his business? 

Doug 


Denise A Reilly on 1 1 Jul 2001 17:16 
Note 

11 Jul 2001 17:16 


From: Denise A Reilly Tel; 
Title: Senior Vice President 
WorkGroup: 

Payment Sea'icee 


302.636.2500 Dei 
Location: Deiaw»’e 

Mall Sire; 33351 


To: Douglas Stolberg/HBUSfHS0C@HSBCAMERICP5 
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cc: Joe,Harpster@rnb.com 

Michael B Gallagher;HBUS/HSBC@HSBCAMERiCAS 
Subject Bank Mel 

This is an issue that you should be aware of. As descitsed in Carolyn's memo, 
we have had ongoing discussions on the topic of Iranian payments both 
internally, with HBEU and with HBME IRN. HBUS Compfence and HBEU have also 
consulted with external counsd. The genesis to the discussion was an RFP for 
HBEU Treasury to handle Bank Melli's USD dearing. From an operational 
perspective, we veil follow Compliance's direction as to whether we should 
support this business and if agreed, vnl! establish any required operabcnal 
controls. 

Given the level of attention this is now getting, it may be raised at the SMC 
and will be included in the quarterly Compliance report. 

I will keep you apprised. 


Forwarded by Denise A ReiJIy/HBUS/HSBC on 07/11/2001 

04:37 PM 

Carolyn Wind on 1 1 Jul 2001 11 ;1 3 

Note 

11 JUI2001 11:13 

From: Carolyn Wind Tel; 212 525 5503 

Title: Executive Vice President Location: 452 5th Ave. Floor 07 

WorkGroup: 

RNYC Compliance MailSze: 29902 

To; Matthew J W KING/KGHQ/HSSC@HS8C 

cc: Paul L Lee/HBUS/HSBC@HSBCAMERIC.AS 
Anne Uddy«BUS/HSBC@HSBCAMERICAS 
ERzabeth R'OtomastrofrtBUS/HSBCQHSBCAMERICAS 
Denise A Fteilly/HBUS/HSBC@HSBCAMERICAS 
Subject BanicMeW 

Matthew, this e-mail is to summarize the issues we discussed yesterday 
regarding HBEU Bank Melli proposal. As you know, HBUS was nlally approached 
in January 2001 with the proposal that HBEU would use its USD account with HBUS 
to clear USD payments for Bank Melli. Subsequently, there has been extensive 
review of the matter, including input from tv#o outeide US legal ferns. The 
first Issue was whether or not the underlying transactions od^nated by Bank 
Melli are permissible under the Iranian Tranesetions Regitiations. The 
regulations provide a general license to transactions that meet the "U-Turn" 
deRnition artd sc we have gone back and forth as to v^ether the proposed 
underlying transactions meet the definition, (see below). There continues to 
be some disagreement between the advice from ourtvw outode law firms on this 
point but we could probabty resolve the difference. Of more concern is the 
second issue which is that given the way the payment orders are to be 
constructed and formatted, HBUS will not be able to cortfirm whether or not the 
underlying transaction actually meets the U-TumTequirement. It is not 
apparent that HBEU wifi be able to confirm that each payment meets me 
requirements. In an effort to fadtltate "straight-through preceseing", it now 
appears that HBEU will train Bank Melli on fonnstling the payments end that we 
^i be relying on Bank Melli to ensure that only qualifying payments are 
processed through HBEU's account w\th HBUS. (See attached tetter to Bank 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8876130 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00776 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



763 


VerDate Nov 24 2008 


Metii). !f OF AC identiCies a transaction that does not quaS^.iltmght view 
MSBC's actons dua to the non-disclosura as having involvad willful disregard 
or evasion. Given the large dollar amounts end volume of activity proposed 
(3D0-400 transactions per day), if OFAC took such a view, polential labilities 
could be substantial and would certainly impact HBUS*s rdationship with OFAC. 

So to recap; 

A) Does this structure as proposed meet (he U-tum requirement for 
processing? if Bank Vtelli and the second foreign bank da not appear on the 
MT202 processed by HBUS, how do we detwrrane that the pe^mient is in fact a 
U-tum? 

B) HBUS will not know the foreign banks and, therefore, wifi not be able to 
monitor for compliance. \Mfl Mefli be informing HB£U of the second foreign 
bank? Wifl HB^ set up a function to morutor these payments for compliance 
with ihe U-turn provision? 

C) if H8EU wil! set up a fonction to monit(»' the payments, it is possibi e that 
OFAC may not find if acocptable for HSUS to rely on HBEU to morator payments 
for corr^lianoewith the U-tum. 

D) If the foreign banks involved are not disclosed on the MT202 processed by 
HBUS, and neither HBEU nor HBUS is rnonitoring the payments for compiiance , 
OFAC could refer to the section of the regulation regarcfing “evasion’ (Section 
560.203 Evasions; attempts). 

1) Definition of the permitted "U-Tum" transaction urtoer the Iranian 
sanctions; 

The opinion received from outside counsel. Tom Crocker of Alston & Bird, on 
2/2/01 In regards to 

the proposed transactions per Peter Blenk's emails of 1/31/01 and 2/1/01 is 
quoted below. 

"...tlie scenario outlined below does not appear to qualify for the 
so-called USD "U-tum" exception Ln the JranianTransactions Regulations. 

Section 560.516(a)(1) of those Regulations provides a general license for 
dollar clearing functions which meet the follov^na olteria; the transfer must 
be 

(1) by e foreign bank which is not an Iranian entity (2) from Us own account 
at a 

domestic bank (3) to an account hekt by a domestic bank (4) for a second 
foreign 

bank which re r^ot an Iranian entity." Oiagramtning this out, the chain would 

look as 

foiiows: 

Foreign Bank (non-Iranian) 1— Domestic Bank 1— Oomeetic Bank 1 or 2— Foreign 
Bank 2 (non-Iranian) 

(The point of disagreement between legal firms is whether Foreign Bank 2 has to 
be a different bank from Foreign Bank 1 . Our survey of ofoer maior USD 
clearing banka indicated that they follow the titefat interpretation of the 
licerree, which is two different foreign banks involved.) 

TRANSACTION OETAJl 

Below are eummaries of HBUS' understanding of the firet proposed transaction 
flow and the latest proposal. 


Example I; U-TURN TRANSACTION 
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1 Bank Meili sends instructons to HBEU to: 

debit Bank MelH's account at HBEU 
credit HBEU nostro with HBUS 

2. HBEU sends instructions to HBUS to; 

debit MBEU account with HBUS 

credit any foreign bank (via a USA correspondent for the foreign bank) 
for further credit to the uitimate beneficiary 

Note: Original HBEU suggestion on payment fonnat would not mention Bank Meili 
as the originating bank 


Example il: Cover Paymenlss (MT202 & MT100) 

I , Bank MeKi, London sends instructions to HBEU to; 

debit their account with HBEU and 
credit HBEU nostro with HBUS 

2 HBEU wili send an Nn’202 to HBUS to: 

debit HBEU's account vAh HBUS 

credit any foreign bank (either on our books or via a USA correspondent for 
the foreign b»ik} 

Note; Current HBEU recommendation on format would not Bank Meili but 

would contain some reference identificatiort on the spedfic transaction being 
settled between Bank Meili and their customer. 

i. HBEU will also simdtaneausiy send an MT100 to the foreign bank (credit 
party) referenced in the above MT202, supplyirtg them beneficiary 
details for applying the funds received from HBUS 

Note: The MT100 is often processed prior to the MT202 due to time differences 
between the US and the beneficiary's country. 


3} HBEU Instructions to Bank Meili regarding howto format payrrterTts: 

See attached email of 28JUNai from John R. Wilkinson with a copy of the letter 
sent to Bank Meili with instrucdons on howto format the SWIFT messages. 


From; John RVVLKINSOtVHBEU/HSSC Tel: 790 44466 
44 20 7260 4466 

Mail Size’ 23330 

To: Denise A Reilly/HBUS/HSBC@HSBCAMERICAS 
cc: Joe.Harpster@rnfa.com 
Anne Liddy/HBUS/HSBC@HSBCAM£RICAS 
John L RICHAR0S/HSBL/M38CAPAC@HSBC 
Brian WR1CHARDS.'MDSIWSBC®HS8C 
Quentirr R AYLWARD/MDBK/HSBC@HSBC 
Terry J BELLAMY/MDBK/HSBC@HS8C 
Nick J GtaGRASS/MDBK;HSaC@HS8C 
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Peter C BLENK/ttBEU/HSaC@HSBC 
Subject Re: Bank MeiG 

Per our conference call today, please find attached ihe letter ^5APR01 sent by 
our Paymente dept {MPD) to Bank Melli Iran London. 

Once the proposition goes live we have instructed Bank Mdli to alter the 
format of it's payments to adiieve straight through prcocessing. The field 52 
input of 'One of our clients' Is a standard phrase used by MPD iit these 
situaGons, 

Since sending the letter we have further asked Biem to or^ put ‘One of our 
clients' in field 52, thus removing Ihe chance of them inputtng an' Iranian 
referenced' customer name, that causes fall out of tie cover payment sent to 
HBUS and a breach of OFAC regulations. 

This method was successfully tested last month on a MT202 (bank to bank) and a 
MT100 (commercial) payment. 

I can understand your concerns following the recent formaitktg error detailed 
in Peter Blenk's email 15JUN01 , however I must provide some background for 
you. 

MPO confirm that Bank Meili have nor yet gone live on the new method of 
formatting payments, as we have not yet taken on ttie new txjsiness. Bank Meili 
are still formatting payments in ttieir usual method, in this instance MPD 
tailed to spot the poor input and did not follow their normal procedure of 
aHering the payment, hence it wasblocked. MPD have again confirmed the new 
formatting method will achieve straight through processing and overcome these 
difficulties. 

I hope the above detail is sufficient for your purposes and you are able to 
progress this matter forward as intimated in your earlier approval. 


Attachment; h 2C01CS01 fm MPD to 6KBQ re formatling.doc.zip 
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Sa^ Pourjanj 
Bonk MclJi Tran 
4 Moorgate 
London EC2 6AL 


3ty04y'01 


pBarSaeed. 

I refer to our meeting last monih and our telef^Kme com'srsation of tod»', I am pleased to 
advise chat foUowing tests in our payments oinroRfnent are conildett ih^ we ha^'e found a 
solution to processing your pm’menu viith minimal manual interveolioa 


The key is to always populate field S2 - if you do not have an ordenng party name then quote 
*006 of our Clients” never leave blank. This means that the outgoing payniffl! instruction 
from HSBC wiD not quote Bsik Mdii" as sender - just HSBC London and whatever is in 
field 52. This then rt^aies the need to quote ‘TX> NOT MENTION OUR NAME IN NEW 
YORK ’ in field ? 2 . 


In order to test our proposed solution we would appreciate if used Che following templates 
when subrrultiig your next payments to (he followaig custoiTier. or alternatively sutunit a 
USD 1 test pinTnsnt. 


MT202 


Yoiir Ref...- 
Related He/..... 

Amomi'Currency Value date 

DO NOT QUOTE IF IRANIAN 

Citilo.wer f^ame OR One or our clients MUST BE COMPLETED 
/68»fi908 


5fi: 

57: Binejidofy Banker (SWIFT codes -where possible) 

58: Denefictary fi'JfTFT codes where possible) 


70: .4rtv delatbfitr bene/iciary... . 

72; Fkase leave blank 
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MTIW 
Pay os above. 


!n order Tur us to onnitor / track these piQ'mcnts please caii Adrian Taylor prior to release on 
020 726041 SO. Please use SWIFT standards. Adrian niU be liappy to discuss with your 
operator ariy questions dicy hav'e re fonnacting. 


When we have made these payments we wn then ghe feedback on sny furl her fonratting 



Thank-you in advance for co-operstiort. 


Youra sincerdy 


iohn Fc'Ale 
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Fron: Susan A WRfGHT 
SWU: T^u Ocf 11 09:2S:2<1 2i»1 
To: Jorwi ALUSON 
Su&jeci; Re: OFAC 3ANCTiCN3 
importance; Normal 

Attschcnents; rm89O_0.9tf; image^l.gift Doc IJnk.hiin 

John - FY! 

Porwordsd by Susor A Vi.'RIGHT/HaMa'HSBC on 11 0;^ 2i»1 09:27 --- 

OMitfii Letter 
^OfTctaooi 23OT 


From: iftaatwwJWKlNa/HOKarKSaiC T^76C5SS1S 



To; DavkSWJ SAGi.f;¥/RLALC5AMEM/BBMt/HSBC 
ce; SussnAWRIiSKTi'HGHOi'HSSCSKSeC 
fAsfV P TAYl CMP APH/HBAF.V13EC©HS3C 

OurRof: Ycair Ref: M£M LGA 

013354 

Subject; Re: OFAC SANCTIONS 

David, 

} wiH forward to you seperatsf'/ a note I sent to Mark Taylor which I hops may clari^ 
Slings to e certain extent. 

The position is difficult because things have changed since September 1 1 . We also 
have to bear in mind pending US legislation which will in effect give the US extra- 
territorial authority over foreigr) banks, parlicuiarty if we are unfortunate enough to 
process a payment which h.ims out to be connected to terrorism. My own view therefore 
is that some of the routes tradrtionaily used to avoid the impact of US OFAC sanctions 
may no longer be acceptable. I appreciate however that the solution v/ili invoK'e the 
instaiiation of some form of automstted screening system. We are looking into ths now. 
Until this is resolved, all we can do is to ask that payments from the affected countries 


^ 


I Permanent Subcommittee on Investigations 

uonnaentiai - ^UIA i reaimenx tteques 


HSBC OCC 3873890 
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ara vetted fnanuaiFy. 'Riis is not easy and I ^ree we should talk about it in more detail 
on Monday, 

1 look forward to speaking to ■you then. 

Regards 
Matthew King 


David W JBaOLEY 



Ssnsnl Lsttcf 
10 Oct 2001 13:29 


Ssmu,' AvaanAMAROLIA 



Matthew J W Kr-JG et al 


7o: MsUSew J WKiN3a^GHQ''HSDC®HSBC . . 

ec, Susan A WtUGHT/riGHQrtiSBC^HSBC 

Mark F TAYLOR/’SM CMP APH/HBAf^.'MSBCoHSBC 

Ffonv W J SAC3i-FY/Ftl,A Lt5A McMrDSMc/HSBC 671 4 50778S7 

Oar Ref. • HCM LGA Your Aet 
012364 

Su&jict: ' C»"ACSANCTIC?JS 


Matthew, 

In the light of the current attention being given tc ttie appltcations of relevant senctiors ! 
feel that there is some need tc cianfy precisely what :s expected of ope.'etions within my 
region In relation to the application of OFAC Sanctions when dealing in USD payments, 
t do this solely from the perspectiv'e of avoiding any misunderstanding. 

A number of the OFAC sanctions could have potential effect upon business In this 
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Region, the most obvious of which are those relatirig to Iran, Libya and Sudan. As these 
are US Sanctior^. binding US persons they do not have the same effect as the UN 
Sanctions against Iraq, and on the face of d do not bind either HBf/E’s activities, or 
these cf our customers in any of the above junsdicmins. 

i recc^nise hov/ever that the sanctions do affect afl transactions in USD, and that 
payments passing through the US ere capable of being irierrtjied by the OFAC fitters. 
Even if those transaefions involve say an HBME UAE based customer, if there is e 
connection with one of the above juriscfictkms it is likely that the payment will be frozen 
pending further investigation by Of AC itself. 

There are of course risks for us if such a payment is frozen, particularty if the monies 
are fmzen as between correspondent banks, and yet we have shown a credit to the 
customers USD account here in the Middia East, in tha past wa hava bean obliged to 
pursue a release of rnonies which have been released to a customer, but have been 
frozen through the correspondent banking system in the US. 

vVhat i am curreniiy unclear about Itovraver is dra extent to which we are expected to 
police end observe the OFAC sanctions wharr dealing in Iransactionia for our customers^ 
Recent notes seem to siqg^t that we shoiM apply the OFAC Sanctioris regardless of 
jurisdiction. 

As I ur^derstar^d the currant position we do routaiely, and across tha Group, adopt 
differing approaches to paytrtenis potentiatty subject to OFAC sanctions, than to those 
payments that are u.naffected. 

This is achieved by 8 number of different mstheds. 

Vt^hat I am unclear about is whether these procedurres is viewed as being inappropriate, 
and thus should be disallowed We do not structure these pa^'ments against a specific 
request from the customer, rather we underteka this slrjcturing as a routine. ! am 
advtsed that there may even be software irt the UK which filters such payments for 
restructuring in the event that the origlnat message has been structured in such a way 
that it will be caught by the OFAC filters. 

Were we to disailow al! payments which are potentiaiiy subject to the OFAC process, or 
forward messages in such a way that they would be caught, then cleariy this would have 
a significant affect upon our buskiess wHhin the Middle East, but also the Group’s 
business within corresponderit bailing. 

Eguailv given the likely volumes it is iripract'icai to sutxnit each payment to a process of 
referral to HBUS. 

I would be grateful for your clarification as to whether what is curently going on is 
acceptable, or whether we should be adopting a different practice. 
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1 rsccQnise ihat with regard to sanctions wnich claarJy tind HBME (e.g. - Iraq) wa have 
no ChOiCO other than to ensure ttiat sanctions are observed, that we undertake no 
transactions which are potentially caught by the sanctions, other than those pennitted 
on the food for ot! basis. 

i have separately resolved the issue of EU sanctions, which would theoretically bind 
HBME as an EU person, where ws have confinnation that to observe the sanctions 
within UAE would piece the bank at risk of douWe jeopardy. 

I apologise for the length of the note, but having ^ken to Mark T aylor both of us are a 
little unclear as to how ter we are expected to obset\'e sanctions which are non- binding 
in our jurisdictions in the current climate. 


David 
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r HSBC-BNI_E 006S949.txt 

From: ANNE LI0DY/H8US/HS8C 
Sent: lC/21/2002 8:30:40 AM 
To; CAROLYN M WIND/HBLiS/HSBC9K5BCAMERICAS 
CC: DENISE A RE1ULY/HBUS/HSBC@HSBCAMERICAS 
Subject: IRAN 

Carolyn, I just spoke with Denise, we have tenatively set a date of Friday 
10/25 at noon to call (5ary Boon on h1s home nuaber re Bank Helli. will you be 
available? THanks. 

Forwarded by Anne Liddy/HBUS/HSBC on 10/21/2002 09:34 AM 


Anne Liddy on 18 Oct 2002 09:35 
Note 

18 Oct 2002 09:35 

From: Anne Liddy Tel; 2i2--525-590$ . 

Title: Senior vice President Location: 452 Sth Ave, Floor 07 

Work(5roup: 

corporate Compliance Mail Size: 55201 

To: Denise A Re111y/HBUS/HSBC0HSBCAMERICAS 
Carolyn H Wlnd/HBLi5/H5BCOMSBCANERlCAS 
subject: IRAN 

r don't really know what else l can tell Gary that has not already been 
discussed. .. but anyway 1 guess Z need to set up a call. Could you both join 
me, plset vdiat times would be good for you on Monday? 

Forwarded by Anne Liddy/MBUS/HSBC on 10/18/2002 09:34 AM 


Gary BOON 9 HSBC on 17 Oct 2002 08:11 
Note 

17 Oct 2002 08:11 


From: Gary soon 0 hsbc 
T itle: Location: 
WorkGroup: 

Hail Size: 


Tel: 


2138 


To: Anne Liddy/Haus/HSBc®HSBCAMEftiCAS 
Subject: IRAN 

Anne, the GRM and I are booked to visit Iran in November and ideally want our 
position sorted re usd payments. I’m therefore getting eager to talk to you as 
if we can there are massive opportunities- 

It appears London and Iran are seeking a solution to this so you help is much 
appreciated. 

It is the weekend Thursday and Friday here but l‘« more than happy to talk to 
you either tonight or tomorrow. Call me at hone at between 12 noon & 1pm your 
tine on 00 971 4 3481659 if you can. 

If not can we make It Monday? 


Regards 


Gary 




Anne Liddy on 09 oct 2002 08:24 
Note 

09 Oct 2002 08:24 


Page 1 
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HS8C-8NI_E D065949.txt 

From: Anne Liddy Tel: 212-525-5906 (,' >’ 

Title: Senior, Vice, President, Location: 452 5th Ave, Floor 07 

WorkGroup: 

Corporate Compliance ' Hail' Size; - 6657 -- 

To: Gary BOON/MGR PCM MEM/HaM£/HSBC@HSBC 

cc: Carolyn M wi nd/HBUS/HSaC@HSBCAMERlCAS 
Denise A Rei1ly/HBUS/HSSC@HS8CAM£RICAS 
Nancy Hedges/HSUS/HSBCOHSBCAMERICAS 
Paul PRQCTOR/HBEU/HSSCSIHSBC 
Subject: Re: Bank MelH 

Gary, l have a mtg already scheduled for 9am NYC time today. l will try to set 
up a call for another day/time and get back to you. 


Gary BOON @ HSBC on 08 Oct 2002 23:53 
Note 

08 Oct 2002 23:53 

From: Gary BOON Q HSBC Tel: 

Title; Location: 

WorkGrouo: 

Mail site: 2797 


To: Anne Uiddy/HBUS/H5BC®HS8CAHERICAS 


cc: Carolyn M Wind/HBUS/HSBC@HSBCAMERICAS 
Denise A Reilly/HBUS/HSBCeHSBCAMERICAS 
Nancy Hedges/HBUS/HSBC0HS8CAMERICAS 
Paul PROCTOR/HBEU/HSaCeHSBC 
Subject: Re; Bank Melli 


Gary BOON ® HSBC on 08 Oct 2002 23:53 
Note 

08 Oct 2002 23:53 


From; Gary BOON ® HSBC Tel: 

Title: Location: 

WorkGroup: 

Mail Size; 2797 

To: Anne Liddy/HBUS/HS8C8HSeCAMERICAS 

cc: Carolyn M Wind/HBUS/HS8CeH58CAM£RICAS 
Denise A Remy/HBUS/HSBC®HSBCAMERICAS 
Nancy Hedges/HBUS/HSBCaHSeCAM.ERICAS 
Paul PROCT0R/HBEU/HS8CSHS8C 
Subject; Re: Bank Melli 

AJine, thanks for the update. 

As your aware H8EU have to comply with the fatf regulations soon, which means 
full disclosure for all mt10Q/mt 103 paynenis from all banks, 

As my previous e-mail explained these payments would then be sent to HBUS for 
processing Cexamples of the types of Instructions you're receive have been sent 
previously) and it is my belief that they will full into the normal ofac 
process. Your already processing uSO payments from two existing accounts held 







Confidential - FOIA Treatment Requested by HSBC N, America Holdings, Inc, HSB00162733 


Confidential - FOIA Treatment Requested by HSBC N, America Holdings, Inc. HSB08071278 
Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 7687374 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00788 Fmt 6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



775 


VerDate Nov 24 2008 


In London I 


H5BC-BN1^E 006S949.tXC 


The Biajority of payments will be processed with hbeu sending a MT100/NT103 to 
the beneficiary bank and H0US will receive the HT202 cover payuent Cagain your 
already doing this). 

Can I suggest that I call you today to discuss this further at 9ani your tine? 
Can you set up a conference call that Interested parties (in cc above) can join 
in? If it*s too short notice please advise na of a convienient tinse/date (J’ta 8 
hours ahead). 

Regards 

Gary 


Anne Liddy on 08 Oct 2002 1S:S5 
Note 

08 Oct 2002 15:55 


From: Anne Liddy Tel: 212-525-5906 

Title: Senior vice President Location: 452 Sth Ave, Floor 07 

WorkGroup: 

Corporate Compliance wail Size: 4g218 

to: Gary bcxin/wgr pcm meh/hbme/msbcohssc 

cc: Carolyn H Wind/HBUS/HSBCeHSBCAMERICAS 
Denise A Reil1y/HBU5/HSSC6HS8CAHERICAS 
Nancy Kedges/HBUS/HSBCOHSBCAMERICAS 
Paul PftOCTOR/HBEU/HSBCflHSBC 
Subject: Bank Meni 

Gary, l understand from Nancy Hedges that you are looking for feedback on the 
Bank Helli proposal. The position of HfiUS Con^sliance remains unchanged re this 
proposal in that all transactions involving flank welll must be fully disclosed 
and represented In one single transaction that reflects the complete flow of 
funds. Full disclosure will allow the hbus payments filter to stop the USD 
transactions involving Bank Melli Md will allow for review of the transaction 
by HBUS Payment Operations staff to ensure that the transaction fits the 
definition of a U-turn transaction allowable for processing under the u-turn 
exemption of the OFAC Iranian sanction. 

It is still my understanding that the document attached below (see email from 
oenise Reilly dated August 29, 2001) is the operative document that outlines 
the operational process and transaction flows. The transaction flows were 
approved by Legal Counsel as fitting the u-tum exemption requirements, The 
next step was that the operational process must be agreed between HBUS Payment 
Operations and HB6U Payment Operations. At which point, prior to making any 
proposal to Bank Kelli (or any other Iranian banks]) HSU5 Compliance must inform 
OPAC and our Senior Management Committee of the proposal and the agreed upon 
operational procedures. 


Forwarded by Anne Liddy/HBUS/HSBC on lO/OS/2002 03:13 PM 


Nancy Hedges on 08 Oct 2002 14:45 
Note 

08 Oct 2002 14:4S 

Prom: Nancy Hedges Tel: 302-636-2333 

Page 3 
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Tide: First vice President Location: Delaware, Floor 3rd floor 

WorkGroup: 

Funds Transfer Mail Size: ' 43230 


To: Anne'Lldd 
Subject: Ban 


I^/HBUS^HSBCSHSBCAMERICAS 


Forwarded by Nancy Hedges/H8US/H5BC on 10/08/2002 02:46 


Denise A Reilly on 16 lul 2002 09.-Q4 
Note 

16 3ul 2002 09:04 

From: Denise A Reilly Tel: 302,636.2500 Del 

Title; Senior vice President Location: Delaware 

WorkGroup: 

payment Sen/ices Mail Size: 42022 

To: Nancy Hedoes/HBUS/HSBCSHSBCAMERICAS 
Subject: Bank Melli 

This should be the operative document for discussion. Due to increased 
regulatory centals in the UK, any previous proposals by them are no longer 
operative. 


Forwarded by Denise A Reilly/HBUS/USBC on 07/16/2002 

09:04 AM 

Denise A Reilly on 15 Apr 2002 19:10 
Note 

IS Apr 2002 ISMO 

From: Denise A Reilly Tel: 302.636.2500 Del 

Title: Senior vice President Location: Delaware 

WorkGroup: 

Payment Services Hail size: 406B4 

To: 3ohn R WILKINSON/HBeU/HS8C®HSBC 
John FOWLE/HBEU/HS8C9MS8C 

Geoffrey p wsaser/hbeu/hsbcohsbc 
A drian TAYLOR/HBEU/HSBCflHSBC 
Nancy Hedges/HSUS/HSBCSNSaCAMERlCAS 
Stephen A Tedeschi/HBUS/HSBC0HS8CAMERICAS 
Subject: Bank Melli 

in preparation for our meeting this week, attached is the Bank Melli 
transaction flow that was previously put forward and subsequently agreed to by 
John Richards. Since this has been vetted" by legal counsel it should form the 
basis for our discussion. 

Will speak to you on Wednesday. 

— Forwarded by Denise A Rellly/HSUS/HSBC on 04/15/2002 

07:05 PM 

Denise A Reilly on 29 Aug 2001 19:29 
Nate 

29 Aug 20G1 19:23 

From: Oenise A Reilly Tel: 302.636.2500 Del 

Title: Senior vice President location: Delaware 

WorkGroup: 

Payment services Kail Size: 37527 
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HSBC-BNr_e 0O6S949.t)tt 

To: Alan WILKINSON/HD HTV ASP/HeAP/HSBCSHSBC 
Quentin R ayuward/mobk/hsbcShsbc 

cc: Carolyn M wind/HBUS/HSacSHSBCAHERlCAS 

Matthevf 3 W KINC/HGHQ/HSBCeHSBC 

Elizabeth Protoraastro/HBUS/HSBCOHSBCAHERICAS 

John L richards/hsbl/hsbcapac<Shsbc 

Subject: Bank He1li 

The attached document reflects the procedures that have been developed, with 
the advise and consent of legal counsel, to support Sank Melli payments through 
H3EU/H60S. The procedure is designed to aaet both regulatory and service 
qua1i^ regui rements . Assuming that transactions sent to HBUS meet the u-turn 
qualifications, all transactions will be processed saneday of receipt. 

On Thursday of next week (G September) we will be meeting with the Director of 
the Office of Foreign Assets Control and wie of the agerioa items is to 
determine their position regarding this business, xn anticipation of that 
meeting, Carolyn ^nd and I would appreciate your revieiring ^e document and if 
possible meeting with us tomorrow, 10 a.ffl. ti*e/3 p.n. London time, via 
conference call to discuss. Please confirm ywr availability and a number where 
you can be contacted. 


Attachment: Helli.doc.zip 


Page $ 
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HSBC-BNI_E 0066016 

From: ANNE LIDDY/HBUS/HSBC 
Sent: 1/21/2003 1:00:08 PM 
To: ‘‘CROCKER, TOM" <TCROCKER@ALSTOM.COM> 

CC: CAROLYN M WIND/HBUS/HSBC®HSBCAMERICAS;DENISE A 

REILLY/HBUS/HSBC@HSBCAMERICAS ; ELIZABETH PROTOMASTRD/HBUS/HSBC0HSSCAMERICAS 
subject: usd Payments from Iranian Banks 

Tom, 

At Carolyn wind's request I am forwarding the attached memo to you for your 
review and comments. As you may recall, it was agreed that our London/Middle 
East office would put together a business case regarding plans for providing 
USD payment services to Iranian Banks Cstenwning from an initial request for 
HSBC Bank USA to process USD payments for Bank Melli). This memo outlines that 
business case. After you have reviewed and provided us with your comments, 
which may require amendments to the business case, hsbc Bank USA had intended 
to present the business case to our Senior Management Committee prior to 
acceptance of the plan. we appreciate your attention to this matter and look 
forward to hearing from you on this much discussed topic. Thank you. 

Regards, 

Anne Liddy 
HSBC Bank USA 
compliance Department 

Forwarded by Anne Liddy/HBUS/HSBC on 01/21/2003 11:00 am 


Denise a Reilly on 16 lan 2003 09:19 
Note 

16 Jar 2003 09:19 

From: Denise a Reilly Tel: 302.636.2500 Del 

Title: Senior vice President Location: Delaware 

WorkGroup: 

payment Services Mail Size: 243262 

To: Anne Liddy/HBUS/HSBC®HSBCAMERICAS 
Carolyn M Wind/HBUS/HSBC®HSBCAMeRICAS 
Subject: USD Payments from Iranian Banks 

I'm not sure why you were not cc’d on this, but I am forwarding for your 
review. Perhaps we can discuss tomorrow when I'm in nyc. 

Forwarded by Denise a Reilly/HBUS/HSBC on 01/16/2003 

09:20 AM - 

From; Nigel J weir®hsbc on 16 Jan 2003 03:56 

To: Denise a Reilly/HSUS/HSBCSHSBCAMERlCAS 
Malcolm 0 eASTWOOO/MOBK/HSBC®HSBC 

cc: Nasser homapour/HS8L/hsbcapac®hsbc 
N igel J WEIR/RM 18 MeM/HBME/HSBC®HSBC 
Gary boon/mgr pcm mem/hbm£/hsbc9hsbc 
J ames 3 Y maos£n/hbeu/hsbc®hsbc 
subject: USD Payments from Iranian Banks 

Denise, 

Attached is our business case signed by Rick Pudner, seeking hbus's approval to 
process USD payments originating from Iranian Banks. There has been a great 
deal of correspondence relating to this issue over the past 2 years so we hope 
this document will precipitate a positive resolution. 
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H5BC-BNI_E 0066016 

Kind Regards 
Nigel 


Attachment: Iran business case.doc.zip 


Confidential - FOIA Treatment Requested by HSBC N. America Holdings, inc. HSB03793153 
Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 340751 1 


VerDate Nov 24 2008 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00793 Fmt6601 


Sfmt 6601 


P:\DOCS\76061.TXT SAFFAIRS 


PsN: PAT 



780 


VerDate Nov 24 2008 


HSBC Bank Middle East 


Memo 


To 

Denise Reilly, Senior Manager, Operations, HBUS 

Malcolm Eastwood, Senior Manager, Ot»t^ons. HBEU 

Date 

January 2003 

From 

Rick Pudticr, Head of CIB, Middle Bast, Dubai 

Sender’s Reference 

cc 

Dr Nasser Homapour, tran Representative, Tehran 

Nigel Weir, GRM, Middle East, Dubai 

Gary Boon, Global Payments & Cash Mgmt, Dubai 

James Madsen, Global Payments & Cash Mgmt, London 


Subject 

BUSINESS CASE - USD PAYMENTS FROM IRANIAN 
BANKSflENTITIES 

Receiver’s Reference 

To Facsimile No. 

From Facsimile No. 

Total No. of pages 


Executive Summary 

This paper has been produced in order for the Senior Management Committee (SMC) 
of HSBC Bank USA (HBUS) to evaluate whether or not HBUS will process US 
dollar (USD) payments initiated by banian Banks via accounts held with HSBC Bank 
P!c (HBEU), using the process provided to HBEU by HBUS dated 29 August 2001. 
This operational process may be amended at any time and HBBU will be required to 
adhere strictly to the new procedures as advised by HBUS. 

Currently, it ts estimated that Iranian banks issue up to 700 USD payments a day 
using their USD service providers, mainly banks in tte UK and Europe, which in turn 
use their New York USD correspondents to effect the payments. It is believed that 
some swvice providers amend die payments to ensure Iran is not mentioned in the 
body of the payment instruction to Uieii USD correspondent. This process miniraises 
the risk of payments being referred to OFAC. 

Ihstituticiaal Banking and PCM believe there is a substantial income opportunity to 
sell a USD payments proposition to Iranian Banks in view of the impending FATF 
regulations, which are due to become effective in Q2 2003. The new regulations 
dictate that each bank (effecting the payments behalf of their clients) within each 
FATP member country must ensure the full name, address and account number of the 
ordering party are quoted on the payment Instiucdoss. This increases the risk of 
Iranian payments being held in the USA as they may fall foul of the OFAC 
regulations. The Iranian Banks have now prioritised diis issue and are now actively 
seeking a solution ffom their banks, including HSBC. 

We believe that HSBC could offer toe Iranian Banks a solution that facilitates a way 
for them to effect USD payments to beneficiaries outside the USA using the ‘U-Tum’ 
process documented witoin toe OFAC regulations for Iran. HBUS have already 
provided HBEU with their operational requirements to process these U-Tum 
payments and therefore SMC approval is being sought prior to HBEU scoping 
potential IT changes and the production of a service proposition for the Iranian Banks. 
This business case also highlights thepotential risks should approval not be given. 
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Background 

Iran Representative office was fonnally opened on 11th of November 1999. 
Following flic establishment of the office the volume of business between Iranian 
banks / companies and Group officM has bwn increasing all the time. The Group now 
has an excellent relationship with all Iranian banks and some very large Iranian 
corporates such as National Iranian Oil Co, National Petrochemical Co, National 
Iranian Gas Co, National Iranian Steel Co, top franian insurance companies, Minishy 
of Power, Ministry of Post and Tdecomioanications etc. 

About 80% of &an's foreign trade, totalling USD2S bilUon. is denominated in USD. 
&an undertakes a consid^able volume of tra<te in markets in which HSBC is 
represented, enabling the Group to leverage its global footprint. Our Iran 
Representative office has worked hard over the past three and a half years to build a 
positive image of &an through road shows, visits, supporting trade missions and by 
referring good Iranian business to Group oftices. Tliis has shown HSBC to its 
customers as a bank that is able to do business in difficult markets and as a result 
added considerable value to the Group. Stratepcally, Iran is the country in the Middle 
East region with the most development potential for HSBC in the long term. It has the 
world's fifth largest oil reserves, second largest gas reserves, substantial mineral 
reserves and a large well educated population. 

The Iran Representative office was established to develop relationships and credibility 
for HSBC in the market, Tbis objective has been achieved and the Group is well 
placed to develop its operation from a position of considerable goodwill. Details of 
HSBC’s business with Iran and Iranian entities are shown in Appendix 1 . 

Opportunity 

The FAFT regulations arc due to be implemented in Q2 2003 and will force banks, 
within the FAFT countries, to disclose all details of the ordering and beneficiary 
parties, effectively ending the practice currently undertaken for Iranian payments. The 
Iranian banks have yet to bear from their existing providers, mainly Lloyds Bank and 
Standard Chartered Bank, and we believe there is currently a window of opportunity, 

However, during the past two years. HBEU and HBUS have been in discussions about 
how we can process these transactions, identifying the operational processes and 
compliance issues involved. After meetings with OFAC and external counsel, HBUS 
has produced a payments process. It will be scoped by HBEU, subject to SMC 
approving this paper, in order to identic tiieir operational, compliance and IT issues 
before providing Sales with a service proposition. 

HBEU / HBUS have identified that by using the ‘U-Tum’ payment method, Iranian 
backs can effect transactions to beneficiary accounts outside the USA. This roetiicid 
will allow HBEU to send HBUS payment instructions with Iranian entities quoted on 
the instructions and yet at the same lime be congjliant with FATF and OFAC 
guidelines. The proposed service proposition will provide a suitable disclaimer to 
ensure HSBC is not held liable for any payments which have not met the ‘U-Turn’ 
criteria and as a result been refetred to OFAC 
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Bene^ts 

• Payment volumes are estimated at 71X) pcc day of which 70% will be commercial 
payments. Transaction income is estimated at USD4M, assuming that HSBC wins 
all die business at an average item price of USD30. We believe that charges being 
levied by other banks at the moment are far higher than this. 

• Balance income in HBBU. 

• Reputation within Iran and the potential to leverage addidonai business. 

Risks If Approval Declined 

• If HBUS declines to process these transactions, tiien consideration will need to be 
given to closing all existing Iranian bank USD accounts with the HSDC Group, 

• Should the above occur the cuirmit Group annual income of USD2M from hanian 
Banks will be under threat. 

• The market will perceive that HSBC does not support banian business 

• The adverse impact on our Representative office in Tehran. 

Summary 

It is anticipated that Iran will become a source of increasing income for the Group 
going forward and if we are to achieve this goal we must adopt a positive stance when 
encountering difflcuities. We are aware of the concerns expressed by HBUS but 
strongly believe that by working together we can overcome them using means which 
are perfectly legitimate and in accordance with rules laid down by the relevant 
regulatory bodies. I hope we will be able to resolve this issue otherwise I fear we will 
destroy future value in a market which has substantial potential for the Group. 

It will be appreciated if you could raise this paper to your SMC at the earliest 
opportunity and advise me of the decision as soon as possible. 
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Appendix 1 

I- Medium Teun Project Finance Line -Various Group Offices. USD500M. 

This line covers a number of individual EGA backed project finance loans. It is 
denominated largely in USD. The fedlity requires that Iranian banks effect regular 
USD repayments. So far under tins facility USD35M is utilised. HSBC now has a 
mandate from National Petrochemical Co. and Tcchnip of France for USD155M to 
arrange financing for Olefine 9 project TWo other projects, one for USD145M for 
Styrene Monomer out of the UK and one for USD170M out of Japan will be financed 
by HSBC through structured finance outside die riiove line. The latter, for Mitsui with 
JBIG cover is already finalised and die otfier one is near completion. The provisioning 
for Iran has been reduced to 5% in December 2002, which will make it easier for 
HSBC to undertake more projects in tan in the near future. With this in mind HSBC 
Project and Export Fmance have decided to increase the above line to USDlbn. 

2' Short Term Trade Refinancing Agreement - HBME Dubai USD50M, BACB 
USD25M, These lines are denominated in USD and require the USD loans to be 
booked at HBME Dubai or BACB London. 

3- Wheat Finance lines with HSBC Australia USD50M and HSBC Canada 
USDIOOM. 

4 • L/C's Issued for tanian Companies Abroad * Various Group Offices. 

HSBC offices are developing relationships with tanian Government and non - 
Government companies. The UC's issued are normally denominated in USD. 

Following NIOC’s acceptance of HSBC as one its listed banks, HSBC Bank Middle 

East now handles tan's oil export related UCs. Turnover for this business is about ; 

USD400M per year. ^ 

5 - USD Clearing Accounts. 

HSBC Bank pic has a number of existing USD accounts for tanian banks, which are 
used for payments clearing purposes. 

6 - Treasury and Capital Markets 

HSBC Investment bank has transacted in excess of USDlbn of Bond business with 
tan generating an income of over GBP700k in 2002. HBME Dubai and HSBC 
Markets operate active foreign exchange and money market lines with the Central 
Bank of tan and tanian banks. 

7 • Potential Business 

a- HSBC is actively pursuing an Asset Management mandate with the Centra] Bank 
which will require USD payments to be paid and received, 
b- tan has entered the capital market for die first time in 20 years, issuing USDlbn 
worth of paper through the Central Bank. The budget for the next year is USD 2bn 
with some to be issued in Islamic form. HSBC has a very good chance of being 
nominated to lead manage part of the conventional issue and a good chance of being 
nominated for the Islamic issue. Both require USD payments to be paid and received, 
c- HSBC may form an Internet Bank in Iran, which will require an active USD 
payment capability. 


The key thing to note is that ail existing and potential business involves a regular 
and substantial flow of USD payments both tn and out. 
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From: Nigsl J WEIR 

Sent: Mon Fab Oi 13:44:14 2003 

To: DawldWJBAGLEY 

Cc: Rick A RJDNER; Jb BUNTHORNE; Nasser HOMAPOUR; John F ROOT 
Sii>Ject: Memo: Re: BUSINESS CASE - US PAYMEIfIS FROM IRANIAN BANKS/ENTiTIES 
impormnce: Normal 
Attachments: irnaoe_0.sif 


O 



Davij. 

As I prep^ed the majorityof the business case I think it is appropriate that I respond on behalf of Rick. 

Firstly. I wouU like to stress that under no circumstances am I suggesting that the HBUS Is acting ot 
should m future consider acting improperty. Indeed I hsiA specified on more than one oecesion that we 
must be in fuB compliarwe with OFAC, FATF and other leguletory bodies. 

3rd paragraph of the section heeded Opportunay: 

” This method will allow HBEU to send HBUS payment instructions with Iranian 
entities quoted on the instructions and yet at the same time be compliant with 
FATF and OFAC guidelines* 

1st paragraph of the section headed Summary: 

"We are aware of the concerns expressed by HBUS but strongly believe that by 
working together we can overcome them using means which are perfectly 
legitimate and in accordance wHh rules laid down by the relevant regulatory 
bodies." 

In simple terms the aim of this business case was to reccmmend that we need to try 
and taka advantage of a significant business oppc^tunity whilst at the same time actively 
complying with regulations laid down by various regulatory bodies. 

Kind Regards 

Nigel 


03Peb2003 

Memo 



Sort by: Marion O ROACH 


To: Rick A PUDNERyHD CTB MEM/HBMEmSBC#HSBC et ai 

Tc: Rick A PUONEFVHD CIB MEMAfBM&HSSC^H^ 

JD eUNTHORNe/CSOS£L4faAP/HSSC<9HS8C 


IPermanent Subcommittee on Investigations 


EXHIBIT #45 


Confidential - FOIA Treatment Reqi 


A. 


HSBC OCC 8876487 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00798 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



785 


VerDate Nov 24 2008 


cc: Nasser HOMAPOURJHSQU'HSBCAPAC@NSBC 

NigelJ WEiiVRM iB MEM/KBM&HSBC@HS3C 
John F ROOTiHGKQ/HSBC@KSBC 
bee: 

FromrOevidWJBAGLEY Tel: 7961 8S46;44 2079 af«645 
OurRefi YourRst 

Subtect: BUSINESS CASE - US PAYMENTS FROM IRANIAN BANKS/ENTITiES 

Rick 

I am of course aware of the efforts belrtg ma<ls to And a compriant way of nsootlatktg the OFAC sanctions 
' >, and providing US dollar payment serviees to Iranian tMfiks. 

I have however received a copy of the business case dated January 2003 which has been relerr^ loour 
colleagues In HBUS. 

We clealy need to address this issue and ettampt to find a corrpllant approach, and to that end I have 
asked one of my colleagiies in GHQ CMP, John Root, Id assist with this process. Ha has already started 
looking at the OFAC sanctions from a Group perspecGve. 

At this stage, however, i would be grateful if we could emrclsa groatar care with regard to the content of 
written material being ferwarded to our colleagues In HBUS. 

The business case inclixles a number of express teferotces to piacticee which imy constitute a breach 
of US sanctions, Including the OFAC provtstons, and could providB the basis lor action against the HSBC 
Group for breach of those sartctlons. or sedcing to facuttaie a breach. 

Could I suggest that future corrmunlcatlonson this subject are perhaps cleared through John Root, or 
mysetf so as to avoid relative sensitive references. 

1 have asked John to discuss maKers with HBUS arm seek to take matters forward. 

O 

Regards 

David 
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From: Manon O ROACH 
9snt: T«je OrtZ1 17:10:24 2003 
To; JoJin F ROOT 

Siftjact: IRAN - STRATEGY DISCUSSION PAPER 
Importance: Normal 

Attachmeiys: ima(is_0.gtf; lfrHge_t.gif; imaQe^S^^ image.S.gif. imaee_4,gif; im8ge_5.gif: Doc 
LinK-htm; ion - Slrat^y Discussion Paper -OctOXdac; OFAC SancUons.doc 


John 

i refer to our aiscussions corK&rning the ban strategy. 

AitachediS tn>ih the incoming, and myoulScHngrtatsreNrrytutha vanous issues. 

1 wouiti suggest that we do not tske furttier oedon until thcfo is sons cioflPeotlon as to the general 
directier! we are expects to tsi®. 


Devid 


Hole 



From; Paul L LeelHBUSIHSBC A HSeCAMERiCAS Tai; M2w52S>eS33 

Sent by: Nifcia VenegasgptSBCA''JI=RlCAS 

To- David WJBAGLFV 

T«: Davy WJSAGLEVMGHQ.'HSecOHSSiC 

bee; 

Subjaet: IRAN- USD PAYWS^TS 


I Permanent Subcoimnittea on Investigations 

EXHIBIT #46 
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N«rtB |SI>aMOS12:3« 


fittn. TQinaftfAHtsf 

TiBb; FVesMentaCEO 

WmlVQ^eOfi; &»ipf Offic* 


Z12-5'2iJSeC 
«5ZSttiAv».ni»r 10 


To: Michaet B Gatlsaher 

To: MMtaelS G^Haghe'J>HSUS-'HSBC3^^^BCA^^lCA8 

cc: Paui L Lee 

ee: Peji (. UM/HDU5--HS&COK3BCnMERICAS 

Sub)«et Ho; IRAN- USD PAYWiEKTS 

Mithael. 


My main corrmentto David wbs. as state:; io the text, thatlhereisr'.sinsertous p<^(tlcal and rsputaticna! 
rbks within th« USA if they proceed with this and thtrf he should ensure that Paul Lee Is kept in the loop at 
all fanes fiecause at the prior wsm he has done both on this and son% recent appimaches frcin Group 
oKces Btisut opportmities in Ubys. 

Yoassef 


iA;Aa«i B Otr^kjlsr 

TMle. Ezeedh'cV'R! President 

WhxkCfBKp: 016941 Pynrt end CMnWgirc 


Tel: 21£-eS5-£M3 

Uiottion: 4SZ StI' Ave, FiBsrS 

-Mi,.. 
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To; YtHBssiANasnTfBUS-HSBCQfHSBCAMERCAS 
SubjecJ: iPjJJ'i-USOPAVMSNTS 

Vowssef, 

The be!ow rule sitggesls (hat thel you have hal meant tftsciissimis on this topic. Appreciate any 
guidance yet* may have on ho«' you wish ue to proeeed. 


Michael 

Fotv-KrOrdhy M!;-»9iec3»itegner.V«'JS,’H59Cwi l(yw?(i®10-2SAM — 


-t4 0st2NOfC;S7 


From: BHANOOOLA^iHSae 


Tefc 



To; Miehsel 0 Ganaghcr.-HOU&Ha&CgiHSEiCAMCPICAS 


cc: G ary BO ON, et al 

ee: <^tyaoONiiMCAP'CMMEI<«H8ME'H59C@)HSeC 

t^sei J V^IFVRM IB MEM/t«ME/l-dBC;Stn£BC 
Sub^i: iRAtvUSDPAVMCMTS 

Uictiael, 

Trust you are wail. v\e rtac cscussod Iran a \'?Kte s(p ana since then tftcrc has been a lot of wotl; that 
Oenise Riley fittm your team and Gary Boon Iiom the MeMte East have done on Iran payments. Wth the 
improved siluaicn in the Mbdi'e East post tie Iiaq wei, D(>«4d HotiQkIrison fHoMc Dep'uty Chairman) Is 
keen on eaptoring possSile biAlness opportufrites and has dtscvsseC this paper with Yo'jssef Klasr u a 
recent cflsHe. 

Steve Banner (HSME Rtanninpihas suiiBested a possible way forward, however I had wanted to drseies 
ihb with you Toi your iriputs. Lei rr« know when you am avttriedtte for a qiiuH lOnilnuta call 

Regards 
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A^y 

forwards:! tv Alay SHAMDOOU on ionooiis- 


0SOct20D3 



To: Aiav BHANDOQLA/RM PCM MEM.»[BN<£^S BQ£)HSBC «.n| 


To Ajsy BHANDOQLA.'RM PCM M£M/HBM£.«SBCeHSSC 

C*fy BOOHWGR PC.M MEPiVl-B-M5>+SSC@HSSC 
cc Dswd H HOEKSKINSON'OCM MEM«aMBMSecaMS9C 

Joi?) BLAMTHOP.NE/HD CIB 
Paut L L.ee.'HSL'SfrlSSCeHSBCAMSRlCAS 
Camlyn U VV^dJHBU&'HB8C@HSBa^RICAS 
Warren LEAMING/RLA LGA MEM/H».<E/HS3CAHSBC 
!4a»»r HOVAPOUWHSeL/HSBCAPAOgHStSC 
J n^!R,KU IB UEi’A'H^1B,'HSBC@HSdC 

ccc- 


Frt.m; S'bvh BA'4NER T«irS?1 4 5906260 

Our Ref: Vosir Ret: 


Gub^tS: IRAM-iJanPAYWENTG 


AJsy I Gsr/, 

As discussod, I sftach a copy nftftR drafl discussoc paper on Iren. 

David HodgWnson discussed the paper, end the general »pic ot Iran, witft various mentbers of tno top 
Isairt duiiitB lecenl ulTsite in Londun Kulnblv, Iw held dccusslons with Youssef Nasr covering, 
amongsi other things, ihe topic of USD payirents. 

David advised yesterday that he Is keen for HBME.!osaihMwltn HBUS, loexpior? in rrxrre detail the 
alramsdvs ways In which w'e raiglii oe aDismoAer USD payment servtcas cd irartlan barUs. Youssef Masr 
has suggested that our Rrst point ot contact in HBUS should t» Paul Lee, ih«ir leijaJ advisor 

I harts hrietieiephone conversatiofl with Pault«s afternoon duitos which we agreed that the best way lo 
takethh toward wouia M to have the rolevBni PCM Bpeoaihiswilhin nanh organisabon wort together on 
the preparation of s feaei&iliiy study that exaratnss Ore slicrrativc eptsons and the rtsxs sssaetnted writh 
each. 

Paul has recommended that you work closely urKh exsemet legal counsel in Vyashrtgion to ersure mei iha 
various legal end compliance implieatfonsofeech option ar« properly considsred. Paul has suggestod 
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Ihsiycu make contact with Carctyr. VMrtd. HSUS' Head of Ccanpli^>cc. whc wlil be able to put yen in 
oortflct wnn their fWJmmerKJttf ejctemei counsel. 

I vvouid greatly appreclam it if youcaddpiuBitKbBwwahB vwyriofia'/ing a lirallof tie fea^bi'ity study 
available kx revtew by HBk^&HBL'S senior rranagsmen! !>y 21 November. 

Thinks and regards 

Stews 

Pow»nJedsr Rannfr in iO«UWaW3- - ■ 


C2Ort2C03 



Toi.Jflir. F. E DWARiyH GHO>'HSBC @HSBC csal 


To- lain F EDW«?cyHGHQ/HSBCa.4SBC 

re- Oavid M HOOGKiMSWrDCH MEMrHBMe/HSBCaHSBC 

Thl W O'BRiFhURfiU PI rt fiHO«GH<ajHSBC@H5*C 

bee: 


From. SlBvo B.»NNER TeVSTI 4 3^6290 
Ourftef: Vourfto'; 

SLbjsct FOLLOWNGNOTESENTFORaAVtUHODGKlNBOH 


lain. 

As efisuisswi, I Wild artraUv sppreciate if you gouM pass the attached discussion caper id Davtd 
Hwgkinson. 

Many thanlcs and ragards 
Steve 
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HOBC 


From; D«v(tlWJ BAOLfY/HOMduWBC T«f;79Bt8M5 

44 918645 


Mar«n O RCACH 


Stfcvfc SAN T-JER ct at 

To: SUrt PtC META/HMIE/SSBC^HSeC 

CC: Tim VV O'BRiEN.'GOM !»L5 GHarHG«3rH^@KS3C 

DswJ H HODGKISSOWDCX MeM;>iRMEiHSBCOH3BC 
JWin 1- KOOT/WJ'MCaHSBC^HSBC 
bcc: 


Subfovt: iRAN • STRATEGY uiSCUS^ON PAPER 

F=ci!!)ftina the discussions irttlsted by Ajey EStiandods wSh Paul Lee wWcR I Knc* tiappened st Vausssf 
Nest's sugocstbrv, PeulLee made contee} with me expiessino some conceiris. 

z~ z ~ z ' ± 2 i"': Sl : z z'-'- 5 


~s: . --Mb blZacT rs r 

Having considered be stiBlc^y dscuccton paper, there seemad to me tc be a number of ^suas which 
require clarificatlof), parliculBfiy In relation B QFAC. 

in no psrtiiuter order Tiese are a? tollews'- 

i am not sure ihei the intertxetaiianofihe Upturn exemption rctatirq to bo iiun sanetk-mis accurate. A 
daiailed consideraGon oi ihe OFAC soncson in question inak&B l ctesr thst tbs in:t39ior and bereheiary of 
a U-ium que'rfying payonent must oe ootn nonAJS aiid nof-Hranian. i attach a summary note pr epareci by 
dchr> Root (who haepens (s bo a US lawyoO '"•'hSth i hope 6 of some asststence. aSoaugh K ts a generst 
note relating to all QRAC senctloiis not just these ralaiing to Iran. The posilioh is not helped howm«r by 
what appeals to ba conttasUciory advtce uo OFACs own website wf>ere m one exainpie SenkMeiii le 
described as teing capaWs ct tsneCtifig from a U-iun «»emptier;, but “n anoihar exampfa is excluded by 
reason of the fiicttnat d is d oovernmentownea Iraniso oanK. We wifi seek tociarLVthis apparent 
dlsuiev^noy. 

1 am cf course aware fmrnmy pest, of (he existence efsnurr^rofUSO dertofTBristsc fscSSes Issued In 
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rolstion lo Iran, corsems itpC is She extort » which sieh fecBlties. if «-.ey remain in USD, are viaWe 
cKe thers Is a requirement to disclose details of the remWet cf sattiing payments. SfttouM this not rrske 
settlement uider these feciiilies somewhat coirpleot. 

i am no! sure that HSUS ;!fA aware of rtie bcrthat HffiU we ^teaily pmviding cleehny facilities far faur 
Iranian banKs, presamaMy USD ctecronsc. Sank Martasa is named 'n the OFAC senotsorrs as o 

government owned bank and llius on the face of it not aote lo benelil frrnn U-turn exerrplinns. t trunk v*e 
should give ccnsidsmtkn to the cunent PCM sarvnes and the ktenUty of the banks to whom those 
services srecurrefitly provided in ffie context of consideiing ouroveral rsk appetite. 

lAAren um considered the Bank MeSi cieadrtg praposHlon my lerderstandlng v.>9s mat we would consider 
either errhanced screenfag of peymente tor the U-^um exemption within H8US (with presurrvabivthal extra 
cost being supported by HBUS) or adtermliveiy lookino to pre-screen payments for U-lum compliance 
within HBEU- Is this contemplated by the prop«ed exparwlod ofaclK'fty b rsiatton tc PCM? 

I am not su« that tha Currant political positen w(h repanl to the U3 has changed in any signiticanl 
manner from the point at which we determirred that Proiect Oeiuga. and the Bark Ma!l< clearing 
props: Kicr. were inappropnsts. 

As I would be reiucterrl to urrdertake signiflcim work, particularV b relaticn to the inr-urring of US 
Attorneys' lees, before it was cieer that ihis was wa^whSe, I would be grateful far an indication from you 
or those copied as to whatiw further work would be appropriais at this stage. 

Ragsrds 

David 
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Purpose 


This pspcf bu been prepared ss«h GHQ's 'Hcbfriadp1c”s^e([i«U.aouIlBlJ$’‘'iiocbJc£li!Ki'', lo; 

- ihcadopticn of amorc aegreun'c approach to ibcpuEswlaTlRwao bu^css oppoiuiniiics, and 

- w Acceleranicn orthf Group’sttnWgy of'‘g!2dsal5n^8e!ne9t'"wiHiha!i. 


Brief Couoir)' Overview 

Tbc Irxitaa market offen subs'aaiia] untapped pmcoiial for ihc HSBC Graup. That isid. there arc »cic- 

d&nographic and pollrieal ehaltenges that need ID be eoacideied tvhen detriTBioing sniegy. To hHetly summanw 

aDnK of the cc<uiilry>$pi;citic higbiightK 

Econewty 

• With a GD? of c. llCbn in 2092 Start is ihc 2rid largest cctMunity (^ler Sstidi Arabia) U (he hlkliSk East oad 

NrjftJi Aftifa rsgicn. 7h! couttry (.Npertenerd 3& avenge 5.8% pvtvtb ta GDP over she pea three ycaia, and GDP 
is forecast to reach 8% next year. This srawth has been largely driven by gcvcntmeni policy changes (some of 
'ivhleii are described TW SiiOeg petfonDimM ofUicMiandaKncuhuiBi lectors have tuso cintbibuieJ, 

» Inm's economy is beavily relinnt «w oil. Tnc coiiauy has proven reserves of c. PObo banris. lie 3" largest io Ibe 
world (£ftei Saudi Arabia ami Iraq), acsounimg for of the gkibul total. Hie development of Iran's oil 
industry' hat. however. sufTerec st a eocsequcDce of the US saociioos. Intnian oil production has reroaiitod 
rclsitvely sUble for tbt pail deeade. whilst gbbsl nil pre-dnetiou has shown? stssdy. albeit small. ysar-o.V'year 
pTDwLb t'c. H% up sitxe 19931. Whilst the mi MClor's share of (maion GDP bos declined from 3CM0lii in tbc 
l97teio lessfoait 20*!t<uvday, oil reveisue still Kconnurcpre. Xty^cofllu cuuntry'i expert e^mings and anywhere 
behveeR 4D-7W4 of ppvsnitaeot rsvenue, dependiag an the prevsilbg o3 pries. 

• (roD has an estimated ?/iMi cubic rriccrcs of oatunil tbe secuod iaigesi pmvc]) reserves in the worid (after 

Russia), sccounitng for z. 15% t'< the global (out. Iranis far bskied scrac other Middle East couniiics (c.g. Qatar 
and Oman) in the devflopinenl of its evpiM’ capabilities. TV Iraiwaii govenweni luts recogniad the potential for 
si^nifie.ani growth in this area end has set an ambitious Iwfut of coi(bime production by 21105. 

» Aceordieg o the Econombt Intelligence Unit. !tm has ooly USD’^tc of exfensal debt, a relstively sssall 
proporiiMi of arauat CDR (c. 77«). Hu; couauy hj$. in fccciii years, enjoyed a positive inde bahocc znd hod, at 
Scpicmlxre 2002, upprcximaiuly USD2lbai>rroKigD currency reserves f^iox. lOmonihs import covErt. 

• Although Iran's CMiiomic dcvelopmciit has been sueng in resent ye-as it could, ayaably.b* much sirengsr. The 
recent reforeu (diiicusvcd briefly below) have ksd a pouilvc aiTcci b-ji ibtsc bavc proceeded as 3 relatively slow 
pace. Tbc counlry’s growlb is tlill signiSctnily biodoed by the ongoiog US economic uaetious b well as an 
archaic domestic banking system dciniaatsd by bsTsauarajic and iaeiTteiciu govenimert owned banks. Should the 
anclioas ever be iiRcd, aod the iiberaliuiioo wititfives Mceleraied, the economic gmwih potential (and 
C(i|Nilut)it(ek fwi' sliutegicuUy wwil-pusitkniui bunks) would be eoomiiKJS. 

Socio-DenMgraphic 

< Imn's populstioii of c. fiSin is d<e second Ursesi in the MENA region (aiTer Egypt). On i per cupils basis, the 
eetiriry'r GDPisirelnively lerv USDl,70i). 

• ban has a slreng edvcaiion system Tire country haa a c. e5% 'liiciacy rale (977’v asvQgsi these uadsr 29). 

• However, like several oihcrcouBlricsIn ibe oy^oo. Irao faces nss|atrictr.licaegniphic ebiliesge withe. ?0'I5 sf 
the pcpulnioii uitder 2G years ef age. 

• TT»e Iraniin govemmeft has been malcing a eercereceffarttc create jobs, with aome success in 20D2. That said, 
Ihc uaemptaymeai ram remoifls Wgh (estimated ai 1 5% in 2003.1 and with 700.000 tdiicarcd yotirhs micriisg tbe 
Isbuur iSiarkel coeb year, there are iirevtiabie social tensioos (sec Pottlical cotoiDcnts below). 

PnKriret 

• Iran's 1 979 constitution laid ih^e fauodoudn for on IsUiruc tWeruy. with a st^reme rclig»os kadcr uctiog as tbe 
eountty’s mcsl powerful poUiical riguit, preetding over a legal systen based f-a .‘Oiaria law. Following 
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Khoaeisri’s dealii ia i9S9 the coniitiHilioti w&s amended and some of dis supreme leiisious leader’s executive 
powers were tnussfened lo the elected president. As ansnb l!ic cousBy ik>« has an, ai dnes. "uricoraroruhlc" 
diaS power strocturt in which decision rrrskir^ euihcn'ty is ihered bePA'ceo {aaonssl od-ire) the supreinc 
religious leader and an elected presidear. 

* There has been sigrtift-cact nsedia cocTrngc, 5a nseem yes*, ofUic os(}oifig i«K“.al ccnRicts within lean between 
the so-cs1lcd ■■consei'’ativf5’’ (notably the Ottardian Council, a le^ative waiebdog wr by consennuive clerics) 
Bod the '‘re/bnnisis’' (ied hn‘ Prcsidcni Khaami). A)d»iii[h Slhaumi’s riovenunent has a clear mandate fmm ibe 
populace (he was re-elected with 7S% of the vete la June 200IX dte Guardiaa Couocsl have succeeded in 
blockicg a eumber cf social. poli'Jcal and ccoaomic refisnes that bad bees approt-cd the psriiament. Tbc 
Expediency roimcil fanother Eovcrrrmnt body headed by fijimfr Presidcni Akbar Rafsanjani) has. howevTi, 
helpedntediale tomeaf thedl^ules. eeabSiHg die iairoduction of various refomis. For example: 

- anew Foreign Direct Irtveslmeni Law; 

» abolition of rMoignexchnngc easirel; 

the uriikaiicn cf the Cachaugc rate; 
lix & tanffrelftnox: 

- (he creation ofao ail subilisatton fund; 

' liiws aUc'wiug estaUisinneni of ptivalc banks. 

These reromts have helped ereate a more posilivt eflviroimcat for fociga investment and have iacilit&ted, 
amongst other things, Iran's suernsfol cr.traace into Qtc ioicmaiimal capital niatkeis wtih 2 Euxocond issttcs. 

Tlial nctwrihslMding. the- pace of change js, formuy.nol fail matigb wtd the epantry's demeBrBpbic pressures 
aed uiempiayment problems nf 1110.% that are unemployed are bcwteit ]6‘2*) provide for potmiial tuiresi. 
The IhistrtilinG ataongst some .student groups bcdlcil over leto Urcet dcwnMniiior>s earlier this year. Tliese were 
fuelled easily enough but mosi intcraaijciRil coiarscsescn csathutc to bdicvelka! domestic tensions will remam 
lor the foreseeable riiturc. stowing the pace ofiefonn and econo*niedevek^>ncnl. 

» In 20!f!. ihe US mr.ewed sanctions or. Iran far 5 years uwSer she Iras Utya Sanctions Act (!LSA). Titty also 
succeeded in Wocking Iran's acccssioa to ft? WorM Tnsd* OrsODiaslron ('VTO) Tesuioni escalated last year 
when President Bush dcaijpiaicd iian & on: of ibe prindpiii cuumrics siqrpoiting Inianaiiunai icnvrism. 
Relations between Iran and ibc US (and rcitsm c'lhcrcouatrics) have fiuthcc dcicricnied in ilie past l2mcisilis. A 
few notable examples of 'ecsn'pTobtins Indade: 

!} The withdrawal of Moody's B« raungoD Iran - foUowiAg a US Treasury iavesiigoiion ioio wbeilUT foe ratiog 
agcscy may have viohted US snciicru agehut the cevoU)' * further ooured rcistioos. 

2) The US hill rcpe0iodiy accused Iran of hotbvuriog icirorists umI dcsiabiiising icfoTm cITcrU h Inu|. 

3} Tbc death ofc Casadian JouniaUsi, in Iranian police cisiody, has uadermined Iran's rulattonsw'iih Canada, 
d) The UK and Iran hffcc had » dipkmaiic sps; ox'Ut foe dcttrnoiCRt (for poteciial cxiraditior) cf sn Iraniar. 
diplomst who was studying in the (IK. The Biiiish emNpvty in TeNan v-is subsecitiemly shot t1 in what mny 
(or may not) have been a miaed event, 

5) Irta’i auekar policy (Bottbly its urtwilfo^joess to sigr addilioca) prMocoii lo allow eahanced inspeclions of 
iia nuclear ibeiliiics) has put the country at loggcrhcaiis wiii. poi Mi.v the 11$. but also sons of ibc eounirici 
that an moR favourably disposed u Inn poliikoily (e.e. various Eurapoan eoir>tries and Rusai). 

THR believe 'Post expertenee shows that Inn will evensnally find a praaiuatic solMiion to SQbiltze foe sirua’Jon", 
It is worth noting foal French and German compauki iuaks have been able to gain ccnsidersble ciediUUty nod 
business ni Iron lhroug.h ibcir adoption cf a pragu'etic ^prondi to (be inieni&'.faaa! political (CDSiens. 

HSBC'it AgSAci&Hfln with Iran 

Long Kistery in Jrae. H6M£ was founded under a British Eayai Chansr as the Imperial Bsik of Persia In 1X89. 
The Rmli'i rtr?! ChiRfMxflac.rT moved to Tci>ra« that ycartmd. by )?9>.ij}c Bank bid o>”Bfd brnochfs in each cf 
Persia's eight largoit cities, By foe Second World Wnr tbc Duifc bad 14 Inoohce across wbai was. by then, Ino. 
ARcr foe war. foe Bonk adopted an cxpanslcnaiy policy Kniu foe Middle Cast, cstablishmg branches in Dubai, 
Muaest, Lebuou, Syria, Jonjaa asd Ssudi .Aisbis between IP46 ae 1951). The dO-ytar bonking coecessisa 
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txpsred is 1949. foliowiBg wbkb ihc various Irasiaii bnncfass were gradtid'.y dosed. Tbe Tchreo nain o^ci: was 
ibc lss( to eloseio July 1.952, 31 wtuch lirac ihc Bade ce^aiacd B3ME. 

BBME le-enicred ihe countiy ihrcugh a joiiU yenCDre (Bm of Iran and the Middle Bast) in 1059. This bank was. 
however, nailoa&Iiscd in 1979 followiag the Islaotic KvohitiM. 

isitial R«-«aBasta«Dl. HSBC rr-eaieted Iran to IVW. csobb^ag an HBME repixscoisiivc ollicc m Tebrao 
fTHR). TEii oHiec has, during ihe past >1tur yeinx, Bicnscd no a) raisiag ihe profile of the H.SRC Group in 'mn and 
btastively SLpporling various Group rae.'nbcn in dwssrpiirstut of besincss oppb(i\»i:ies In Iran. The teprcMststive 
ofTice has hesn very suetnsshil on hath eniinK. whh n^ilVsiiii hiisnees wine in ih« jvr.as of Frojeri !>riil F.ipon 
Finance. Trade Ficnnce and Treasury & Cspiul Maifcei^ THR enuioau dui irsoias business geoetaies c. USDTn 
p 5. ill xvcuijcs far vEriouS Group cnlidcs. 

The anicuiaed strsiegy of the reprtMuuUve ofTtce has been one cF^gradual engagemcni’. The objective ha* been 
&> syslCEoatically develop *uc Croup's prcscocc, capahSitics snd bu^css flows in Iran in a steady nnd maaoitcd 
moiuter. Whibt business voluma. and (be range of services oRcred, luve coaiinusd to grow in rbe lost tvo year* 
ihc pace of''grudua] eaiagcmcnt" has itanaincd sootewbu cauticus. Asacooscaucacc. strategic niiiaiivcs such at 
‘Trojea Ofluga" tWielly detcrihed bdowihavc, fci a varkly orjtuiiftidtie reasasK.Wen puton hold. 

Project ''BeSagi". This initiative proposed llte establishment of an offilinre hank, modelled on Finl Direct, that 
'O'OukI >>rrci a frUmkitii; services ki vusUMtim on ibe liantan mainland through lemole dislribuJo:i charnels 
(tuTthcrdclaiU are provided ia Appendix A). Given legal restrictiaos. which inhibst foreiga banks estsbiidiiag 
onshore iMfiVing aperalirms in Iran. BclugD was seren as the most io^eal way U* progre** the si™ii:gy of “gradtial 
encasement'. The most recent itenitjon of this iiwtialive ^ 2003) did aot progress very far as GHQ indicaled that, 
stisicgicclly sevstd, the liming of was :to: ri;^! (Iran ws* tts bcw. facing snmins jo its rc'iUioiKbip with 
the I.tS jcivernmesi and thfOraup wns. t1 (he tiiae, actively puisurrgactiuisttics'jf^riuaities ic the US). 

Tbe Nut Stage? Iran clearly represems one of ibe most sigiiflcani (kkcaiUI grawElt raorkcis foi HQME in ibc 
sboTt. medium uxl long term (a brief synepsia of the potential biiaineas es^Hutsmities is autlfaed below). HBME 
believe* that tiiere is t need tu; 

- Adopt s more pronclive / eisgressive appeoseb to the pursuit of ccw tnisbes* ia Inn: and 
' Moi'c clooriy dcGnc (lie ncM ofikt process oTg^tKluar cngaguticni. 

Guidance is required fhun QHQ (and HBUSjoc whether they would have any coneerrs with HBWE’s propotals in 
accelerate business dealings with Iran. 

Businen OppcrtuDities 

HDofE believe ihut the slraiugy sheuid aow be progressed in two phases: 

1) Phaie 1. The Group should seek sn immediate increase ia qi<antuni ofcross-boider business uoderiiikon 
with Irsnisn cwfTter-parues. Soch will generate neretnentai business revenues whilst demonsTrating. to both frve 
Iranian authorities ard our eiistomers, the Group's continued cantmitnwnt to developing iu businei* i presence 
JO this jiiategicaHy iniponsrt maAet. 

2) rbtse 2. In iheTnedium urm. iKsic iS£ need for s more tangible presence ioike owniry If iegisUtlon were io 
place '.9 atlciw u* W esUbbafa an oo'tbc'giovnd picseccc, die pnibreod routs would be ike cst^bskineDt of as 
HBME branch or wholly owned HBME sobsidivy ia Tebna. la ibn absence of surb legislation, s 
“reviulistlioo*' cfProjeei Belt^a, in some fonn.may'Qe a viable option. 

Funher details are provided below: 

Phase I - Immediate Opportunities 

We perceive there lo be isSBediate appor.acities l» onderulte eigeiGesstty mere prorilable and creditiA'Qrthy 
busiflcss in a variety of dinTerent business nrees Snerifltitily: 

I, Trade Finanee. TV Gretip hes, n present, a USDt2llm short-term (-CFi dtys) trade cop fbr Iran, with a 
(brthitmg suNliait brUSD2CiD?. The otilizstion c-f this lioh is very high (coBsisiently > S.55i) sod. tiased on 
market fbedback. our limits ore subsuntiaiiy below those of our eoDpeiho» tStuisrd Chartered, ibr uample. 
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tTpcnedly bsve a USDSDOre lis:!). KBMS believe SieR la be iraaaiiiua Cv>»nur<:U:s for fjnber prefiuble 
biuitess if ihe HSBC ctcdii limit wc« «%ni(tcenil>' inriTOwd »d l*vt maximuro iwor cvimdcd yp to 5 yem. 

2. Project sed Export Credit Fisascc HBEU prexidca a iiiuh(*aoiKc ECA covcrcil Mcdium-Tcrtn Espen 
Credit line of Grocp li»re t a tabK xbc d a slipng workirg Kialiontbip '‘■•iih 

^ ^ij f^} andMPEFhatvc.a»a ^tcy tfECc. ^oAcc pd a lattic nioiitcr 
f^'^f’l gxgon credit trsaeactioais. Ihe ccreiabaiw for buusass fcowc'/cr, ittcreasiagly fictcc and 

there IS a cenger th« the Onup will ipfc itseocnpKitfvcedecaiicseilia abk to support / supplenten: (hi ECA 
backed Eaciihies M'itii u degree of coTimerciil lendiag. Setrer^ turopeso t'aotabiy French and Oennan) banks 
hs\'e itiediara trim cotaaercicl itidmg Isr.ia (BNP’s fenit is »id to be ’J5>D5COfn) wd *cy are becoming 
increasingiv si:eces5f!:l in ptiretiing busijw». THR and HPEF sfipegly believe tSal an al^v^toakcm^^ 
letTti commercial risk in Iran wili help the GitMip ic retain s strong position in pursuing 
Moreover, y^lajiiliTv of such eounlty risk Units will Open ibe door for (ho Croup's panidpsiion b a 
vsinety of backed inttraljvrs repittng to oU awl gos. power, steel. telcoocMnurricalkm aad 

trutsponaliun projects. 

i. Islamic and Corporate Bonds. The govtrrmncfd is tmn mc conmlriing mstang no Islfimic Govemmert Bond 
(Sukuk) ard various substantial hanian coiporaic bodies bovc expressed an ia'amst hi undcn^ikios biaciic cr 
conveoliotu! cotperate bond issues. H5SC Araar-eblias abcaisy secured g'A-orkinginsr.date .ttudy 

the possibility of issuing o corponu Islomtc (mod aod. should dik lead to a spec>6c igsvancc. there be 
related ancillary buiocu opportumiies. If 'be Gtoupis tobavc any ebasre of wieoiag sucbbteincu it tail! need 
a eedium term credil limit for Iran. 

4. Advbory Services. There is a sruwing demand rn Iran, Item bolti privae and public secur batlies, for 
corporate rmstvee ad'-osory scr.-icos, rfSBC will jaesus suA bRHUxzs cpporuaiilits itrespcciivc of wfccihcr tbr-e 
is an incrccsc in aedh risk limit*, "nie rikelibOCd of success would, hwever. be oihajtced if HSBC's continued 
cuiuiiiiUucui iw Jcvuliip iht Iruniim business cim be clcady dmaonsiRiKd 13 'Traa lac.~. 

d. Fiaancisl IiKtitatioss. THR hoc brrnal^ to niniurc proriublchMSrQCSsreistiossIlips with n vnrkty ol'inuiao 
banks. Associated Ine^sme is derived iroin tr.ide services, pirject fintnoA treasury i mooey market operations 
end correspoadeal basldng. The Iraaian basbi^ sytssm is, enbetivefy. eoBaellcd by the Irsniaa govcrccier.t. 
THR believe that our retalively stnatl apprriie to book s-t mid m-t Itantra risit uoderaines flie Oinnp's ppsiiinti 
ill iliT cyus uf ibc IrtmiiDi authorities, ibis could undcmicc om chances oriciaining tbs cuneoi volumes of 
business from iraniati bsttlts. 

f>. Piymeuis & Cash Mauagemejit. Irsn undertakes af^iDKtrr.aidy USD25bn of inrernaironal trade annually, t, 
K 0 % of which is denaoiftctsd in U^. 

HBeL’ ?CM cL-rrcntly oiTcr l.'SO pRyir.snt services W 4 iripiao btoks. There i* an opportuuiiy to actively 
r.sriielQurFCM cspebSiiics lo other (reman cocnmctcwl bank*, iacludrai timi's CcstirJ BsskfBank MsAtizi). 
HHME K.M believe lhaf the poicat'sl busmess io be wm wpvld be worth up to i^D4n) pa. 

The US ssnetiems ant! ihe iaiptndiag UH IcEtslatioa revullisg (tom ite FATF recesmeadstiost. however, 
signiUcomJy eempikate ibc USD paywcnij process for Irwiar ctmntcr-par.ir*. IIDIJIF. PTM hns idctitidcEl a 
ptacbcal salulioii ibai ie 4 u)n;s HuUliiuri^l support hum both HBCJ and HBUS. As explained under “Issoes for 
Csnsidtreticn" below, tliere are titiK xnme Kservaiions aboiu underiakbe ntoreoftf.is^pe orburinru. 


To stopnri HBME's desire to more sagretenvcly pursK Iracias busioett opportunities. A«d to prevjdc n foimdalioo 
for (he ongoing evolution of our strategy af "gradual engagemenr. HBME will shoniy prepare a paper for GHQ 
CRF'scoitsidsralimi rettuestiugeppnjiratointTessesnsrelcvjmlariunti? risk limits for Iran. 

The lieniided PCM opportMlijes have, if puisusd. wtvera! poleniial impSifatioos (examiced uoder "Issues for 
CciteideraUen’' below), As such, HStvfE requite Ihc “ia-priacipic" suppeti »f GHQ (and HBUS) bcfctc actively 
marketiflj our PCM cspsbilities to Iran. 


Fbkse 2- MediauiTeroi .Slruiegy 

The request for n inereue in credit limits will, if t^provrd. nhbir the Gre’jp (o generate inereosed income ^om 
Inu ian tariL-ty ofburiocss areas. lo (he medium lo iosg icm. bewever. wc oecd a sU3K.;y that provides ibc Oreijp 
the abilhy to provide a wider nuige of corpcmic bail-iog $»viccs. dorecibc personal Anaccia! Kiviccs 
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(prcUibly limited crlT^rio^ r<>r high eud cuilomen) iBid voiious Islamic linakiBg services. (Tlic {lumesiic bankiaji 
ffi&iAci in ii'iui is entirely Sltanab eampHont. TIiSic art pMmtial oppanimiucs feu- HSDC Asuoiib Eaance to 
develop products for sale /distnbuDon ihroiaJiertlkerai] HSBC owned / manned mtiworthroiuli focal banks J. 
HBMS's prerened strstegy, whea the IsjpsURiKi asd msdcK coniEtiens in 'tsr sllow. would he to m 

nflshoTT. Naoch (or, ifihn lew rc^turgd, a iooaHy iftcoqyttai c d wboHyowed jubftdisiy). 

In the ubsence cf any such Itgisktian a ‘^rojcaQe't^’'Q*pci>fijctmcHei'Saii alternative vehicle through wbicU 
ite THoeess <>f "ywliial engagerarot" ■Kin be progiTSscd. (The fstabiishaeni of a rerwc baakiog operolion would 
Eoi prevent the Group from potentially cstabiiihinp on oiaborc bmneh ai a future dalcV 

The bcS’HC's ease for flic csiabiislnjiisii ofa JVjjcci Beluga type vcbidc koot as nsbust/cempcllisgas would be ihc 
ease for an onshore branch. Tnat said, HBME believe thal the Beluga option u stilt worthy of consideratios in the 
medium tCNTi asa melbod ofensuWoti that HBME moaiitoao of ifaed-jcnhwMuncnjalioiial books in Intu. {Staodaid 
Chartered have aiicady aitaiasd ‘Tint tnover^ status taaotisstBS ifaeir iaiertiaa ts esisbli&h e braach in Kish 
lUanO. Whilst H3ME are not ndvoratisg aay immediue aciicA ia this ic«ard they would like to keep their opUons 
open to pursue such mt irtitiattve in one or two year's time, sadqsct lo market developenents. 

HBME reo.uut (toidance from GHQ and HBUS on ihe poicntal Mnnlicninns for the Oroun of pursuing such an 
ioiiiuiivc souaer rather ihan later, both in terras oficpvlatiiHi and our US bubness interests. 

Issues for Coasfderatioa 

la ttesrsting HBME's recnmmcndntfon, GHQ Will (hi coninlUSSrm <rfth HBUS), itccd to consider 2 number of 
specific issues’ 

II Doateslic Prdiliral Sitnniiw 

One of the reasons to sccclcraicsurproccssorvneagcmtniisic demortsiiate, to theaaihicnlies vnihk Iran, ilia! we 
are catnmined to the development of Iheii countiy This U seen ie be pmticularly itxtpotlani given Ihc more 
nggressive /orogmaiic approoefa to iTHoiBii business adopud by Ficocti and German competitor banks. 

Such a deraonstretierr shatild, thforeiically, enoHe HBME to develop a sfronsirr maHrei position ir. what remains, 
for flte lime beins, S sUte-CcntTolhd eenr.orrw. Thai said, the interral confKcu widiin Iran's poUiical rwreefure itre 
uguifiCiiQ) auu nut aU piirijo' wiihia Iran will wclctwnc mcreasetJ invulvcmntl of foreign irwricd banks in Iran. 'W; 
casstder there to be iwo pofoDlisI srer.srios witb respect to Cte doxestie poHiicsl situatioo: 

a) Stgnilicnt Upbeaval. Id extreme ciretmtstanccs (wliich HBME cofiadcr to be highly unlikely) it is passible 
that the QogobtE islcrcsl psli'iicol eocfllct wiUcKaSmc, IcadiEg to funlKrmdal uwcii arid, uliiroaftly, eaforced 
rcgsoic change. If such a scenario were considered likely it would, of course. ssrSojily dimpsti the Group's 
appetite for Inniaa credit risk and y.ouid ncccssttaie a defemi of any Piojcci Beluga'iypc tniiiaiiyc. {Such a 
scenario seed cot. ficcesstrily, discouiagc ihc iouiioaiaic puisWt of PCM boioiess). 

b) Gradual Process of Heform. HBME believe tbai >t » IbrmoicRaltitic i» assume that (here will be a gndual 
ptvees of ROimntiv and weial isfortn with, atliiiillcdly. inevitable intenial eonfitcis along Ihe way. Whilst this 
isllsr sceo.irio will result ia sub-optimd ccor>oRcic growth, it does saggesi tha the eccDorsie sitiuiias will 
coQiinuc to improve over time end, as such, an increwte in credit Umil.t md provisiem of PCT^ services is 
eeitrely opproprute. The burcauemey that might be crciued by sny inicniDi conflict could nei os a deterrent to 
tic pursuit of a “Phaa 2" iritiasive in the short term, "niat said, if there is a belief that Iran will, cwr lime, 
hecoree on iivrecasingly altoctive rearkei. (hen a compelling ease can be tpode for iitereasiag oor profile snoi'ci' 
rather than Isier. Ral^yjlhsuodi^g the iogistkoi ehtdlcnges. 


2. U5 RegalsliMS. There ore two piladp&l areas of US law (!)Si would aatti any aiictupi to a) pirf'ids USD PCM 
services to Inition counlcr-parlics a-J b)cslabUsh s more tangible presence in Iron. (Tbese regulniiors are unlikely 
U directly impact the various inrtiatives that arc reliant on Ihe proviaionol increased credit limits); 

1) liS OlTict ofFofti^n Asse/s Cciurj! (Of .40 remhiictu. ’u-hicb picEibii US tmBsactiorvS ’•vtlh Irantan enliSss. 
HBME has received legal advice m KUO, 2001 and2(i()2nntheOFAC resularions. 

* Implications for the groisiori of PCM strvkgs. The SbiKliOfis agfilflsi I<ift t>;ohib»t US ba.tk'S front 
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pfD\-iding cofrsspondent basking services farlraaiac teifcs. The OFAC resuia:icsi do. hov.Tver, =l!ow a 
mcchcnwm (Ihc “TJ*Tam «fCpUoii“) »vllCreby USD pij-mcote can be settled en behalf of iranian counter- 
patties, iSiveugh a liR setikmeiu bank, piqviijeti iliai netdter dte ott^itauag or beneficart' tot); are US 
itisiiPJtfwis la pisitke, thn U-Tare nt^bsshta eufteady 35 felbun; k HSBC; 

a) Ad IinDtaa bank epens a USD otcouai vrifli H8EU, 

b) HBEU reeme USD payment iniunettons iron u iiwian bank in favour of a benetieisry account neld at 
3 ncc-US bank. HBEU instructs tbe bsDoflcUty bank ind amitges fbr setilewcm ttirouKb its Own USD 
steertHDi with HBUS; 

c) Provided OtcK is no refcrcTKC to Inc Ireniui counter-party in the USD satkoicist iusuu<;!l{>c, ilc 
trtsnsaction -ould paaj ihtough HBL'S swaikaiy. It hsswevw. tbe rams of fke irs".!tr. counier-pat}' is 
ir.ciiid«i is cb: senlcnteDt insuuctios. HBUS witi be sUigeted to check wbcUirr ib; uasaaction pusiiftes 
for ihc OFAC L'-Tuni cxceptioa. If B doubt. HBUS wiH rcfor the iranaoctinn ir. Of AC OFAC 

[hco either approve or Kjccl the treasKtkni. In ccnahi cHeiJiMtacecs fe.g. the rti.niiicr is s known 
tenerut), OPAC hat the right to »rrmge i«r the funds to be frauen. 

Until opw HBEU have not been reQuirtd to reveal Ac idenitr/ or the originat-rB IranUn rtDiDtrr-psri)' UK 
bcukiaiioQ relaicd lo FATF ruijuUdons will hcoccfonb rsquiie ifae identity of the ordering cusiotncr lo be 
clearly coremuDTcntcd in all such p^-msais. }f^ thcrcTcse. Ac Ctotfr dcodet to pro-actively pconioic USD 
P^yrnfrtj Mrvjces to irtmicn hanks the psjrrieuts ’viN need fcc processed by HBUS with full details to 
satisfy OFAC RainretDenta. Iherc wiiV therefore, xili be » mc4 iot additional tvsoyicss is KDU5 to 
idcsiify.cbcckaadproccu sitcbpsyiscii'is. reocoacons. in addition to utecosu and logisikal cliA'iculiict, 
ha\« been ra«<d 


i) HBUS could be hsld liable Usd SUIT wiftm HBUS. /tersOAo^iiaAle) if DikiiikES am made 

ii) The iDcrcucd volume of Iran tibted masaaioas woiddfce aoted bw OFAC. In the current political 
n\ irrmniesi it u crmcch-uble i2>« ibe US admiaiafatioa w-iS ihiak less hi^ily of USBC if it grown 
its hwtsiTtees deaJingc with 3ranv!c(!ObeVt0 eofqnter'sry <m the miemsiionai polincaf eiroationj. 


SV$ tcdenised that ih: isipeadir.g change ia UK legislatinn tos led Lloyds TSB to jpvc nMicc that they 
will he wit}iilm’in[; ibRir exkKno psymenU tervico oflciod Cr> Iraoiss banks. 


... — 


2} parsed is Ac afkrmadi of Ae virotts auatlrs or M Sspsember 21.'0!. gevsms US 

esrrespoodem banking aratgemenls for foreign btitkt geneniliy. 


Under i>c OFAC wgiilsikrw Itaoiso mcwporaird book ea have a fcard aecotrel in the US .As ssieh. the 
provisions a fine Pairiai Act apply m aiy (mnian b-mk that us«e HBEU to process U-Turn payments. 

Paciot An requirements woukd, is such dRtnDsaaces. be knpoicd on tfDEU ty virtue of its waiuuiotDg a 
K>rK,spwidein nccouni m HBUS. HBEU would Ihcrefont have to vutislV iweif i-hai earb cf lie relevasl iraeins 
hnnks has a riaomus know-ynur-custoracr nr.d asti-tr.oocy lauitderitM program. 


Neither of the wo applietele laws present an insunnoita‘.3blc barrier to either tie relevant PhsK 1 strategy (i.e. the 
provision of PCM services to Iranian banks, ir^cIadiiM Bank Markazi'i or iKe potential HtaK 2 simcegv. i'iia) said. 
Ihc lews do ereait a sipsiHeat sasuet of additional workicad and. in ihc cw of the OFAC tefulations, open the 
Orniip to addW««l roicotiai riaSta. Other itsucs aie ftised by the need to liaise with the US authorities lo cr*s« 
nnpliiince with ihrv.lTS’iUes below 


3. Intei-aaHoaai Political Situatioa 

Irao bas, as already eeplBincd, faced a variety of inlcinaiional poHiical predtlcss to rocco) ysan. Thr eotmuy's 
sipstdhig io the inieroaiional eossmily ia. at t&nsorwnune. act strong and it locks extremely mtlikcly ilia*. (U'lJS 
sanninn* ageinsi Inn will he lifled '« ihe-sluifi in medium leiw.Tnsr said, the prorperi of the US eseilacmgiis anti- 
Iran riieiuric and tuking direct nsQitao' aeuoo sgaiDst the country can be cmuldeied in tie tisgtily letnoic. The 
iclcntBiiorsI political tensions iofluenee diUc-rent elements o.‘ ihu eiiau'i^' in di.Tl.-rcni ways: 

• Credit Llntio. if the entemal poihicat environmeM for Inn mmains tcr.ae, >i could cempiieate the dotnetite 
rafoncefTon and. In ium. undei Qtine Ike ec-ODomk- prospects :oi div uiuiuty. Thai said, ihecountiy has hstroag 
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sccnonty, drspifc UiS exisieuce orsauciions. Asbi:gafiwebeIievelliatib«r«i5B(iiecbanccafei0ier; 
s) Uc tmpcsiikm afUN sarcliou iclaied Va tite nudcarcoiiilict<h^% cicely) or 
h) a direct milhafy cchP.scImtJi iriBtestremsSyinliksljl, 

wi need ncii let the nKhcrdolicalc islcnuiikua] polilicri sdRidimm deter ua fnmi Mckicj increased credit limits : 
fcusiriss flna’S fien Iran. (The US guvrmrteiR isuRlt^ly taene^tF theprovistor. afUSD7S0nicf crsditfsciiitiu 
diamalkally differeoi frem the rf^visiwi nrUSDiDCm or USOJSDin). 

• PCM BasiactE. The intemationsl ^eliiicai tendons are. ltow«^■n', of reiet'am when coosidering whether i» 
effir USD payment mangcmcDls to IrM's baahiag ssticr and, spcdfieclly. iu Central Bank. Sach 
arrangemeiTK wonld (as. explained «)»%*) neceuiuie the use of US based banks for USD clearing. The uS 
EUthorities would, given chaoges in the L'K law, be avriTeof dkc unup's increased intersciiDn with Iraitiarv 
cfFiinifr-panits. Oiveu ihs OrSente poLnical clsaste, there ss tbs pmentisl for HBUS to law the vaiuibie 
goodwill nf the US authorities if the GrotipU peiK-iwcd to be co-operating with what the US perceive to be w 
itoDiciiiji) I'ldiicn. Fruui ti Miikik E;bI pL-rqieciive its is in the Gipiqt's coTomercia! and strategic tnieitsu w 
provide grssler PCM sarvicis ta !«a’c fiaanesy secutr. OHQ, in censultatcrs with HBUS. need to advise 
wbcibcr it is in the OraupN xiralegk intemisu<An vi 

• E^sac 2 strategiee. The mcsi rcccm iierKkm of Pre^i DebiiiafinCMiiuIly ixoposcd io SH&2) did not piuccKil 
ss, in the view of GHQ. the liming nv«s net Tight givea, inter sKo. the ongoins txsiens with the US. han's 
pRseni intern sikmal polirical siraaiisn is, if anything, mete tense Oiafl in niid-02. That said, the HSBC snuaharr 
lias evolved siuec (hid Cnie os the liiiuuboM acqi^ton has been coniphdrd. Tnis could, depending on one's 
tKispectiiv, jvsfiry ee adopuan of ciibcr a grosier ar kaac; kveS of sensitivity to icicraation^ / US political 
concerns vis a vis Inn. 

Somniarj &. Recflnmssndation/Requwt 

Inn is a roscnj.rw rkh country which is in the process of slcvelapiitg { ‘ibetalisias its cccncmy and finance sector. 
Tbere will, in the short ienr>. he xiractivt transactional opponenities for fnancial institutions that have the 
apprepriaK marketing icscurces and requisite credit appetite. In ihc lofls-lctrt 3 cojnpeliir.g strategic cose can 
ihcrofoti; hi made for the Group to stroegihen its foothold is whet will becsroc ac inemssiagly important market. 
'A'iiii Oiia lit mind, HBME wishes to accelerate the pace of iu cagapeinmn with IranThe extent of HBME's 
er-.gagsir.snl has. in ihcTeccct paK. been ciirtaited tyeiiber: 

3 ) lack <3 r crcdii appetite (iaxpcly at GHQ level 1 or 

h) Knncf.TTis rroarding ihe politif »1 toplicWiORS ofa closer jssc-ciatiof- with Irafi, 

TbiJ paper baa been raised to sail, CHQ's approval (and H3US' **uo objeclioc") 10 a iwo-pltased. three pronged 
strolejjy which secs the Gwj'jp, in li'C short itnu; 

i) foiiTiS'})- ackrowledgirg or incTeaKd appetite far Iranian nsk; 

it) ociiveiy mnikeiiuK PCM services to a larger number 0 / Iranian financial insctulmns, inclntling Irnn’c 
Central Bank. 

end, in the tnedium to long term: 

tti) actively punutr^ the oppamuiity to cnhafice our prviteKe in Iron through either the esiablehmcnl of sn 
onshore braock'subTidiaiy or. if the tsw does not allow dnt. the pnnint Beluga (}!» oiTsbore 

banking aalbtion, 

Whilst ireiMomendipg that the process of engsgrtoent is accelerated. HBME are ciiadftii of the poicDtuI 
rmplications for other HSBC businesses and the KS8C name in general As sudi, the guidance and views of both 
CHQ iusd HBUS ere teugh:. 
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Appendix A - Background to Project Beluga 


has. sues, D)l<i-2DCUX bern considering ’'PnJecI various tonos) as die louied nc?;! step m Uk 

proMSE cf "gradual cngagcnnir'. The ratimale behind (his toidadve, and a bask outline of the business model, 
follows: 

Hori;sr'»!r*l FoJTign banks JirenM itresentiy permitSEdsorsia'bhiba&yi&iBg aiwa it»ao a representative office on 
the Iranian mainlaid. Various Central Bash ofQcuts have itdBciHcdihuihc i&aiici will “soon" open op to rorcigo 
banks but opinrensdi^eT on when exactly thi.s might hsfipen. {.egwiatioa istrediiced tn 2lKX>doet, hawever, allow 
fciuig.'v bonkj to iricorptHsic a whoCy owiud ‘'offabcie batut*' in »f !m'> tiutee Free Trade Zoaes fFTZa). 
Such banlcs ca.'i offer services temo'.eiy to utdK'ttbjalE end ccqKacass aa the Iranian minbid. 
tiiiiionale. Ic Uoo witli the strategy uf^giaduai engagemeut" IIDME have, in boih IHOt & 1HC2. ioukrd at the 
possibility of cstsblishirij’ an HSfiC branded ! .-nsnaged -wete ^siributior. bank (modeled on First Direct) in 
Iran’s Ktsh island R'Z. Such was, at the Iwne.seentobelhe most logical way to progress mir Inn stistcg)'. 
Bvsinsss Si(nkl. The most recent iierzion of this iahiattve iaxt^red i JV' n-ith two of Iron's Urges) tsaks (Bank 
Mrlli and Bank SsdrrtU}. The husmesj mode) cnvjs^cd the Kish iaeotporo'od J''' providing a linttcd rener of 
nnancisi services lo cosiamets or the mainland through a combinailon of a) direct baitVina chantteu and b) iV 
reproscroshves based in selected MelK acd Saderat branches. It cavisa^ a rolatively simple product ofledng 
iruiiotly {j.c, deposits, psytnentt) which wovld g-rodoolly evofw fj.e. credit cards, wcclib maBs^enral, trade 
facilities) over time. The primary c'piecB'ves of the inhtaiive wer* to: 

• build ihc HSDC braori in the Iranian narlsL 

• gac "fini cnliy" srtnia and poshion the Bsak for nitan BTDvnh; aad 

• dcyc.ktp new revcouc bucaios. 

Negctiatior.s tvtui Melli and Saderat did not progiess veiy far U< 2002 as GKQ inditoled (hai, whilst slraLegicoHy 
so arid, the limirtE of such an iratiativc wbs net ri^K. 
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From: John F root 

Swit Thu Oct 23 11:07:41 2003 

To: David W J BAGLEY; Busan A WRRSHT; John ALUSON 
Cc; Paul PROCTOR; John F ROOT 
SiAJect: USD Clearkig - Iranian BanICB 
Impertanca: Normal 


EPS HBEU hoM been manualy Intarver^ In tha processng of Iranian bank payment instructions by 
ramovliig ma rerrtttaTs nama artd country to [SBwant trw pre^bla thogerof afllterin the US, and Vie 
sub9e«jent declaration to OFAC (and possible freesino) of M Ainds. 

EPS have apparently oaen Instructsd by ComfStance to cease this pracdoe. (h is »ir.ewh9t laiciear 
whether this ftrstrucHon was m unHing, orarnen B was given artd by wtmit) However, ghnn ’long-standirto 
valuable relatkyiah^*, iBLnave purixirted^negodaied a cul-oF date of 31 KCOSbr tha currant 
practiea to Slop. (Brian Richardson and John VAUnsonineasarrce deny that they erere even aware of the 
prsctica. let alone Owl they Iwve been pushing hx ane>»n3!oii of R.) 

After SIDECOBcotrqilets payment Instruclionswfll be sent on to HBUS. also Intend to conelder 

ti4T202 cover paymente to be ‘unaccaptaBta* after such dale, and payment InstrucOone wUI be Miy 
formatted on a K^ioa/io3 sarlat basis orty. However, thare has bean some question as to whethar the 
tiJTi 00/102 formal is an actu^ legal raciiremartt So for ihb does not appear to be (he case. A furthw 
wrinkle is FATF Special Rscommendalion 7, which cals tor accurale and meanlnghji orWrtalor 
totormatBn. inoivktoai eounbias arc than aapectec to asrempt R-(o-FI irsrateia. 

There are ^proidrTBlely 11 payments every business deiy. USD ctodftng servicas are provided fix the 
toBowIng banks: 

MelH 

Te^rat 

Kashavarzi 

Matazi 

Erqioil Oeveiopmeot Bank 

s^n 


ABorihe banks are on the OF AC Bst of stafeowned banks, except tor Ihe Export Devetopment Bank. As 
it is a reasonable aaumptlon that the Eiqxwt Oavefopment Sank is aslala-owned bank, either Ks 
orrBssisn isanoversiatitby OFAC, oroneofthe ototf banks nay m fact be the Export Development 
Bank. At any rcto, It is prudent to assurre that It is also a taiget of tha OFAC sanctfons. 

TWO bartfis - T^aratandtha Eiqiort Oavetopmant Bank - account tor around bOH of monthly paymanta 
(210 out of 233). 

John vwkinson. the HSU RM, should rutifV the iraniah banks Of foa above payment irtslrudion ctiarto^ 
by letter at the end of October. WlUwon P ewelllng HBUB aBmcment betbre senAng Ih* leRer. The 
Irarrian banks wtl be gii^n a cBsclaIfner on (ha possibility of Bte application of OFAC sancftons. The 
tfeeWmorwIi state that (he Irwiian (nnk In question wH remain responstola lor oomp^ng with OFAC 
sancUons. The fkil «ftoct<«enaisof such a Aclaknarcanbe doubled, pardcularly as Bis not maricat 
precdce to have wRtian agraamenls wRh correspondent banks. 

Piojeet Wotr, vmich shorid be effecttvs at the and of Nowntoar, wBI not nacesseidy screen lor eonfolianca 
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with the*U-tum' payments exception, acaantt>g to P«ji Proctor. NWslfs focus w0l be to screen for, e.fl., 
terrorists arrd drug baffickefs against oovenwnenHsstiad lists. KBUS wn continue to be responsible for 
full screenkvg with let^rd to OFAC sancUons, srfilch hew a broader appScaaon than the names scr e ened 
by me IMUf system. 

A fstatsd Issue is the amscttveness of Iraresn corresponOent bank mofley'bundsflrg control procedures 
for the purpose of USA Pairtoi Act eerttflcaUon. 

The bualrtsss slate that they Inlend to keep pa^nenis 'at a tow lever but then add that h^hor paymeiTts 
will reqube a r»*Reoo8atlon of fees. too. thm are under constderabon to IncreBsa the USD 
ctearlng business wth Iranian banks - provUee !r^at HSUS aie In ftill egreemenr. 

John Root 
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From: John FROOT 
8«ni; Fri Oct 24 13;08;33 2003 

To; David W J BAGLEY; Susan A WRIGHT; AUJ60N 

Cc: John F ROOT 

Subfac4: Iran 

importan ce Normal 

AKachmerrta: imase^O cif; Irna90^1.9if 


Plaa&a s«a Mlow 1h« mamo kem Rod Monday iri Payment Services. 


John Root 


O 

— Poiwarded by John f- F)C»t;huhcvhs 8C on 74 ou 2003 13:W — 



l^rTMn: Paul PROCTORTHeeUrMSBC 


Tel: Tea 12773 
44 20 reel 2776 

- 


O 


To: JoW F ROOTiMOHOHSecaHSBC 


bcc: 


Subject: (ran 

Johri. 

Latest status Into on this issue from Rod Moaley In Paymente Saivices. 

The practice of amertotng instructions tit clesrty a tong standing one which hss hlihano continuaa daspim 
the Rhte heUeutog it had ceased soma yews 090. 1 ha« never seen anything in wrtfng to shew 
how/when this practice conanen c ed or who eulhorised it bul cleaily the rMopcsed termination will naad tc 
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be handled witn sensitivity K relaHonships warr ITb iran'an banks am not to be damaged. 

! am on leew next week. I am sure that <>3hri tAAIkmsoiVBrlan Rchards (London RMs) would be happy to 
answer any Ajrther quesbons in my ebsenca. At time thcugh, they are unaware ftivn me of your high- 
level ir.vdverTBnt. 

Regards. 

Paul. 

Forwarded by Paul PROCTORiHBEUMSBC on24 Oa 2003 12^9 — 



From: Rod MOXLEriieBJ/HS9C Teh 7B0 44470 

44 20 7200 4479 

«>>■ •..re- i>’tx 


iob«RWn.KlNSONetal 


To; Joht«RVVaj<|H$C»«i«EUA1SeCQHS8C 

Ec: Geo*ARMSTRCNQrh8EU<tiSaC9HSBC 

Oimntin R AYLVWUtDMQBKlHSBC^HSeC 
Brian W mCHARO&MOBKMSaCiSHi^ 

Paid PROCTORmaeU/HSecei t CD C 
Nasaar HOMAPOUftHSSL/HSSCAPACQHSBC 
Jutie A CLARKEAiBEUiHSBCOHSBC 
» MtfeolmGEASTVVbCOrMOBtOHBBCeHSaC 

TonyPCOUJNSAIBEU/HSBCe^fSBC 
DsnBALE.'HBEUlHSSCSifSaC 
Stolon R VICKERV/HfiEU/HS8C@HSSC 
Qary BOOMMOR PCM (vEMMBM&HSBCOHSBC 
Martto S CLARAAiBEUAISBCOKSaC 
boo; 


Further to recent exchanges of emalb. f detail below my rasponses to the queries raised, together with a 
synoptU of my cztrvcams on this issue. 
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RetperoM 


HBU8 haw not been acMsed of Ihe new (vooedurss- we have attempted to angaoe them in our 
piupoBab belPre but have been eiqveesly tbrbicSder) tomoonthiulng dialogue with them, lhave been 
Otvs-i a further directive from Mal^m ^slwood, Se*^ Manager Paymartl Services te the leal tew days 
not to contravene friese Inatnjctians from our coteagues In US. 

The proceduies tnw therefore not been agreed and any potential changes in wlwnes of teffic are 
unknown to mam. 


0 


Iranian banfut have mt been provided with clear guidefrrws with regard to die new forrmhirig 
re^jjiemente. Rossble solufions hsve been put forward by KBEU Payment Servtcee but ! do net belteve 
mey have been communfeated lo the Iranian banks, we oen suggest that payrnente on behalf of the 
Iranians for small arminta are sent te us on a tact base but the does not give us or them a guarantee 
that an payments wIB be effected wfrhoui probiam. 

The impHcafrons regarding OF AC are pmly what we have gleaned from frie OFAC webstte end previous 
histerical correspondence. Wa have had no direct contact wBh OFAC and, being a US government 
agency, I imderetand that this would prove friddass. in chon, t betleve straight MT2C22S are acceptable to 
us bat^ providing hil! dtadosure of the U^m payment Is apparent, althoughMT?D2 cover payments In 
si^jport of direct hfTloss are noFt acceptable. AdcHoonaUy. OFAC hava stated that they retain the right to 
freeze paymenta at thalrown iSscreSon. 


Concerns 


l>.tum payments- there have been a number of views expressed regarding the veHdDy, or ouierwtee, of 
the U-tum paymerds subrnttlad to us. Aa a UK bank, our own understanding of US tegisladon is Iknted 
and, whist we rrigni tielieve wa know what constflutes a u-tum payment, n would seem extremely risky 
for us to start telUng Irsnian banka what wM and what wl not comply. Lengthy discussions, perse, nay 
expose us to unnecessary risks. 


0 


It was my underetartsng that the original buiinaaa casa atfondbad by Rick Pudner, htaad ofClB, Mddie 
East n ,tenuary 3003 was rtol signed off. Indeed. Martlyn Speaifrig has underfkied the strong operationpl 
end reputationaf risks inwtved teid forther st4ipoit to this view w» given by Bagiey who suggested 
holdirtQ oir due to the acqutsBton of Houstfiold. I would be gratelui If you could confirm that the appedle 
lor this business has been authorised at the epprop o ate terei. 

The posilfcin of Risk Management Services (RMS) is becoming Incresstngiy untenable. RMS conirots the 
Project Wolf fitter and yet wa have been rac)uas(ed to And ways to cireuinnsvigste our own and other 
Instttutfons’ oompfiertee flKsrs. My own role Is predominantly fr> protect the Bank from reputational risk and 
t now feel uncomfbrtabis fri comprDrrfrs^ my position by leadteg IBL. pcm or tranian counterpenias 
down oertatn routes which may directly coniraverve the spirit of the Compilsnee framework. If this 
business is to be progressed or aic>arided (os indicated in Nigel Wera note) the Impetus for foimaQIhO 
solufiens wB need to eome froni PCM MEM. HBEUe role Is to pay os Inswioted and wWh efteci from 1 
Jemiery ?004 this wB be relnforoad. as no Iranian payments wfil be amendod. 


OespRe coherent arguments being put Ibrward by e number of parties wllnin HSBC. B is sUI worfri noting 
that corns US bants, notably Bank of New York, refuse to deal with U-tum payments due to the high risk 
nature ot (heee transactions end the potaniisl IM' possibto fines, cencura or reputettonal rtok. I have 
copied Group CompBance m on this note to ensure they are aware of end do not have a probtom with this 
Qontlnufng risk to HSBC. 
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I have been farmed by recant inferences that Paymen t Services have been amertdino the Iranian banks' 
C«yrn»its without the knowtedoe or consent of l&L ^ or iBL CompCance. This tes bean a bng standino 
practice otd to svoH future doubt, t witl raKerste thepoMs ntade h Mtfcolm Eastwood's mamo to NIget 
Weir of 22 Jan 03. ft wa are to continue to effect these payments, we will require your corrmttmant that 
Iranian customers wil be provided with a tenets and H is made clear at the proposat stage that 


O 


-payments must be submitted In this format only. 

-ffiat payments si-fomltiad in the wrong format which may be sequesuated by OFAC are ervtireiy 
at (he Iranian rerrRtai'e risk, aiboft wa wtli submit the appr^.Bte OFAC request forms llcencw 

fo rairieve lUr.dsvrhan sanctions are Sftad. 

-ffiAtwe wil not bailable for any funds Mquasffaiaa as a result of changes In Iranian Sanctions 
by the US authotlfies which mighi lead lo a payment ‘conectiy* fOTnatted tMing sequestrated. 

I amuncenalnat totrw extant to which the iraniaA banks are aware of tha differing wews and procedures 
adopted by tediuidual us bar^ks which c o m pitcates this issue, but K is imperative that teey are aware of 
our stattte from 1 January 20i>4. 

I think you nowhaveal theinftvmatfon whicft is aveOabie at this stage but please let me have your views 
whan you have had a chance lo digest and discuss wth your customers. 

Regards 

Rod 


o 
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From: DEMISE A REfLLY/HBUS/HSBC 
Sent 12/17/2003 0:40:38 AM 
To; TERESA PESCBHBUS/HSBCgHSBC 
CC: 

Subject; COMPLIANCE- OFAC ISSUES IN GENERAL AND SPECIRC TO IRAN 

ACtaetiedisOie memo thetwedseussec) yesterda/ in our meetng with Mieftael 
Gallagher. 


Forwarded by Denise A Reniy'HBUS/HSBC on 1»17«i03 

0S;40 AM 

Deniee AReillyon 14Nc7v2002 15:02 
Note 

14 Nov 200215:02 

From; DenlsaA ReiQy Tel; 302.636.2500 Del 

Title: Senior Vice Presidertt Loeabon: Delmvare 

WorKGroup: 

payment Services Mall Size: 454S1 

To: Carolyn M Wind/HBUS/HSBC@HSBCAMERICAS 

cc; Michael 6 Ga8asher/KBUS/HSBC@HSBCAMER!CAS 

SubjacC COMPLIANCE - OFAC ISSUES IN GENERAL AND SPECIFIC TO IRAN 

VUe need to discuss. 

ForwardedbyDeniseARelliyWBUS/HSBCon1in4J2002 

03:03 PM 

Valerie ROLLER HSBC on 14 Nov 2002 12:56 
Memo 

14 Nev 2002 12:56 

From: Valerie ROLLE @ HSBC Tel; 7904 5557 

44 2072 605557 

TKIe; Location: 

WorkGroup: 

Mall Size: 41360 

To: Denise A ReUly/HBUS/HSBC@HS8CAMERJCAS 
GeolT ARWSTRONG/HBELi/HSBC@HSBC 

ec: PatN C0NR0YA18EU/HSBC@HS8C 
Marilyn H SPEARINS/HO PCM/HBEU/HSBC^SSC 
Quentin R AYLW/^MDBK/HSBC^KSBC 
Rod MOXl.£Y/HBEU/HSBC@HSBC 
Paul PROCTORIHBEU/HSBC^HSBC 
Steve IA£BSTER/HBEU0HSBC@HSBC 
lEset d WEIFVRU 15 MENUHSMEmSBCl^SBC 
John R CHWPENMM/HBEUWSBCQHSBC 

Subject COMPLIANCE - OFAC ISSLCS IN GENERAL AbC SPECIFIC TO IRAN 
DenUe/Geofl, 

For your btrormtrtlon. 


I Permanent Subcommittee on Investigations 1 

HSB03793159 
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Regard. 


MaJctSm 


Attaciirrant: COMPLIANCE - OFAC ISSUES IN GENERAL AND SP^FiC TO IRAN.docJdp 
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HSBC Bank pic 


Memo 


To 


Date 

Denise Reilly 

Geoff Arm strong 


14 November 2002 

From 

Malcolm Eastwood 

Sender’s Reference 

CC 



Pat Conroy 

Marilyn Spearing 

Quentin Aylward 

Rod Moxiey 

Paul Proctor 

Steve Webster 

Nigel Weir 

John Chappenden 



Subject 


Receiver’s Reference 

COMPLIANCE - OFAC ISSUES IN GENERAL AND 


SPECIFIC TO IRAN 



To Facsimile No. 

From Facsimile No. 

020 7260 9796 

Total No. of pages 


This note forms a discussion paper formulated following various conversations that have 
taken place over the last few weeks. As the custodian of HBEUs payments operation I 
currently feel that we may be exposing ourselves to unnecessary and unacceptable 
Reputational and Operational Risk when we are handling payments originating from FIs 
domiciled in or who are a local branch of an FI domiciled in an OFAC regulated country. 
As a result there is a need to firstly clarify both the OFAC and HBUS position with regard 
to these payments and then to determine/communicate the way forward to the RM and 
PCM Sales teams. 

I would emphasise that in no way we are seeking to avoid the OFAC fiitering/sequestration 
arrangements here. Indeed whilst HBEU are not bound by these requirements the FATF 
principles which are scheduled to become legislation early next year and our own 
payments filter which is currently being built will take us closer to the US model. I merely 
wish to establish which way OFAC are looking to deal with the sequestration issue so that 
we can plan compliance and avoid substantial potential losses which can result from the 
“incorrect*’ processing of these payments. 

BACKGROUND CASES 


The above comments are prompted by two high profile OFAC related cases seen in the last 
few months. 

The first is a case involved Ing Bank sending a payment for USD 3M to BBVA from and 
to the account of the same Cuban Bank beneficiary. HBEU forwarded this payment to 
HBUS via the Serial Payment route. The HBUS filter identified the Cuban bene and the 
fiinds were sequestrated by OFAC. The result of all this is that we are in the closing stages 
of correspondence between HBEU and Ing lawyers pending a Court case between our two 
banks. Ing are contending that HBEU should not have sent this payment via a Serial 
mefiiod and that we should have converted the message to generate a cover payment which 
would not have then been sequestrated by OFAC. We are defending our action vigorously 
and have a strong case buih around the fact that we “paid as instructed”. Prudence dictates 
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that we have found it necessary to raise a general provision of GBP 2M to cover a potential 
negative result if and when this goes to Court 

Continued 

2 

Compliance - OFAC Issues In General And Specific To Iran 


The second case Involves Iran and Bank Maikazi when a payment for USD 7.5M was 
frozen again because the payment was sent via a Serial Route and the OFAC filter 
identified it as being subject to OFAC rules. Following assertions by HBEU that there was 
no commercial transaction involved {this was the Iranian Central Bank paying itself at 
another Europwn bank ie a Money Marfcel transaction) these funds were released but only 
after a couple of sleepness nights fw alt of us in London. I have subsequently been 
advised that this sequestration may have been the result of a clerical error by HBUS but 
this has not been confirmed to me. Nevertheless HBEU are left settling Standard 
Chartered’s interest claim for late receipt and with an underlying feeling of uncertainty 
with regard to the Iranian payment issue and the subject of U Turn Payments (we believe 
that the above payment should have been treated as U Turn) and had thought that this 
practice was established in the US as a valid payment method specific to Iran. 

COMPLUNCE WITH OFAC ISSUES GENERALLY 


HBEUs historical practice has been to send these types of payments where the U Turn 
principal applies (ie funds are generally moving from an European bank to another 
European bank for the credit of an OFAC regulated entity) via the Cover Payment method. 
This means that the payment instruction received by HBUS contains no mention of the 
country or entity involved. My understanding is that this has been accepted practice for 
many years and that HBEU IBL hold accounts, some in USD for FIs domiciled in these 
countries ie Cuban, Iranian etc. 

There is also evidence (the Ing Bank case being a case in point) that some other European 
FIs are using HBEU to transact business with these banks, primarily because the benes 
hold accounts with HBEU but also because they use us as a form of “Filter” for payments 
being made to the US. Whether we should be supporting this latter business going forward 
is highly questionable particularly in the light of the FATF regulations. Indeed Ing Bank 
will be asked to close their account shortly. 1 feel that there is a need for HBEU IBL to 
examine the accounts of these OFAC regulated customers to see if there are other 
examples of other banks with accounts in our books using us for this purpose. 

My understanding is that OFACs tolerance of the Cover Payment method is lessening and 
that there is some pressure being applied to follow the Serial Payment route for all 
hansactions (Denise can you confirm?). Clearly if this is reality this will have major 
implications for HBEU both from a payments processing and IBL relationship stand point. 
We therefore need to seek clarification of HBUS/OFACs stance so that we can determine 
our future payments strategy. Certainly the FATF requirements, whilst not specifying 
Serial instead of Cover do point toward the principle of “transparency” which tiie Serial 
Payment method would support. 


Continued 
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3 

Compliance - OFAC Issues In Genera And Specific To Iran 


IRANIAN PAYMENTS 


Turning speciflcaily to Iran we have seen the various papers on the subject of U Turn 
Payments and I believe that we have a reasonable understanding of what these are. The 
above Markazi situation has put uncwtaioty in my mind on the validity of this payment 
method and aiso highlighted the fact that HBUS have yet to formally “sign off’ the process 
described in your last note. Our conversation suggests that HBUS arc now looking at 
another ‘TJ Turn plus” option and I would like to understand what this means for us as 
payment processors, 

I believe that we need to resolve Uiis issue as a matter of some urgency if we are to avoid 
incidents like the one highlighted above. The Iranian banks continue to send us what I 
describe as conditional payment inslmctioos which for HBBU require an element of 
amendment by ourselves. This introduces operational risk and under FATF principles we 
should not be amending these payment instructions. Acceptance of these items over many 
years means that we are bound by the precedents currently in place, and I believe that we 
need to break these precedents by 

1. Establishing with HBUS and OFAC the validity of the U Turn Payment 
principles for Iranian payments. Whether this be by U Turn or U Turn plus 1 
would like these to be signed off by HBUS as soon as possible and certainly by 
no later than 31/12/02. 

2. To agree a “template” payment instruction for these U Turn Payments which 
can be used by PCM Sales and the RM team and sent to the Iranian Banks 
stipulating that payments must be formatted in this way, confirming that we 
will be sending these via the Serial method and that any deviation from this 
template will be at the Iranian Banks own risk. We would also have to state 
that the validity of this template would be subject to any change in OFAC 
legislation in the US. In this way we can give ourselves a level of protection 
from claims relating to capital or interest which may arise from funds being 
sequestrated or delayed ns a result of OFAC seizure. 

If we cannot achieve this in the short term then 1 will have to recommend to 
my General Manager a view that processing these payments Is “unsafe” and 
that these Items should be filtered out and cancelled. This would have severe 
repercussions for our Groups relationship within the Iranian FIs. 

FUTURE BUSINESS STRATEGY 

1 believe that there is a need, based upon your responses, presumably formulated in 
conjunction with your colleagues from Compliance for HBEU to consider its business 
strategy for the continuation/dcvelopment of its business with OFAC regulated countries. 
Whilst 1 am told that there are significant business opportunities particulariy with countries 
such as Iran there are also substantial Reputational and Operational Risks, not to mention 
Financial losses associated witii it. 

Continued 
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4 

Compliance - OF AC Issues In General And Specific To Iran 


Whilst i am not suggesting that we should discontinue these established relationships there 
is a need, in the light of the charging regolalory climate for us to review our position and 
ensure that we have a correct balance between risk and reward. 

I apologise for writing at some Iwigdi but there has been much happening on this front 
recently and I thought It appropriate to try and pull all of the somewhat fragmented 
information together and to share our concerns with you. 

The only certainty from all of Ais is that we cannot delay and prevaricate in this matter for 
too much longer. We have seen potential losses in excess of USD lOM in the last couple 
of months and it is now time for HBUS to define exactly what is and what is not acceptable 
to them. 

Your views and those of your colleagues in Compliance would be much appreciated. 
Regards. 


Malcolm 
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Ffom; John F RCX3T 

Sw*! Tue Jun 17 15:25.16 2003 

To: Da'-M W J BAQLEY; Jflf.n ALLISON; Susan A 'ARIGHT 
SirtJjact Re; FlC - Re ’do not menticn vjr neme* 
fcnportance: Ncrmai 

Attachments: ifrase_D.9if !n!sea_243it fcnaga.S.glt Doc LW<.htm: r00744S3.tif 


Funher Infomrailcm, as requested by Dawl. 
Kind regards 
John Root 


roTHerded by John F ROuT'HuHrytfeBG ofl 1/ >lLr.2CO^ 13 J6 — ~ 


Note 



From; Etizabedi Prolomeatrfl/HOUS/HSGC & Te(; 212-S25-6&92 

KeBCArsERfCAS 


John F RO OT ci »1 

To: John F ROOTMOHQ/HSSC3HSSC 

cc; Caicriyn M Wind/)i3U3rh5BC@HS6CAMCRICAS 

be«! 


Sobieet: Ra' PLC - R« *do no! meniun ow rtama* 

Thfl p*yirent w« irtitlated by PLC arid fwetved in the H0US Delaware Funds Transfer area for 
procsBstitg. tt stopped for review in ine OFAC queue dtietethe ongirtdCtr 'MeilBanK PLC* When Funds 
Transfer staff noted the rncssage In the 581 ftaM sUt'nq ’do not mentiort our name* ihn psymeni was 
rejected, per our pofciy, due fo rnncerns about evswfon issuw urOer The OFAC tepuiatioits. {Even tf the 
peyment Qualifies es a "u<tum‘, we wiirtot process H if it contains such 9 messeqe In any fieio on the 
payment.) ft vv5i be repodad to OFAC ss a rejected tterri as reqiured under tho Iranian Transactions 
Regulations. 

I checked wnn our inweilgatlofls area, and they cant teK wrtai depedmenl n PLC inBiaied me payment 
AH the fnsiructions received on the wire appesr on me pejenent copy ateched, whch inciuda *oo not 
menoon our name* In the 6BI field. Furtds Transfer in Oefaware does not alter the payment instructions 
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ReJacted by the Permanent 
Sobcommittee on Investigations 


Tilers ere several reference nurr^rs on (he p^'msntthat may he^you Uece Its piDcessing ri London. 
The rurTtoers^are: 


e you liave trouble reading tire attscheo payment. (ti 


Busbt sss date: 1l- Jun-2Q03 

Debit: I^BflAHSeC BsrOc PLC Lsrrdcr. USD Ceehna, Intcmslionai Division, S Canada Square, 
London 

Credit: JP Morgan Chasa Bank, NY. NY 
3rtt pan^'; Uoyds TSB Bank PLG, London 
BBl; do rro! 'nention our name hi n' 

ORG: MEUQe3U Ms'i Bank PLC.-I Moorgele. Lc.ndon 
USD 1M.000 


The psyrrient w?«s rejected on the seme day. ikme 13. 2003. 

Plea&e iat me know R you have arty other questions. 

Pnmrdoit l>ti PKnihkih PioeMnMnuHetJ&'rtSad no Mn7«mn Oil Si AU 

Wots t7>jn30i»Ob:C3 


Prom: Oiroiyn Marine T«t; 212-S25-S$(& 

TWa; EiKutVs Mm PrtsUam lossUon: 4SSS4<Aire. DnrOT 

Wsritflfouo: f>5(iwi« Compieriee C>i'- .'.■.‘r o' 


To: Elisab eth Pro to castr o 

To: ClabeVi PrctemBetra'ttQuaMSGCeKSBCAUCPSCAS 

Subject: He PLC-hU'danatfnDmienourna.'re'' 

Pieaee provida John the detais sf thia trsnasdticfl. TTiarti: you. 
Per^wSsfiS? Carslp W Wlrd<HBU&'«S9C an Mri;:2e9}eS;0t AA1 • 


wolvtr Jufi txs bSPt 


Confidential - FOiA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8873923 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00828 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




815 


VerDate Nov 24 2008 




Tia<r; 

WorliOTWip: 


SubjflcL- Re. PLC-Re *60 memkxi ourneni^ 

CarcJyn, 

\*A\a'c dirt it conB frDfit? Where was I pacsssetS? 
Yoiffs 

Joim 


Carolyn M VV^nd/llB^ j5^^?.^R^■ @ HSBCAMFmCASon 16Jun2n03 16 34 



Iq: John F root 

Te; John r ROOT, 1l0nafl-JC3C®H5ac 
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Su&jesb PLC - R6 'uC .’c; TT0nl»n our wns* 


FYl 

Ir^’CSiiily.lMVttasSHSUSmsaCenaer'.a.'roCS 1134 AM-— 


Kotc ie Jon 2003 11.25 


Fr«(nT Hltah*Di ProlDBOAlm • 

Titi*; '/■wPK«U*ni 

WmMhvup. Rompllvicit 


Trt 2IJ«5-6eK 

LossUjni 432 Sir Aw. Fiujt 0? 


Tu: C arolyn M Wind 

To; Carolyn M VVrdlHBUS.'KS&CldHSBCAMERICAS 

cc: Annr L?d(tv 

ec; Ann* U^y/HBUS/H5BC@KSBC/iilER.iCA$ 

SMbjPd: PlC - R<? ‘i?a not rw rison eur osne* 

Fl'i. attached oieesa f nd a cocpy of Uefil iwyinefit reiectet) on Fiiday wth (he abov« meesage in ihe 
noK). 



HBVS Fw 
(»riMOa310'»AU 


To: BSA K8K 


OatrituUan of TM&J: Fnx tarn *3119 K3e TOAS* 
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Stains Hftceiverl 

Time: June 13 2003 10.53:12 
Pages; 3 

Receivers N am: SSA Fax 
Rscaivers DiC||||l||||||||||H|||taH 

Receivers 10. HIHHili^V 

Csilirn Fax Mfictiiie ID: 302 639 2005 


- Rerfaeted by the Permanent 

on investigations 
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From: Davia WJ BAGLEV 
Sent: Tue Jun 17 t7;31:l72Cl03 
Te: John F ROOT 

C«: Jonn ALLISON; Siisan A WRIGKT 

Subject: titwno: Re; PLC ■ Re 'do no) me^n our name” 

Jfiiporterce: Norms) 


John, 

Regardless of tlie wider esuo as to tne oppQc^it^ oT CFAC <o non <08 persons sfculd we be altowtng a 
puyrnent with this sort ol inslruetiorr to be passed to HBUS, or te there tr feet rwthing we can do to screen 
for this at least pre-WOLR. 

Regards 
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o 


From: EUZABET>4 PROTOMAS'T^CmSIJ&Tf^ 

8«nt; 5M/20(tS 9:59:42 AM 

To: TERESA PESCEAHBUS^ISeC^^BC 

CC: ANNE UDDY/HBUS/HSBCeHSBC:C;RAC£C SANnAGO-OARVISHmBUSm5BCSHSBC;C>ENISE A 

REIU.YA4BUSAHS6C9HSBC 

Subject R*; Pw; Wire Psymontt Su«p«nd«d 

For the TTwei pan, the u-tum« ihM we have processed lor HBEU are 1U>y 
ifisdosed asperse corMfttons stated In the sttactsd document lost Oenntfwr- 

{DoaimentsubmMedby Dense Reily to PCM msnagemant Deesniber 2004) 

The remMef, Credit Suisse Zuncii, le wcl aware of the u-tum Frsedees of 
c^er U.S. orcantzwlKirw and thereifulremerri far Uldisdose of the name and 
adeSvu of the odgfaator and the banelolary. 

Ptesse ietua knowlfehouidietum the ftatds to Cre4t Siisee ^rich'as per 
h tlgfw l poHoy*. 

Thank you. 


From: Tereea Peace 04 May 20QS 08:15 


To: Qxabeth Protontastro 

Anne Liddy 

Subject Fw: Mre Peynwite Su^nded 

Anna rrtent i cfied bus to me yeitgday. la this standwd per Oavttfe (luestlor 
below? 


From Merton O ROACH 
SsTt: d5/04;2Qt» 08:1 1 AM 
To: Terese Peace 

Subjed: ra. thlrc Payments Sutpended 
Terry. 

I attBcti a salFexptorwtory exdMisaofeorrecpondanee (orMAftted to me. 

Mhat concerrw me Is wheOter the underlying edion token et ycis or^d denotoa a 
Change of policy gid approach wWiin HBUd to shall would nomwiytotoect to ba 
cover paymeais. 

As you ere aware, there are no Group standards vthich require 9>st e>e 
o(<(jrwtor mti beneflole^ detsib m b eO paymema. Aooordn^, Group 
Oparanen fliebely wfll not habitually raqmfre « Input tMs toft w wa tlcn il toe 
undertying oustomer Instruction is reoetved on s baab patirUted by toe SWIFT 
(ormat end by local ragutsllon. 

If toe cebon tial haa now been taken reyaeenttoe change of pctKcy on toe 
p ««1 of HBUS, however underctartoabM m toe current ragulstDiy environment, if 
ooneame me that any such change at pofey n»y not have been oanvmriieetod 
across toe Group and subieci to appropriate levebafeansullBSon wbh 
business oolteaguee. 
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I would be STBCefui it you weutd dsrtty whether Owrt hw In feet hw* ■ 
change of polcy. as if so. there ifoes nol ^pe v to have been any erlemal 
consuHat'on or rwificaton from H8U8. 

ARsmatrvely. if the payment has been blocked bemuse of a reference to Iren 
then this is laiderelood. 

Kind regards 

David W J Ba^ey 


£> 


Memo 

04 May 2009 0» .21 

From; Susan A WRIOK(T/HOHCVH&BC TsI; 7992 55M 
44 2079 82S&94 

Mail Size; 7M8 


- Redacted by the Permanent 
Subtommittee on Investigations 


To: Jos E BROWNLEEflBEUtHSSC^HSSC 
cc; David W J BAGLEY/HOHO/KSec^hSec 
bcc: 

Subject Wfrs((aynwitsu6panOed:«TrBn*-UK)s^2.M7.63 
Joe. 

I hsvscopled this onstoyou tar sttsmkin given the size offr>e 
fr^ansacfrcBT. Rngartte Stftf 

ForeordedbySusan AMRIGKT/HGHQ/HSBCanOe May200S 08:20 

BIzabeti ProtDmsetroirHBUS/HSBC on 09 May 2005 22:02 

Note 

03 May 200522102 


Frwn: EiEznbeth Pralomstro/HBUS/HSBC TsI: 212-S2S-6892 

Mtf Siza: 2857 


To: John AUtSONAiGHO/HSaceHSBC 

ec: Sijaen A WRIGKr/mHO^tsecOHSec 

Rod MOXLEYiHBEU/HSBCOHSBC 

Gmce C £anllago-Oafv!eh/HSUS/KS8CeHS3C 

boo: 



PYl. the foloMlng poymantvMrs suspended today vMt we request InfrMmatlon as 
to tis orfgrMtor srtd bsncfrdary^ ftdl nsms and eddrssa. 


Org: CredtSufess 


I Crsctt SutSM, Zurich 
SC Bank PLC London 
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■- Redacted by the Permanent 
Subcommittee on Investigations 



Thous^tiu payrnem appears to meet (heU-uim under Irwian TrmactiaiiB 
we req^nre that the paryments choute be fufty cfiKSoeed as to the 
offgmstor and benelciary btformation betara proceectnp We Iokm ttat ttn 
poMcy is In Ine wWi the stance of other U.a. *Mno« tramuiAom, «ich 
Be Bank of New York and /^edoan Cxpreec. You am rieo awura, from pact 
cfecussiona, that this is retjuaed by HBUS. 

Lfltuaknowifyouhaveanyquestlons. Pleese adv)»e on your eldc of (he delay 
In prooeeWtg. 

Thank you. 


(D 


.ettutdftnant OTum CondItianB.doo 


o 
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From: ANDY H IM/HBUS/HSBC 

-Seftf7 2J28/200S &:21:^7PM 

To: JOHN ALUSON/HQHQ/HSBC@HSBC;SUSAN A WR»GHTA1GHQ/HSBC@HSBC 

CC: GLORIA STRAZZWHBUS/HSBC;EUZABETH PROTOMASTRO/HBUS/HSBC@HSBC02:MARY A 

CASKIN/HBUS/HSBC@HSBC; 

ANNE L!DDY/HBUS/HSBC@HSBC;PATRiCtA DACOSTA/HFSC/HSBC@HSBC;DENiSE A 
REILLY/HBUS/HSBC@HSBC; 

DONALD W MCPHERSON/HBUS/HSBC@HSBC02;CAROLYN M VWND/HBUS/HSBC@HSBC 
Subject: Rami Makhlouf 

Hello, 

We have determined that accounts held in HSBC Cayman are not in the 
jurisdiction of. and are not housed on any systems in the United States. 

Therefore we will not be reporting this match to OFAC. Please let us know if 
you have any questions. 


Thanks, 

Andy H Im 

AVP, AML Compliance. HSBC Bank USA, N A 
452 Fifth Avenue, Tower 7 
New York. NY, 10018 


Phone. 212-525-8139 

Fax, 212-525-5769 

Email. andy.h-im@u3.hBbc,com 


Patricia Dacosta/HFSC/HSBC@HSBC 
02/28/2008 09.01 AM 

To 

Andy H lm/HBUS/HSBC@HSBCQ2 
CC 

Michelle P VMIIiams/HFSC/HSBC@HSBC, OavkJ Fofd/PBRS/HSBC@HSBC, Amanda 
Wayman/HFSC/HSBC@HSBC 
Subject 

Re: Fw; Search #029-08 • HFSC # 1028 • Due 25 February 2008 


Dear Andy 

Pleuse be advised Uiat we cuiienliy iiiaiiiUaiii a leiatiuiiship wiUi Sellloi, 
Mohamad Makhlouf In our capacity as Trustee and the individual named in your 
search request (Rami Makhlouf] is actually a beneffctary ofthe Trust (his date 
of birth m^ches the individual named m your search request which «$ 
10Juiy1969). The Trust is administered by HSBC Geneva. 

We raised concerns with this client to August 2007 however we were assured by 
David Ford that the relationship had been reviewed at Group level and a 
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decision had been taken to continue with the rdstionship. 


I have copied in David Ford (o see if he wishes to add any commente prior to 
you responding directly to OFAC. Iir the meantime, please confirm if OFAC 
indicated grounds for their request? 

Kind Regards 
Pathcia DaCosta 
Head of Compliance 
M5BC Bank (Cayman) Limited 
P.O.Box 1109GT 
Strathvale Mouse 
North Church Street 
Grand Cayman KY1-110Z 
Cayman islands 
Tel: (345)914 7572 


Andy h lm/HBUS./HSBC@HSBC02 
02/27/2008 05:39 PM 

To 

Patricia Dacosta/HFSC/HSBC©HSBC 
cc 

Michelle P VMlIiama/HF SC/HSBC@HSBC 
Subject 

Fw: Seen* #029-08- HFSC # 1028 - Due 25 Febniary 2008 


Hi Patricia, 

As this case is urgent, can you let me know the details of the eccounffs) in 
question below? 

Thanks, 

Andy M !m 

AVP, AML Compliance. HSBC Bank USA. NA 
452 Fifth Avenue, Tower 7 
New York, NY. 10018 


Phone. 212-S2S-8139 

Fax. 212-525-5769 

Email. andy, h.im@us.hsbc.com 


— Forwarded by Andy H Im/HSUSJHSDC on 02/27/2008 05:36 PM 

AndyHIfiVHBUS/HSBC 
02/27/2009 04:39 PM 

To 

Michelle P VMliiams/HFSC/WSBC 
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Subject 

Re: Search #02^8 - HFSC # 1028 - Due 25 F=ebruary aWB 


Hi Micheiie, 

Can you make sure this is a positive match? This is an OFAC request. Does 
your client's DOB match up with the person in question? Also, can you tell me 
more on the account where Makhlouf is the trustee? 

Thanks, 

Andy H Im 

AVP, AML Compliance, HSBC Bank USA. NA 
452 Fifth Avenue, Tower 7 
New York, NY, 10010 


Phone. 212-525-8139 

Fax. 212-52S-S769 

Email. andy,h.im@us.h 0 bc.com 


— Forwarded by Andy H !m;HBUS/HSBC on 02C7/2008 04:36 PM — 

Michelle P Williams 
27 Feb 2008 16:24 

To; ICR0I!P@HSBC 

Subject: Search #029-08 - HFSC # 1 028 - Due 25 February 2008 


OearCoUeague, 

Please note that we currently maintain e relationship with "Rarra Mskhiour as 
Trustee of a established tru^. 

Kindly confirm what actions if any HSBC Group has taken in refabon to the 
above menttoned individual. 

Sincerely. 


Michelle Williams 

Interne! Control Officer • Compliance 

HSBC Bank {Cayman) Lirr^d 

2nd Floor, Strathvale House North Church Street 

Grand Cayman KYI-1107 

Direct Line; 34S 914 7560 
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From: Susa: A 'ARIGHT 
Sent; Mar 10 14:5£:A0 7004 
To: David W J 6AGLEY 
Subject Re; aailWartazt Paymca’.t 
Importance; fjvmal 

Attachmanis: imii^.O.sil; iitUfie.l .Dif; iinipa_2.(^ ifnage_3.ai^ uoc Llnk.F«n 


David, 

As requested SW 

pftiWarrtBd hy SiMn A \MJrRr-TiHr,MCl-'HSeir. OT 10 U« 2n^U t4-5f. 



From; litalcebn G EASTWDQCUMOBKAiSBC Td; 799 12^ 

44 207 M1 2300 


OtiemiB R, AYLWARn et a1 

To: (ili«>nt>nRAYl.WAF0/MDBKX9aCQH58C 

cc: Phil BAltCS7MOSK/HSRC@HSnO 

GeoH ARU3TRC^QiiH8B'J;HSQCi3KSec 
R« W0XUEY/HBfcU/HS8C(aHSaf: 

Susan A WRICiKTAIGHQTHSSCSKIffiC 
bcc; 


Subi»ev R«; BankMarkazi PivrtKru 


Ttanks. Hawng reviswea the attachmenis and the poymeri !ts6<f I have asked Rod Moxicy to ensure that 
It is paid vIBi immedlsie eftiaoi. 

RegrettflOiy w« are now reaping the rewanleoline inability otl6L and Compliance to leaohe Ihe Iranian 
payrrunt issue for m excess of 12 rriortUts. tAe In CSO now have the toots lo Uenlity tiolh pohaitial 
Sancwn and Terfoi ist payment ectaily and we have ft use them ond protect the Sank horn flnsnclal toss 
and reputational rbk:. themtore I have no issue with the action teken by RMS. 
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■n»e in^hrmatlon atout ctase (wyfrants filyes some conrtoit aWrough fii my opLnon OFAC wouW be 
oerfeclly tMitran their tights to sequestrate this item, ft s only the benerciary name arKt repea: nature of 
the psysnent nhich wit pc-rhap; mitigsto this rteit ft e on ^ Cissls that if triis is soQUesirateO (he rlsic is 
IBLs Of its customers 1 am rrukJng the poymenL 

On (he wider (ssue of Iranian paynienls In gnrwiral I rarrwte evtmTWly uncnmfortaMe with the precUce of 
arTwndlng Iranian paymem orders tor whatever means. Although much of this activity Is histone the 
polKJcsi climate has rrox'sd on and such praeikss are nc tcngoi accaptabie to the regulatory fiulhcrities 
On this wsis i would urge both Compliance nndfBL to get this Issue resolved as soon as possible. My 
own CampSsnoe oenttlcste Is hea>rity cevoaiad to reflect whst we are not compliar.! in respect ot Iran and 
this wi# become a problern for rr>e if we haw not progressed a solution when I am asked to sign the n«(t 
one. 


I regret that untH we achieve oSarty on this issue we wffi coniinua to see Hems delayed end debuted. 
Clearly ! haw no wisti to jeopardise good r^lonst^K wWi 1BL cictomer* but 'A-htlst this matter remains 
in mv pending file I am leii wi9i iittie choice bul to hoU and challenge these iteiTis on a case by case 
basis. 


Regards. 



Ueaio 

lounrSOMine 


From: Marta WYATr/KSEU'IISBC T*l- 7»1 27dt 

2t7b $12734 


Malcolm G EASTWOOD CL at 

To: Melctilm<3EASTVVOODrtJOBK/HS5CaH$8C 

ce: Ptyi &AiNS&M03fVHS6C$HSeC 

Qcctf AP.MSrRONGAI6ELW88Ci§H$BC 
bcc; 

Subject: SerKWorkazSPaynwrtt 
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This is a class'rc.l am sura that you are swss 9^ Bartk Maitazi is tT» Iranian Ceniral Canit. Fron ine 
tifcrmaUcn given Bts uifimste beoefesary {s Amadrs. M itj; NO!^a trsnsscCon thus ; ha'^re 
some sympatt'.y for tino position laKen. B!i( fes raaily i '• *. •»• W o in pracllr-a! 

terrTs Is g credfl to a Sup^'a netionsi whkh tn^iicut ciwtiry baniers. I iawbvar { flrKl ii heid i& 
believe that we sho.W slop a 

Q. 

— Firwa’-djil ^ Msns'WVAr'/HKIU'HSaCor tOMsr2®4 1t;12 — 



From: Nigel J WEIR/RM IB ICUHBME/HSBC T«h 97t 42077022 


Smtby: Shark|Z SIDDIO' 


David WJ8AGLEY eta; 

Ta; Dsvki VVJ BAGL.EY/WGHa'HSBCSK^ 

co: David H HOOCKSJSOMOO- ?4EMrHSItC.JreBCQHSOC 

John BLAi<T! lORNEA-ID CIS MEWiiBMrjIiSBC^HSnC 

Ti:!i M FV.*.fe,'«BAf»iHS!30©MS8C 

QuBnUil R A'rLVUA.^DVDBK/HSSC^SSC 

Sftati «i RlCrtAA03/MDSK/H5BC@ri33C 

bcc: 

Subjost BankMarl^azi Paymeni 


Da\^. 

As Nigel is currently traveliing. I enclose a »em»p!an(Mc<Y mamo from Nasser Homapour for your urgant 
atien’Jon. it is s serious issue and we irest resolve it irnnetSateSy. sc it may have polencaliy damaging 
effect on cur reietioftship wlih Barh Marfcazi. 

fiiind Peutirds, 


Shariq Siddigi 


Redacted Materia! 
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=ixR-«tTi*-S TV Slariq 2 SIDOlQt RneVtPWtK 



To NlgoUV.eini'RM I6WPMA1K.<&H?BC 

Ct DaV;C> H HODGKINSCN>CCH MEM/HBWEmSBOaHSSC 

v3!in eiANTVtORME.'j-iC Ct3 WEM.TiBM&HSSCSHSBC 
Ti.-n H EVA^4S)HBAP/HSeC 


FfCW Mass^-HOMAPOL'*! Tel' 9821 2D4tH67 
OjrHat YsurRot 


P'Srk M=ffcao “aympnl 


Wa era facrna a amai issu e wrW tl y^ ntfal Bank of tren wrhereiJy a res ular payment corriprisina as 
'nstslimorit tor Uelng erfftheW in Lcirtan ers tfte boss thgl SI corttravenes 

OrAC sanciinns. The ts a repeat Payment and tc gate t has aivrays been passed, it would apDSS'that a 
chants c^e 'scartr.lns' of ifan&asBo;^ by dte ^tem m London has flagged it out ss being woitby of 
inyesttoaiion. This sags has been nn going sinoe 5FF.R04 and the Oenti^ Rank is beeon^g toneasingly 
irritated with the stance taken ^ HSBC in the UK. The tiansacTiOnecaiaSiyirn^k'cS 2 HSBC accounts 
*nd theretora p-sityterjk. TT«<Jel0j'in thepoyrrent eflhc irstslIrnentlE cauEinj 

daluys m (^ur of Stan which wIKonly beceme effective ortce this Sinai 

instalirrent Is effected. 

TfiQ blo^age appears n have besn caused Dy uertetie King in conpHance. Can l suggest you sand an 
LN to Bagsly highliqhlino the rnpacl that ihs iniransiqierit oosibor wiii ha'<e on our effons lo grow 
tijsir.dS3 with Bank Markazi 


For case of retorar:^, hers are tha trarrsaction details: 



Best Regards, 


Nasser 
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From: Mateefrr g E,^STV^'OO0 
Sant: Thu Mar 11 18;37:.1? 7004 
To: DavWWJBAGLEY 

C«: QuenUn a AYLWARD; Phi! BAISfES; Gccff ARh<ffITK»4G; Rod MOXL£Y; a;3an A WRtGHT 
Subjecr. Memo; Re- Bank Mariraji Payroent 
importance: Morrnal 
Attachmerita: imaQe.O.oif 


Devid. 


Thank you. I do understand the confiiexMes i»<4ng been embrotied in them for many months mysel?. but 
my team are placed In an impoasihle poalSon. We miher have to pay or return Herm on a daily basis end 
given the keck cf cleray i am sure tiat you can unSerstaiKi my concerns. 

M.y note fnereiy seeks toraiseair/arsnaseof eniasuowhistiintetTns ofresolutiQnappsbretotiaye gons 
Lmcomfonably cuiet of (ale bui id very much olive m mo vrond of payments, l lake some comtan from your 
note and that we have a bgei opinior.. Hr^elully wo can share the contenis shortly and finally produce 
somcLhbg ivorkable ^ cor>cQmec!. 

WHh kind regr^s, 

Malcolm 


» ) j Mar 2QQ4 11-52 



Heao 

11Mar30tM11:SS 


From: OavkS W J SAQLEy.'HGHQAtSaC 


Td; 7991 8fr!5 
44 2C79 9ieW5 


S*M by: Manon 0 ROACH 


To; Matolm G EAST.VOOC«DB!<.'MS8C©RSSC 

ee: Quentin R AYlWARO.USSK’HSSCQHSeS 

Phil UtAINblSfMLWKA-IbBCl^SeiC 
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ARUSTROWG«eE!.l'M5BC.®HSeC 
MOXLET/HSEU-HSK^KSBC 
Susan A VSrR!G!-T/HGHaHSSC@l-{S8C 
tee: 

Subject Sank Marks:: Psyrrunt 
MalcoL'Ji 

I ^svB had siohf erf you rwtg of 10 March. 

Viihist i understand your ooncems, wntch i shve, panicutarty when taking a Group view, I bebe^« your 
nots raster undorcsbrTtstos the complexity of 6>e OF^ rs^SsSoh, and the competing corr^t^iva 
pressures semss the Group. 

The compterqty of lha OFAC regiiletior).s, and Ihe fact that HBUS were iinswans that any arrangemonte 
existed with iirtnian Esanks. has maoe speedyresoiudonof this issue atncuii. 

A ieg^' opinion has new been otriained (rom American laiaysre, snei a fecommendetion wBI be made 
shortly wi!h regard to wha! we woutef hope wLM be a oompffarrt at^roach, which raflerts heth the regulslnry 
situation, seeks tc address t'ne corr^jeUng competkive drtyar, arid hopefully aiso addresses the pouticai 
risks, 

IL is r>ol that Compilaiice is unable lo Tind a SDlub'oii, raster ttte sokilion is anythinu bui easy u arrive al. 

Regards 

David Bagley 
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From: Marion O ROACH 
Sene Mon Apr 18 13:40:17 20CW 
To: Richetftl E T BENNETT 

Subject: Iran Correspondent Banking Services • OFAC 
ImportHnee: Normal 

Attachments: itTiBgs_0.gif; itnage.1 .gr^ Doc Unk-hlm 


Richard, 

I refer to your note concerning the above, end attach the resufts of a recertt exchange of correspondence 
with Davkj Hodgkinson on this subject You may racM that we discussed this matter in our previous 
meeting with SKG where he gave a clear indication that Martin Conn's views should be sought before 
there was any expansion of activtty in relation to Correspondent Banking services for Iranian Banks. 


My noleof22M,<^04 to David was intended to ascertain e»c^ what was intended, although as you will 
see, I have received a slightly opaque response. 



i wilt follow up with Warren m terms of the vN>rk David says is undeiway, but as you wlH see the most 
pressing issue to be resolved is that relating to the lirreted number of existing reladonshlps that we have 
(lor two small Iranian Banks) where i suspect that HBUS are not aware that payments may be passing 
through them. Do not believe that we can aHow this situation to continue very much longer, which is the 
pewt I wHi make to David in my response. 

! recognise that there Is e need to act on SKG's suggestion for a sc^utfon. it occurs to me however that 
this solution may not be workable given the muBipIcity of printers fovolved. We are dealing with 
payments for the cusicmers of Iranian Banks. These wM not foerefore tend therrselves to a veiling 
approach gi\en that we will have no control over who acts tor the vanous remitters end beneficiariBs. 

Kind regards 
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22 MS!f 2004 15-« 

From; DavM W J BAGLeYn^aHQTHSBC Te(; 7991 8045 

442079918845 

Msi: Sizr.- 574C- 

Sent by: Marion O ROACH 


David HHODGKENSON ctal 

To: Davd H NODQKINSON/DCH MEM/HBKeA^SaC^SBC 
cc: VSferreri G LEAMIMORLA LGA UEktfHBME81SBC@H$BC 
face; 

Subject IRAN -CORRESPONOEKn* BANKING SERVICES ' 


David 



Whilst the abiTve steps ere possible, it is likely that H8US will need to satisfy itself that 
the procedures are robust and adequate giveri the signified! regulatory and 
reputational risks they run if errors were to be made. 
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I am uncomfortabfe writh this activity in its currant form 
arrd think that we need to make an early decision both with regard to this business and 
the extent to which we wish to expend our activities invoiving Iranian banks. 


I spoke personally to the US lawyer who has provided us with advice, artd separately 



My reason for writing to you at this stage is that i think it would be sensbie for us to 
make an early commercial decision before we spend any more money on legal 
opinions, or in upgrading our activities in the UK so as to achieve a compliant approach. 
My sense of the value of the existing business is that it is relatively modest. When I 
sp^e to Nigel Weir, my recc^tection is that he was talking about the value of increased 
business as beir>g some USD3rn. if these figures are accurate, then the amount of 
revenue may not justify either the additional work and investment that will be required, 
nor would It justify running the reputational and regulatory risk in the US. I recognise 
however the significance of this activity in terms of our image in Iran and our ability to 
expand our business there. 


I would be happy to discuss this issue more generally with you if that would help, 
although suspect that perhaps the next conversation you might wish to have would be 
with Martin Glynn. Could I suggest however that any such conversation take place over 
the telephone, as we are seeking to avoid correspondence with HBUS on this sensitive 
issue other then through lawyers so as preserve privilege. 


i would stress that I do thirik we need to make an early decision given the current 
activity that is laktr>g place. 


Regards 


Redacted Material 
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David Bagley 



17A(>r2tlM 07:55 

From; Davkl H H(XQKWSON/DCH MEMVHBMF/HS8C 


David W J BAGLEY et a1 


To: David W J BAGL£Y/HGHQ/HSBC<3|HSBC 

cc: Marlon O R0ACHA^6HQ/HseC®HS8C 

WarranGLEAMtNG/RLALGAMEU/HBME/HSBC^HSBC ' 
bee: 


Subfect Re: IRAN - CORRESPONDENT BANKING SERVICES 
David 

! have been in regular contact with Mukhtar Hussain and his learn on this topic which is still open. The 
current position as briefed to me last week was that we have not /et found a way to handle major USD 
clearing busings, and ! am anticipating having to e^iplain this to foe Central Bank on my visit to Teheran 
In early May. i have asked our people lo pul forward (he basis on which they believe this could be 
undertaken with the lowest level of perceived rtsk. sothatif cbcumstances change we know our pretened 
way forward. 

Regards 

David 
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From: [Javid H HOOGKINSON 
S«ni: Wut Jun 3G 11 :5C.21 2D>'>1 
To: Mbhael F GSOGf^GAN 
Stii^ect: Metw: RR:!ran 
^por!&nc«: Nomtal 
Attachmanta: Dec Linthtn^ 


J slitMiid bcgnicful for your usisunrc wi(fa su issue rclKifig u dte 
processing oi' USD psyosiits fer ittstsn Gsiiks. 

Youmuybcuvv-isie [hat iO}>etlKr wiibyourp4<?nes«; team and <jHQCo>«p>>ance. 
v.t have been workiiw fcr wm* tm* totiy tmil establish n sohilieo 


seiuiipn *5 found OHQ » isn^»«fy tIistMASMiol so HBFU 'O 

tuiiitituc making |;i>y[i>e}ils i»iihu3l CuH dcskiswe. Tbb dtspemaiion ceuiiDt 
ISE! iiidctsiidely. 

advised s)nt (Hey feel uiKon'ronsble recommending cofflitnfiioBafihis 
business and sinless coitipeilinR commereial reasons exisi lyiK se edvisirie 
rslt'.an; isanies i!ai ihis busiMss^.Til cease cis 

Yuu»>ii] iioic rcom lie aiisclKdcOTeapookncetbat'acteve appealed and die 
Masons iHv; been sniculaied I am noa’ sirtcB^ VBsr ia«f\emioRaBd iBJposl 
in rooNieg posi’n'ely iHis lani' oassiandiiig issue so dza lav cn cotfiuuie 
to crTce; l?SD psytnen:s for our IfSituaB Baii: cusvvnteA in ime viih US 
lepnlaiory r;c[iitrenieAit. I sin aw are (Hat the v(>Hii»eorsi>»<nen$ rSAKi^l (2n 
per day) tstd Hal liivy orTlI be iirisiaaliy mtensive Him us you kno'ir inn is cf 
signi^caru itrtKgic iniponsiKx !« |l>$ Gioigi mkI oiu reTiiss) lo coienai; n 
uudenaJee 'Jus business for GovemnKin owned Itaoks «ii! unlaulMcdiy bas-c * 
very ncgaSiv! impact. 

Thaid: you in inlvancc 

Dived 

romrjnjsd by David H HOfXiKINSOWDCH M£.M.-MBM£fHSBC oh «»,',1tV:f'W c;:47 

PM 



Nigci.'WSia 
R>1 JB MEMihBME 
30 Jjn2C04 Id:S0 
971 4 MT7622 

To; RocMOXLEY'tlOCaUSBC^«SBC 
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cc: David H HODGIOMSCW/DCH MEMjHSME/K^C^HSSC 
MukhiHrM HUSSAIH/CEQ IBtM HFS.WKBMWJSBC^S8C 
CcofFARMSTRONG^BEU/HSOCCJiHSaC 
Phil EJAlKEa.'MOeK.'HSBCyi’HSaC 
Nasser HOMAPOUR"KSBljHSBCAPAQa«SBC 
jDftii Al.trSOfiUGHQ.^’SBC^KSBC 
Sii«n A WRlGHT,'HGHO,'HSBC(?'HSBC 
WiTTcn Q UEAMINO/RLjA LGA 
Jotm E ROOTftlEEU.'HSSCjfliKSaC 
Gary aoON^XCR PCM MEM7IBMf7HSDC§#(SOC 
Ajay BHANDOOl-A.’RM PCM MEM/HBME/'HSBC«iHSBC 
Malcaifu G EASTWOODMDBK.'HSBC@KSBC 
Simem R VlCKERYr'HDEU/HSBCigHSBr 
Jerwjy H WAl.KElVHBEUmSBC@BSBC 
Tony ? COLLINS/K3EU'HSBC@H£BC 
Snbjeci: Memo- Re; Iran 
VourRcf: 

Our Ret 


Red. 

Tnankyeu Tir youritoie. IrAOuidnsk yoaiCrtcoiBKcr your suckled 
prepospias tlitrs are very scr.vcIisniWTsnsreislTeaKMaarhscIs 
bon}eir,nnn(]%beiitr.a>(m 5 il)isclnrtst[in, noi RAStorwtricRIsAetlueatto 
ilx- Oroup'i po^iou iti aiRl business with iron over the cuediuoi lenu. 

YQ)1 may beu'Ave ihal (Ik innianHsniBL’taiiiseHSBClitr ilirscpn-nKuisare 
Slate owned baiJa. Ifwc advise dKintliiH is'e will no louder coiuimicia 
prwess these paymetus ws ivt!! be elleciK^y insalitng the Go^'tnrjsfl rju! 

State of iran. The inipiicalwnof thbacticnisdinkuli mpeediu wait 
(cn,iinTy b\n 'Ht expect Ihal it wil! advcisciy in^Mctour ovtnU busiueo 
q'ith Iranian bartls and. iiKrt i;r$;<!nan'iy. C3r3penibnsip.tn!i. In'Js 
cuncis XTsithx polhtcal situation n-c have declined lo accept new USD 
pcymciiti busiricss frccu Inesianbanksbat locn! buciruu which have vsen 
fcndiKSing fornwty yeon weuM ieoptpBse all ether exiiting business 
aciivitica. !i will spcciilcaDy iinfKi die servieiisg of our trade busiocM 
with Iratt whar: cur «UTsr.t turnover is in excess of USUt Bn psL rcr yov>r 
litfnimalinn.ovamll. the C^rovip cams aboni USDIAM pjt. from ihesi.' biuliKSS 
acuvities. 

Wr believe il* low voluiiw are rewanaldy com rrTwiivf iocom*oI and x< 

SuUi ISTiOtiid be ipaicrui ifyuu uiLkcfevikil Ibis issue and, wording widi 
Group Ccatp'.iatscv (jaxI the PCM lean) b t!CM£ Dubai ifappropriuie;. pTCpiue a 
sohjlion which will Enable HbEU io effect USOnmuMittsiniKCorfluriCB wnii US 
rcjpilmions tbr our Imnisn Bank cusumicis. CHQ CoinialiaiKe cw tben ixcseiii 
this to H8US for i!*tf coisideratieis. 

Tltuik you and RegsM: 

NiRCl 

P9J«i32«M 

Mcoid 
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To: Johij ALLISON, ■HOhlOj'HSBCiiHSBC 
t:; SuisiiA ’«.-RlGHT,'5igHQ/»iSEC^l»C 
.!oho fcROOi''«BEU/HSBCf^lSBC 
Nigel J A'EIR/'RM 10 MEM-'HBMEr-HSBC^SBC 
C3jy BOOK;MGR PCM ^^EM«SME«SaC@KSBC 
MaleolTTl G £ASTW0OD.'MDBK.HS3C®HSBC 
SinKKi .? TTCKERV/'ilBri.WSBCgflSBC 
R WAiR£R..'H3rvl.'HS3C5iHSBC 
Tony PCOLLiKS/«BEU-HSBC-/jHSBC 
;>cr: 

Troin- Bod MOXI.F-Y Tel: 799 n<5ft4.44 20 7«5 J«U 

OwReS YairRef 
S'lisject ira:'. 

iolbu 

1 n»vciu\’icwrdliSCmiiRci'a pr(v(to>Kri\(»iuir-flcinlivmMi\)-(mpsyiiKfU and 
iv.y brief CTyiri's" !sas folb’i.i. 

OpcialtRiisI dilTkuiljcs 

i.l Ouplicoibn of piyinenu. 

nn<oKc JiTJCfe addilional d«ic! «! Lhe 
MirinTs nikJ ii H loy hcUefi'iali'iu juditiosu dc;ii}iiHy leade wrk 
rseipisre* ireiuing this is a direct paj-rscrE raitei than iie w.-er ofsg 
ohgio&J M.VQKtn. CPjplication ai payiiien may ictctl. 

ii) Globjt! irA-kei pfaclice, 

Th: prsccdura wc would 7n\i be adapt ^ would be si vvbnce willi staiKfet^> 
ir.srkci pnetier and this intiseif rnnUpfOt'bKcpnicr.^singpmbl'tiTK 

i-ilST?. 

The sugfcstcd piucedutev-ouid isadloirs^tc cccaisl intcfverdiors greater ccii 
iiitd iwient’aUy tess cnnwl, as ’(or 4 rtirTfomt siittcenbeinvolvedin 
Uk piuceuitijj uf ioy i^sit^ctioit. Tlis ievcl ttf evoirut wltich RMS could 
exste-jeaversishpaymcas dbtinislin aspayntm prewiingi!, divided 
between R'3C (NHQ271, £PS (.LIviugsion) otid OSC (India). 

}v) OtherUSlsittki, 

Tnt Sica:* of other US bulks wbs lio’-*e wiilidrawn Soa ilic Itwieo rraikct xcaw 
ilBi vt are siilt >ii a vidtureCie pssium tfour cusioenere are atdemg us to 
give guarsntees ihei pajuieuu will tekIi ibeit uiiiitviic <kslituii'er> wiiliout 
proMerik. 


v) U-tunt psyirtents erticjia. 

TYii dcRniiiuu of wlui eunsiiiuwv a O-iuni pay nuii is upcii w (merpti'ij'ion 
ard ihe accufjcir of infoniwion or. tlie OF AC website Vas^so been 
quesiiotied. Tias can toad ui on occasions lo making rot>ieciiwedev-isioiv» 
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'■vhic!! couM icdd opersticssi Icss» st :7psKSio»i! isas^. 


Pro^sal 

Flit tiiD i^uied ab^vve, t Tcci I'CFy iirconit'oRAIc ittoirancnding itw vt 
coiiiinje lo process IrBni&Dpaunwnis. U is possible fo cow'nue but fix’ 
higher Jeve! ofcosis.ihe reducrtoii ofci>f)in^p«aibl&sy»DB 
eiinariceroenis anu ine poieniial icr error n-au this ariallracitv? 

We have dlsaissed tfiis 5>!ya>>or> « lei»g»b awl ». laHw IIbbi rH?pes 
arwElwr rrunJoftal^ I should x graicrii) if yon could let ate your 
ibms] rospons:. (ujk 3 ihs; ofusiy orhc tnitresied c^poiticstodas 
eirwii) hy Friday IR-h J.IIK nniu 

"nwreafter, ailcss eoTiptll'iig eoRsncrciaJ rcasorisecisLuduoUlrcyebces 
e!«loned by f imiip c:('mpliance »n) HBXJS. > tHali be Kmittlly advittos 
iiiica-siul Rcbiibib'ujj iiKri >.e wH> hu lutigei 

IiwrianTjaymeres iP.cr 30 SeptcnlRr 2004, 

Regards 


Rod Mckicy 

Regulsiory and C’perai'oru] Risk Manager 
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Froni: John fWilALDl 
Sent; WW Jun 30 12:23.23 2004 
To: Michael F GEOGHEGAN 
Sub}ect; iJlemo; fw: Iran 
liRporUnce; Norrre! 


.-uikr, i %’as c-f this, cill gel ui upJaic aa<! let yxm knoA'. basicaUy. 
otjr iiiisq>reis!io't was 'li3l we u'«r» being asked ro "fa^“llie mtinc oflbe 
p»ymeiis lu avoid <iie U.S. eniijar;;^ aiid sebure.a fe«w days: 
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From: John RANALD! 

Sent: Tue Jul 06 15:07 22 2004 
To: Mlcfiael F GEOGHEGAN 
Subject: H6EU Iranian Payments Business 
Importance: Normal 

Attachments: IRANIAN PAYMENT - EXECUTIVE SUMMARY doc; IRANIAN PAYMENT PROCESSING 
PROPOSALS.doc 


micliael: rcferwKC yoiir earlier iiucry, 

lliis is cleail^ noi a simple iiiasar. our poshire has been to lespeel the t«>w 
aiKl our bank.s rqMii-’>rinn wc urc being asLed Itf omenil nsInKlknu or. 
assume responsibility ttuii ihe contermoflhcpayDUOinicsagedoiiolaltnta 
the i'ed.s aiienijon uud klzc the paymetR. we should not Dike on Ihai 
responsibility, essentially, a payment cierV isnskediojnrigc U|iooapiiyiu>nit 
kicked oni by Qr filioiing sysletu, whether to rcScase. or letuia there U 
an irony; sormcrc could ary;\K that by icitjinnigpayneiiuio iran that we at<e 
contreverans the oliic nilcsfoffics o!' foreign asset control), 
today wcrancherijkof niuvirtg the payuMW seired andiacuning Ihe 
opcralioal loss, and 21 jeopardising the gn>up.s repubmon and meumag 
iicj'tj lines 

even if lie receive an indcrartity. oiirpeo;^ wotild ccidinac ^ be asked 
perhaps to decide wticiher a payment is acceplaUc despite being kkked-«ul by 
the fiiiering system, so as to avoid sciTutt. wc will mMre mistakes. Iloyds 
lias been fuied i.iii told aitd few if any uJc. banks are in the business, 
wc iTUy disctis at your leisure, t will bnng il<c expens. 


— Fcr.vard5dbvlolu3.R.AN.ALDl/HBEU-HSHron06 Jul 2«M 14 -W — 
Malcolm G EASTlVOOD/MDSK/MSBConWi ju1 2004 14:26 


!I6 Jtil 2(i04 14:26 


From; Malcolm O EASTWOOtVMEffiK.'RSBC Tel; TOO 12300 
44 207 »1 2300 
Mail Size; 94011 

To: Johji RA-NALDl.’KBEU.'HSBC5t>HSBC 
cc; Pal N CQNROY/'HBEU.'HSBCtinHSBC 
Rod MOXLEY.'HBEU.USBOd'HS^ 
bee; 

!><ibjeel' HSr.ll Iranian rayincnK Business 
John 

Please fiial sutticbed a detailed ooie on the subject of Iran. I have aimched 
to this etiuiiH one page Execuiis'e Suounary wiiicli provides (be liea^incs 

Tliis isnn eatreirvcly scnsiiivc ttrea. Tedite we have steered away (iom 
dciatling exactly tabai we arc doing wiib these panicular payments because of 
the seustiiviiies. 1 would cetuiniy counsel against a wide distribution and 
wc should defmiiet)' resist any oiove to scod the detail to anyone >r> HBUSas 
it may well uuutpioiuise tlieirposition with the US Au:borit:cs. 
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TIk Fed would ccrtaJikly frown on ai^ ptoccss «i1hcr dcKberaieJy ar 
ascidontaily dosigrwd to prevent il% Icgiiiniaicsequesiranonofliaiuan 
hinds under OFAC roles whicli is vti^- wccnirenllynsc the Wolf filler to 
ideutify pctcnlial terrorist reiared paymersts aart rat lo block odsa 
payrtenls. riie proposals are written (oronccianM^ustinere in tbeosc of 
Vr'olfto check th,ii Irnniatipayrnenu are legitinuB U Turn (lent! and dten to 
release these rather any attempt to prevent US tegslaikHi dais; its job 
which mipitt then compromise the Croups US licence. It also {Maces the nsk 
and responsibiliry for ensuring payiiicniiegituiiaey fuuMy widitlK IranianFl 
commiaiiry r.ither Utnn with ourselves 


This IS a ditricuU area for many re.'uoas, not tbc least of wtweb is the 6tci 
that the OFAC regtdalions relating to Iran tend to be erey and are sii>jecc to 
dilTcrciii inierDreuiiiotu by ilic US Ftanks. In this proposal we are atcmpujig 
tu walk a ditTii:u)i path between protecting our US liccatcc wtuhtalso 
proteciins a itot iusubslaniial L'KOinc stream and hinin; potcmtal tneome 
stream from Iran. Thesafest option fronirny perspective vould be locxd the 
Iranian FI paymertts husioess as iiWIccd others hav-e but in lire krawlcdge (hat 
this will denude our iiKotne sneain Rod and I hnve tried to build an 
aiicrraiive soiuiioa 


please 'ei me know if you wiidi to disctiss. 


MjlcoliTl 


— Forwarded by Malcolm G FASTWOOD.1yJDBK/HSRC on OA Jnl 2004 1 J:56 

Rod MOXLBY-'HBEU.'HSBC ou 06 J«l 2001 13:35 

Memo 

06 Ji.l2n04 1.3:35 




From: Rod MOXLKYi-HHta-HSBC T«l: 79v 13(»A4 
4420 7991 :*<>W 
MailSi.t8:5*J54 

To PhilB.VtNES/MDBlU'HSBC^iiMSBC 
te. GeolTARM.-jrRONO-'HBEU'HSBC^WSBC 
Malcolm G uASTWCXlDr'MDBK/HSBC^KSBC 
BobA'A’ESTONVHBEU/HSBC^yiSBC ' 

Jeremy RW.iU'F.R/KBKlj/HSBrw'HSBC 
Te«y P COl.t.rN&lfBEU.'HSBCcd'HSBC 
bee: 

Subject' Iran 
Phi!, 

Funber to rccem diSL-ussions with Malcolm regarding potemia) solutions for 
Ilielnmis!ipaynien5 issue, I aiiach a docwneni encompassing a potcraial way 
forward. 1 sluill be pleased to have your cotnmems tr. duo course or. if yea 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N./^SBC OCC 8876862 


VerDate Nov 24 2008 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 


Frm 00856 


Fmt 6601 


Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



843 


Itci it apprt^riaw. wc can discuss over Jbe pluoe. 

Regards 
Rod Motley 

Regulatory lind Ofrcratiorwl Risk tuanoger. I^rnera Services 
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HSDC-6NI_E 0067605.t)rt 

From; DENISE A REILLY/HBUS/HSBC 

Sent; 11/30/2004 3 t00;54 PM 

To: SANDRA PET£R5CW/H&L/S/HSBC@HSBC 

CC: “MICHAEL GALLAGHER" <MICHAFLB.GALLAGHER@US,HSBC.COM> 
Subject: Re: Fw; U"tums 


Thanks for reviewing. My resporises are m blue on the attached. 
I'!i ict you know what comes out of the meeting. 


Sandra Peterson on 30 Nov 2tX!)A 14:42 
Note 

30 Nov 2004 14:42 

From: Sandra Peterson Tel: 302-636-2500 

Title: Senior Vice President localjon; Delaware/B, Floor3 

WorkGroup: 

Central Services Mail Size: 10546 

To; Denise A Reiliy/HBU5/HSBC@HSBC 

cc: "Michael Gallagher" <michaeLb.ga)lagher@usiisbc.com> 

Subject; Re: Fw: U-lurns 

Denise, thanks for re-sen ding the doc. Just a few questions: 

It is my understanding that initially there were concerns about the potential 
intentional removal of wording "off llmil pavitmiKs" Irom these payments. Based 
on what we are being asked to do now, has that concern been addressed? 

I'm not familiar with the use/removal of "off limit payments" but the 
recommendation from a legal and compliance perspective is to have foil 
disclosure of all parties and payment details. HBEU would be advised to not 
alter the paynient details in any way. 

Is this proposal for Sank Melllonty oris the mtent to grow this business? 

When this topic first arose it was to support QaftkMelU but my understanding 
is that the business under disevssiott now is more general, with no specific 
client.s named to data. I also heard sometime ago that Bank Melli established a 
elatlonship with another institution for their USD correspondent needs. I 
Pagel 
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HSBC-BNt_E 0067SDS.n(t 

don't think the volume of transactions would be comparable to what was 
discussed for Bank Melii ('500/day). 

Out of curiosity, how did legal respond (inteniBt and eirternal)? 

Legal advised that we should have full disclosure of payment details and ensure 
aoproprisic controls were in place. However, the hnal decision on accepting 
the payments was viewed as a business de^ion. 


Thanks, 

Sandra 


From: Denise A Reilly on 30 Nov 2004 07:0 

To: “Sandra f’ete/so.n" <sandra.peter5cn@)us.hsbc.com> 

cc: ''Michael Gallagher'' <michael.b.ga1l8|her®lij5.hsbc.com> 

Subject: Fw: U-turns 

I'm not sure if you are aware that the possibilityofdofng U-turn transactions 
has been raised once again as a business initiative. This topic has come up 
several times since 2001. Terry Pkcc was asked to meet vwtii Martin Glynn on 
the topic and she asked Michael and I to join her (today at 4pm}. in 
preparation, attached are the required control procedures for doing such 
trarrsactions, The document v/as developed with Anne Liddy and Carolyn Wind and 
was vetted by external counsel when the topic was last active in 2001-2002. 

Please let me know if you have any comments or concerns from a Payment Ops 
perspoctiwe. 

Thanks. 


Frem: Michael B Gallagher 
Sent: n/lS/ZQOR 03i2 PM 
To: Denise Reilly 
Subject; Re: U-turns 

las Sandra not reviewed? 


Page 2 
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From; Denise A Reliiv 
Sent: ll/29/200<l 07:45 PM 
To: Michael Gallagher 

Cc; Teresa Pesce; Grace C 5anitago-Oarvish;Al3nTKetlBy 
Subject: U-turns 

Attached are the control procedures (sJightJy updated) that i put together when 
I was in Payments. This should be part of oor discuKton with Martin tomorrow. 
Give me a call if '/ou would litre to discuss before our 4pm. 


Pages 
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From: DENISE A RBl.LY/HBUS/Nsec 

Sent 12arz004 4:39:01 PM 

To; MICHAEL B GALLAGHEFVHBUS/HSBC@HSBC 

CC; TERESA PE&C&HBJa'HSBC@HSBC;SAHORA PErERS0N/HBUS/HSBCj5HSSC;GRACE C 

SAHHAGO-QARVISHyHBUS/HSBCfgHSBC 

Subject U-Tums 

Attsched are tie condlSc^is under which HBUS wiB accept U-Turn nnucllons. I 
have reviewed wilii Sandra and Grace. 

Please call if you have any questions or needaddrtiond information. 


Anachment; U-Turn ConditionE.doc.zrp 


{ 
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HBUS Conditions for Processing U-Tiirns 

Agreement to the following conditions is required for HBUS to accept U-Tum payments. 

• Transactions ■will be formatted in accordance wth SWIFT standards and will be fuliy 
transparent serial payments that reflect full payment details. Payments must include complete 
name, street address, city and country of die originator and beneficiary, 

• HBEU will agree to strictly abide by U-tum processing requirements (to be provided 
by HBUS) and wiD not alter "as received” pajnnent instructions in a manner other 
than that required to meet payment formatting requirements. Payment details will in 
no case be dropped from the instructions forwarded to HBUS. 

• HBEU will indemnify HBUS for all potential penalties that may result from violations of 
OF AC sanctions, regardless of the cause and source of the action that precipitated the 
violation. 

• A separate processing account will be established under the name of “HBEU Special 
Account” on HBUS books. Only Iranian originated transactions will pass tlirough this 
account. 

• The account number of “HBEU Special Account” will be entered into tlie HBUS payments 
system OFAC filter so that evoy transaction for this account will be stopped in the OF AC 
queue for review and approval before processing. 

• HBUS will be reimbursed for any additional FTE’s requii-ed due to increased process burden 
attributable to OFAC review of Iranian payments. 

• HBUS pricing for the transactions will reflect incremental processes and risk. 
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From: David H HCDGKINSON 
Sent: Mon Jun 27 1 1 ;29;30 2005 
To: David WJ BAGLEY 
Cc: Richard E T BENNETT 
Subject: Re; IRANIAN PAYts'JENTS 
Importance; Nortra! 


Da\id. 

Bj' wsy ol update. KSME ti oirrsutlj' seeldDg loop^a L-SD sccoinu wi;h iP 
Morgan Cliase as our fust dioice (or Bank of America u second cboicet. in 
order 10 process Iranian rciaied LSD payments. Wtulu 3PMC lave verbally 
sgieod to open the account they Isasx is-amed ns djat any cover p^mcm’coulu 
bf subjed to (Itsit compliance process '“hereby they 'vouM seek r»ill details 
ofihcnndcrJyiRC iransaelioii cilbw before or after {wocessing.71»rec«iM 
be a risk ofreArrml lo OFAC should ilMaritHerprvtjtioiioraU-Tun! 
tnnisactionbcdiffcrenl io ours. Ws have been advised that aDacconm could 
be opened vviihii) a few weeks shsuid u'c proceed down ihis mad. 

At the same itaie. aw USD acconuis for our banian cKicspoattena n-illbas'e 
■Q be opened with HBME in DubaL which will brve to be canunumciied. wall Use 
assistance of mtr Tehran dfice. in order to get their USD paynwmsre-roiiied 
appropnalely. We will also need to csJablishpmccdores in order to ensure 
coinplisncc wtib OFAC reguiauois regardniB U-Tuni paymcitts, whiclt bivotves sin 
operationaJ review aixf staff training. Wnh Lotdeo's as^tance. llus shoiild 
be loraplctcd by early Sepiembei. 

i nolcyoiiT coniincrts in point 2 wiih inieirsi aswe 'levef covKageil anything 
oihcr than U-Tum compliant paymeau bcuig processed. Aceordingty wc agree 
(hill (iKre is no reason lo use anyone other tleut HBUS and can conliroi that 
tlierc is no tnisimderst.arafing in this regasd. lundcmoodibat thcoidy 
rca»u 'A'c considered using aiMtltct US ccirespKKtdcitf was purely b-caicsc HfiUS 
bpri shown an imwiliinoness to prrwew ihf'* tranwlions <hr reptUiitloii risk 
reasons. Haviog cossi^red litis further it appears to us [hat visiug aitotfier 
conespoiideut may not cotupleiely ouwcorae the tepotatioii risk issue. 

Nk’hcn (hcUSDaccouitlsoriramaubaitfutfeopviKtIujDubauHBME will take 
ever ibv vayiiieuis lioui HBPu. Wv will csl^lisU a specialist leati) to luaiuially 
revie'Ai eaeli iraiis-iction (including running them through WOLF) ensuring they 
aroU-Tum eompliant.. We intend to contiuuc with the cover payotcotmetlnd as 
nut luutersiandlug Is that if serial paymenis are used other US banks In iru 
cham !L«y imetprel ihe U-Turo process diiTetwitly whieh may lead to delays 
and Ollier problems as paymwis are reJeired niisudienly lo OFAC. We envisage 
providing HDUS scpcvatcly willi Rdldaailsofcitrhpftytncniftnit mawianner 
to avoid duplicaiiou) so ilial they iitc sc a posilton (o satisfy [licicscb'cs 
and anybody else clut die paymetns arc semiiuc conipUaat imuaetiout. 

For ibe sake of clarity we would repeat Uk defioitioo of a U*Tuiis paymcoi 
defined by OFAC on their website as opaymeni”.. involving ban when US 
Dollar irausaciions are cicircd tiuougb a US bank. Gaicral^ speaking, ihcic 
roust be a li}ird>coutiiry bank onbeih sides ofacransactioDtoquali^' as a 
’Ll-Ttim,' for example. Biink MclK Iran ejo send fiinds froin i|$ accmii't at a 
GeniHUt bank ilirouglt the Gennan bank's correspoudeni m New Yoik to an lialiw) 
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t>a»kia pay fcr goods purcImscuSnmlUiy. Tlttcripnat&^aidbciKGctao 
banks may nor he \)S banks." 

In light of the pasirina assuming rluit rfiedeciaiontouseaiiatlKrbank h 
re-visiied aiid ilie above process is accqpiaMe lo HBUS and yourselves. HBM£ 
will be happy to meet HBUS ctmnterpans to provide them udihaiyflinbct 
coinrort or expianaiion iliai ikey require. I hwe uoi co]^ rtiis messai^ to 
Sleplicii Green, its yuur iimSogc »'iiv iiol. 

Your rhouglits and guidance ‘A'iil Ic appiociaicd. 

Regards. 

David 


David w J B.^GUiY 
HGHQ 

3t> Jon 2<i0.v 1^:27 
.7991 2079 91WW5 

Srni hy- Mjinnn O ROACH 


To: David H HODGKTNSWl/TXTl JvfnM'HRVnvHSBC^HSBr 
cc: 

Stibjeci: IRANIAN RAVMEKTS 
Out Ref: 

YoarRci^ 

Emity: HSBC Holdings pic - HGHQ 


Da\'id 

The above lopic surfaced In the routine cueciing wlucb Richard Bennett cad 1 
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iud Willi Siepticn la advance oiiJic&KnuliivG&IBiiKeiuig. 

Siephcn raised wiiii ire t^e foiknwos poiitts:- 

He sougb: my asnirance Ihatthc agreed srraojcoDcnts iniciauonio Itaidai; 
paymcais bad been pul iu place. Foj otn-ious icasonal «as mn able lo 
cluit coafimiation but did eaiphoMie Ihaiin failing lo do Ml was not 
suggcsiiag ihai ihea-'Tsiigcumns weresminfacieoaipJeie fdiou^ir 
oulv lisht and proper however 10 aknYouio ihcfiictihatStctrficn b 
tookiug for coafimiation that all pOTmems aRintbcB^rauicdiliroiistiHBME 
via a iion-Group clearer, or iliai a reasonabfy proiumaic dale hat beensci by 
wiiiclitmic liiU!>e.ai'ntiii:;<iic>Uswil) belli place. His&Eribecifuig&iCx b 
IHissilily cy.jilaiiiedby i!k iiifcniniiisiiaiiifausit! iu lie lliinlbuUelpciia 


Stephen also asked for coiiTimiaiion ihat ibe paymemsihst would pass through 
Uic L'S would all be paymcnis whicfi wcic U-tura cxcmfi even if fhey n-eitf 
ibrougli die US in ilic iuniioi a cover payiunU. .AiUnu^i ! may have 
iviisundcisiiiioil our discussioM 1 wes not pi'eviDmly awuc dtai diis wta a 
prccondiiiODiicr did my original paper envisage ibai if we used a nan-Grotgi 
corrcspoiidciii wc would necessarily consider passing ouhrU-lum excaigil 
pnyinenis ilaougb them. In fan in neb ciroiinsunccs there would be no 
iea.wiii to use anynne otlier titan HBUS gK'ui that HBUS could not bccritkiscd 
were it lo carry uul cxeiupl puyuGinis. I would be graleful if you would 
eoiiiimi that iliere is no misurvaeBiaM-dinj in ihis .regard and (hat we will 
only be p.-issiiig payments ihrough Ihe US. wbcilxTorniHtticoijKh otnown 
correspoiidem, ihat we liave '.■alidatsd as being U-lumeyeitip(. ifthitnoi 
ilie iuiemionilien! suspect sotiw Qinhw dlscussrois Mlh Sitpliai nw 
required. ^ 
rtpparcni « 



The tBssoii tor nty sddijtonal eatiiion is that liwd a utrabw of discussions at 
II receiii WulJslcig uievdng wliicli laiscd my cuiiccnis wiAi rcgaid lo Ihe level 
of serudny ihai US auUioriiics are giving lo cover pay meins generally bui 
alto specitically in telaiictt lo OF AC coojpliarw ou die pan of US banks 
cabins correspondent bsnkir.s services. 

One maior European entity has made a deci^on to apply OF AC renbition and 
resuioiions across the otuireiy of its opcratiois, inside tlx Ub and 
ouislde. in nil cnrrerKles. Alihni^h ibey were hcstiaiii in ctplainiiig iheir 
reaso'is fbr taking tliis dwision 1 suspect il is becuuse they luve lied rcocm 
fiiirly well-pnbliciscd diTieuWes w ilh OFACcongilimxc. 

Another European i's'iruiiou indicated that ihey wore lacing cerimiuol 
ptoseemion in tlic U.? for dclibemiiim evadiiiK OFAC sanetimis by railing in 
llnkacovapaymeni and an urderlyingbiutk to bank message together thus 


Redacted Materia! 
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3liciwi»p ihp «a(3ciioos (!> hf cv»dcil Adirnlieilfy jhfirJiciiviiy lo 

luvc been ihrciiis)) ihcir own concs^xKidcifl liranch to tte US. ai^ 1 was iUirt>1e 
CO clicii auy funlier dccaiis. b^cHtcciicless Uusdocsscetnia metojusti^ 
fii"therscruthiY and constderatjem on our pan. 

A;. ! may have iiKiatoiaed ihe US regiilaioiy auitorHies. OCU and Federel 
Re«en'c, lire ciiTryinjj oin n joiia peer f cvicw of coTtcqjondem biinfc»nt> ftom 
tuL AML iuid OFAC compliiiucc penpccw'c. TIk visit to HBUS wiU casinoncc 
slionly ir il hiis not iilfcudy caiumcuccd. As pari oTihal review I believe 
iLai Jjc US atiihoriiics Iwvc focused upon cover p^mcsis both in reiaiion to 
AML pioccdures bu! also in retaiion to Ob'AC con^iance. 1 bdteve ihat a 
fpOieacial accovini of rlie senniny and the resiltatitrecrnTimerKtitinDs wilt be 
an expectation dial US books sboold not Bierely accept covHpaymeiisv'itfBuc 
sccldjte full dciails of ajiy undcnyitis uansactian. That would of coitnc 
i!K3aihai we would probably be rceiuired to disclose both details of itie cover 
pa.vmcnc and tlic lacked aicssaac to US concspondcal wc employ cvcB if tbey 
were a aon-Gioup vorrespondmu, i rcco^iisc tbac li^ is something primarity 
for the US canespciideni to rtcsolvs but ! stnpKt rou mey need to iactof this 
poicniial dcveiopntsni into ynitrihnitgln pmcesscs gomg fnrwwrt. Ofeniirec 
if litis isa widcrreqaircincnt of all US Dollar cicaicn ihm the potentia! 
for damaging our relaliCMts with Iran would be miniintsed gwen Ebai we are 
mcieiy ibllowiDg rcsU'iciions imposed ou all mailct psttKipanis by a moie 
iiealous appitcalioii ol'UShiw. 

I am in fact out oftlw efficf tro'tllir'g on basirasstlKS week, twill 
hovi'ever inoniior my DlackDenv'. hm it may be that you would prefer lo 
correspond with Sicplien direct with regaid to Utc first two points on which 
Ik was sccidiis assuraiKc. 

If ihcrc is any news with regard ic the funner legal advice that is being 
taken iltenlniii ask Jolio Root to consider a joint note to vs. 

Rcgiiiils 


Dav-id Dagicy 

isenl 1501 sscD by DWJB) 
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HSBC-BKI.E 069947S.txt 

From: ROB MUTH/HGHQ/HSSC 

Sent: 5/8/2006 11:07:51 AM 

To: CAROLYN M WIND/HBUS/H5BC0H58C 

Subject; Fw; info: Fw: tp <Sateways 

Carolyn, are you OK with this? l would have thought the us regulators would 
have taken a dim view of routing stuff around the us. Pis comment. Rob 
Forwarded by Rob Muth/HGH^HSBC on 08/05/2006 17:06 

Peter c L OE hontfort/hchq/hsbc 

HGHQ 

08/05/2006 17:00 
Phone No. 799 23755 
+44 CO) 20 799 23755 
Mail Size: 5769 


Rob Muth/HCHO/HSBCflHSBC 
cc 

Subject 

INFO: Fw: TP GATEWAYS 

Entity 

HSBC Holdings pic - hghq 


As discussed, 1 am expecting the impact of this to be some delay in panama and 
Mexico migrations from their current dates of ICMay and 33UN respectively. 


David W 3 BAGLEY/HGHQ/HSBC 
HGHQ 

Sent by: Marion o roach 
10/04/2006 15:58 
Phone NO. 7991 8645 
44 2079 918645 
Mail size: 2830 


Luis EOUAROO/HBBR/HSBCaHSBC, David Lei9hton/HBMX/HSBC®HSBC, Brigitte 
5CHIMUNEK/H8CL/HSBC9HS8C. David S OOMCAN/WAR/HSBC0MSBC, Andy 
GENT/HBBM/HSBC(»1SBC, Virginia SUAREZ/HBUY/HSBCOHSBC, Joseph L 
SALTERIO/HBPA/HS8C0HSBC 
CC 

John ALLISON/HGHQ/HS8C0HSBC 

Subject 

TP GATEWAYS 

Entity 

HSBC Holdings pic - hghq 


we propose that the countries in the Americas outside USA disconnect their 
Page 1 
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KSBC-BNI«E 069M75.txt 

payment routing link to the USA TP Gateway and reconnect to the uk tp. This 
will provide two main benefits, firstly the ability to make payments in 
currencies other than USD to countries/names/entities sanctioned by usA ofaC 
(as permitted by GCL 050047), and secondly to take data records outside USA. 

can you please advise John Allison by 30 April 2006 whether you agree with this 
proposal . 


David Bagley 


Page 2 
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From: ALAN T KETLEY/HBUS/HSBC 
Sent;5/26/Z006 11:U:07 AM 

To: "JUDY STOLDT' <JUDY.P,STOLDT@US.HSBC.COM> 
CC: 

Subject: U Turns 
Judy 

Can you look at this please and help be decode it. 

We are likely to be handling U turns for Dubai g(»ig foHArard. 


Aan T. Kedey 

First Vice President, Anti Money Laundering 
Tel: 212 525 6147 
Fax; 212 382 7580 

Forwarded by Alan T Ketley/HBUS/HSBC on 05/26/2006 12:09 PM 

Teresa Pesce/HBUS/HSBC 
05/26/2006 08:28 AM 

To 

Alan T Kelley/HBUS/HSBC@HSBC 

CC 

Subject 

Fw; 


Forget what I said yesterday. 

Sent from my BlackBerry VWreless Handheld 


From: David WJ BAGLEY 
Sent; 05/26/2006 03:29 AM 
To: Teresa Pasce 

Cc; Warren G LEAMING; A/an KERR; Gary BOON 
Terry, 

The attached is ail I hope self-explanatory and whilst I am not suprised at the 
reaction from JPMC, it is important to emphasise that we are talking about 
exempt U-turn payments. HBME have no choice but to now pass the paymments via 
HBUS, but as they are exempt, you have previously confirmed with Martin that 
H6US are comfortable this does not seem to me to be problematic. 

I anticipate that you would prefer to see Field 72 completed, but this will 
mean more hits in the filters even if (hey will then be passed. Could you let 
me know and copy Gary Boon and Alan Kerr as I am out for part of today, Monday 
is a public holiday and I at Wolfsberg next week. 

Give me a call if you need to discuss and I appredate that you may want to 


I Perraanent Subcommittee on Investigations 

EXHIBIT #61 
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recheck with Martin. 

Regards 

— Forwarded by David W J BAGLEY/HGHQ/HSBC on 26/05/2006 08:22 

Alan KERR/HBME/HSBC 
HBME 

26/05/2006 06:45 
Phone No. 971 4 5077674 
Mail Size: 7618 


To 

Warren G LEAMING/RLA LGA MEM/HBME/HSBC@HSBC. Ian EDEN/HBMBHSBC@HSBC, Ben 
HOLT/HBMErtHSBC@HSBC. David W J BAGLEY/HGHQ/HSBC@HSBC 
cc 

Gary BOOM/HBME/HSBC@HSBC. Ken C MATHESON/HBME/HSBC@HSBC 
Subject 

Fw: US DollarTransactional Activilie&via DDAat JPM 
Entity 

HSBC Bank Middle East Limited 


All. 

Please see attadied message received from JPMC regardng transactions 
acceptable for transmission through our USD account with them, which follows on 
from our discussion >Mth them yesterday rrtoming regarding our imminent move to 
serial payments + cover payments with Field 72 completed 

Please could you provide guidance as to how we may continue to effect OFAC 
U-tum compliant transactions on behalf of our Iranian customers. 

Alan Kerr 

Head of Institutional Banking 
761:971 4 5077 674 
Fax : 971 4 3535079 

— Forwarded by Alan KERR/HBME/HS8C on 05C6/2006 09:37 AM — 

Ali.Moosai3jpmorgan.com 
05/25/2006 09:49 PM 
Mail Size: 5256 

To 

Gary BOON/HBME/HSBC3HSBC. Alan KERR/HBMEmSBC@HSBC 
cc 

Layla, Oaseer@jpmorgan.com, Cannel.Speefs@jpmorgan.com, colin.j.nutt@jpmorgBn.com 
Subject 

US Dollar Transactional Activities via DDA at JPM 
Entity 

HSBC Bank Middle East Limited 
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Dear Gary, 

it was a great pleasure speaking to you and Alan today. 

First, many thanks for keeping us informed on the group decision regarding 
the payments method. This is to confirm that we wilt be (leased to continue 
processing HSBC's Middle East dollar payment transactions, (both MT103 and 
202) with the exceptions of tire Iranian referenced transactions that should 
be directed to other correspondent banking account Unfortunate, as a 
business decision we will not be able to process such Iranian referenced 
details on the payment narratives. 

We look forward to continuing our excellent business relationship. Please 
do not hesitate to contact us if we can be of any fiirth«' as^stance or if 
you have any questions. 

Have a nice week end. 

Ali 


Ali Moosa 

\^ce President & Area Manager 
Middle East & N. Africa 
Treasury Services 


Tel. +973 17 522741 
Fax +973 17 535135 
Mobile I 




This communication is for informational purposes only. It is not intended 
as an offer or solicitation for the purchase or sate of any finandat 
instrument or as an official confirmation of any transaction. All market prices, 
data and other information are not warranted as to completeness or accuracy and 
are subject to change VMtiiout notice. Any comments or statements made herein 
do not necessarily reflect those of JPMorgan Chase & Co., its subsidiaries 
and affiliates. 

— Forwarded by David W J BAGLEY/HGHQ/HSBC on 26/05/2006 08:22 — 

David WJ BAGLEY/HGHQ/MSBC 
HGHQ 

26/05/2006 08:15 
Phone No. 7991 8645 
+44 (2079)20 7991 8645 
Mail Size: 16663 

To 

Stephen K GREEN/HSBH/HSBCMERIOIAN@HSBC 
cc 

Subject 
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Fw: US Dollar Transactional Acttutfiesvia DDAat JPM 
Entity 

HSBC Holdings plc-HGHQ 


Stephen, 

I apologise for troubling you on vs^at t know is a busy day. 

As discussed I advised HBME DUB to continue to pass U-tum payments through 
JPMC, and i think quite rightly HBME advised JPMC that we would start to 
cross-reference the underlying 103 message in the cover message. 

As you wilt note from the attached JPMC have indicated that they are not 
willing to process these payments, I assume for reputational rather than 
regulatory reasons(given that they are vtnihin the ij-tum exemption), v^ich 
means that we will now have to pass these payments through HBUS. We have 
previously received concurrence from HBUS , confirmed by Martin. On this basis 
I do not believe we have any choice but to proceed on this basis . 

i would be grateful for your views, but anticipate that HBME will need to reach 
a decision in time for the opening of the USD payment window on Monday. 

David 

Forwarded by David W J BAGLEY/HGHQ/HSBC on 26/05/2006 07:58 

Alan KERR/HBME/HSBC 
HBME 

26/05/2006 06:45 
Phone No. 971 4 5077674 
Mail Size: 7616 

To 

Warren G LEAMING/RLA LGA MEM/HBME/HSBC@HSBC. Ian EDEN/HBME/HSBC@HSBC. Ben 
HOLT/HBMBHSBC@HSBC. David W J BAGLEY/HGHQ/HSBC@HSBC 
cc 

Gary BOON/HBME/HSBC@HSBC. Ken C MATHESON/HBME/HSBC@HSBC 
Subject 

Fw: US Dollar Transactional Activities via DDA at JPM 
Entity 

HSBC Bank Middle East Limited 


All, 

Please see attached message received from JPMC regarding transactions 
acceptable for transmission through our USD account with them, which follows on 
from our discussion with them yesterday morning regarding our imminent move to 
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serial payments + cover payments with Reid 72 completed. 

Please could you provide guidance as to how we may continue to effect OF AC 
U-tum compliant transactions on behalf of oitf Iranian customers. 

Alan Kerr 

Head of Institutional Banking 
Tei : 971 4 5077 674 
Fax : 971 4 3535079 

— Forwarded by Alan KERR/HBME/HSBC on 05/26/2006 09:37 AM — 

All.Moosa@jpmorgan,com 
05/25/2006 09:49 PM 
Mail Size: 5256 

To 

Gary BOON/HBME/HSBC@HSBC. AJan KERR/HBME/HSBC@HSBC 
cc 

Layla.Qaseer@jpmorgan,com, Carmel.Speer5@jpmofgan.com, colln.j.nutt@jpmorgan.com 
Subject 

US Dollar Transactional Activities via DDA alJPM 
Entity 

HSBC Bank Middle East Limited 


Dear Gary, 

It was a great pleasure speaking la you and Alan today. 

First, many thanks for keeping us informed on the group decision regarding 
the payments method. This is to confirm that we will be pleased to continue 
processing HSBC's Middle East dollar payment transactions, (both MT103 and 
202} vrith the exceptiorts of the Iranian referenced transactions that should 
be directed to other correspondent banking account. Unfortunately, as a 
business decision we svill not be able to process such Iranian referer^ced 
details on the payment narratives. 

We look forward to continuing our excellent business relationship. Please 
do not hesitate to contact us if we can be of any further assistance or if 
you have any questions. 

Have a nice week end. 

Ali 


Ali Moosa 

Vice President & Area Manager 
Middle East & N. Africa 
Treasury Services 

Tel. +973 17 522741 
Fax +973 17 535135 
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This communication is for informational purposes only. His not intended 
as an offer or solicitation for the purdiase ca sale of any financial 
instrument or as an official confirmation of any transaction. All market prices, 
data and other information are not warranted as to completeness or accuracy and 
are subject to change without notice. Any comments of ^atements made herein 
do not necessarily reflect Hiose of JPMorgen Chase & Co., ito subsidiaries 
and affiliates. 


' Redacted by the Permanent 
Subcommittee on Investigations 
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From: Rod MOXLEY 

Sent: Tue Jan 02 09;55-4a 2007 

To: AndyMNEVlAlAN 

SuDfect: Fw; Transactions with Iran / Cuba, etc 
Imponanca: Noima! 


Andy 

Fyi 

I'll let YOU know it I hear further on this one-an intBiesttig concef^ Utougn. let's set up a completely 
different Swift address to help avoid any problems with Cuba and Iran. Wish I'd thought of it. 

Regards 

Rod 

— - Forwarded try Rod MOXLEY/HBEU/HSBC or> 02/01/2007 09 53 

Martin SCI-ARKVHBEUiHSeC 21/12/2006 32:41 To Rci<JMOXLEY/Ha£U/HSBC®HSBC 

Mall Siie: 7704 ^ 

Fw; TrensaelloTH w'lh Iran / Cuba, etc 
ct 

Er.bly HSBC Bankpic - HBEU 


HSBC Bank pic 

Regtstersd Office: S Canada Square, London E14 5HQ 

Registered in England - Number 14259 

Author'seO and regulated by the FinarKial Services Aiithonty 


Pres; Malcolm U 6ASTHOOD 

Sent: 21/12/20C6 21;43 

To: Hill E r IttCB; Jon H CURI. 

Csi Vlkcan BOSi; bou^lss MACLCfcN; Martin H CUAMt; Alison J HOOD; John ALLISdN.i 
Jamas J Y MAD5SV; Jim LARCe 
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3uhj«ct: Fw: Transactions with trail / Cuba, etc 
Bill/' Jon, 

We have heard that this (right bs coming and here i is ! I note that tfiay want to split their traffic - Is this 
possible ? 

What are the practical IT and Operationai i&sties wilt) this -iewlffi GMG going downm the middle of me 
night fairly regularly could we betaking on a problem we dont need here ifBiiuil die open when this 
happens? 

I have cc^d John Allison to see whether Group Com^nce hS'/a a view given that they are only 
prn posing tn send US sanctioned items via this route. I have concerns that we might be breaching at least 
the spirit of the US Serial Routing GCL 4 rtol the letter cf K. 

Thanks, 

Malcofm Eastwood 

Head of Paymenl arxi Commercial Operations 
UK Opei'dlHJiiS 

Tel. 020 799 12300(799 12300) 

— ForwarJec try Wafeoim G EASTWDOBMtDaKIHSBC on 21/122008 21 .34 


Morsaru CASAGRANDetHBBtVHSBC HBBR 
18112/2006 14-28 Mail Size; 3196 


To MtfcolmG£AS'TWPOU'MLMK;Hl»BC<gM99C 
fa Cezar JR/HBBR/HSBCgHSBC. Erie 
STRiEGUER^SORmSSCSMSBC 
S**h}* Transacttonswilh Iran/ Cuba, Bte 
cl 

Emffy HSBCBanK^-MDSK 


Malcoim 


Your ccrtact has beer, provided by Mr Neii Chantry 

Appreciate if you could assist us with the following. Not sure anyoi’e has briefed you yet. 

HBBR has some payments going into Iran. Cuba and other sanclfoned countries, which are compliant 
with the Group Compliance PoAcy. Currently our GMG is based <n the OS, so we run the risk of having 
such payments blocked. For these specific transactions (circa SO^ear), we would like to use tha GMG 
based m the UK and perform the transactions n EUR. To enable it. we have been informed tliat we have 
to create a second SWIFT address (6!C ?)to be used exclusively forints purpose, which should sse not 
be publishsQ by SWIFT in their books. 

Could you assist us with obtaining mis second SWIFT address? Any idea how long it would lake? 
Gratefol for any other information you could provide. 
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1 look forward to hearing from you- 


Kind regards. 


Morgana Casagrande 

Trade & tntematonal • HBBR 

Tel: +55 11 3847 81.11 

Tiel>re-7 237flW1 

Fax: +55 11 3W7 5869 

E-mail: rTBrgana.casagrande@hsbc.com.br 
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From; Rod MOXLEY 

Sent: Thu Jan CM 17:57:26 2007 

To: Maltxjltn G EASTWOOD 

Subject; Re: Fw; Transactto.Ts with Iran ! Cuba, etc 

{mportance: Normal 

AtUchments; Doc Link.htm 


Matoim 

You and me twlh. 

1 dc think this rgpyi^gyugher in'.'estjgafion betore It is *aaiiipKr on us as a fart acoompi!. Bitter 
experience, or Q^QC^I pavmenB to you and I, have shown mat we are feced with a real dilemma 
when trying to identify and then eventual pay transactions which have so many conditions attached to 
them. Slightly irritabng too mat GHO CMP seem to have bent over baclAwards to accommodate a system 
which looks very dodgy to me. How about no you can't do this? 

Speak rtjfther tomorrow 


Rod 


Malcolm G EASTWQQD/MDBK7HSBC 


Makolm Q EASTWOODMDBKmSBC NCfiK 
O4/Ot/20Q7 16:38 Phorw No . 7&9 12300 
(0) 20 7991 2900 Mail Stic; 1792t 


To Rod MOXLEY/fffiEU^5BC@HS5C 
cc 

Fw Tfjvwacfefjssrrth Iran /Cuba, et; 


Ermy HSBC Bank pR -WDOK 


Rod. 

Just fyi. This all makes me very nervous i 
Malcolm Eastwood 

Heed of Payment and ComrTviretal Operations 
UK Operations 

Tet: 020 799 12300(789 12300) 

— Forwardea Sy Matedm G £ASTVVOOO/MOetOHSeC on 04/01/2007 16-36 — 


Redacted Material 
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866 


Ma(£olm G EASTWOODMSK/HSBC Ki'^K To JimLAnGE.WBEU;HSBC®HSSC 
CW.'01/2007 16.37 Phor\g N'o 739 12190 
t « <0 20 7991 2300 fAsii Size: 14217 

Fw. Twsactions with Iran I Cuba, etc 


Etriity HSecBankpIc - MD8K 


Jim, 

I mentioned Uiis one tWs fTvofning and here is ifie background. } am doing sonw more work on R with it 
and my ^ople, will then have a confracaH wM Brad and give you some Input so thatwe can discuss 
with Dyffig. 

Malcolm Eastwood 

Head of Payment and Comrr«rdai Operations 
UK Operations 

Tel: 020 79S 12300 (798 12300) 

— Fofwerdeo by Msicciirn G EASr/VOODAdOBK/KSBC on 01/01/3007 16'31 — 


John ALLISONTHOHarHSBC HOHQ 26/12/^)06 

16 11 Phone No . /'dti 18b43 

*44 (0) 20 7991 8643 Mail Size; 11724 


To Ma(cofmGEASTWOOD/MD8IClHSBC@HS8C 
cc MOon J WC<»/MDBKft1SBC@HS8C, BUi E F 
RiCE/HB£U/HSSC@H^. Douglas 
MACLEAI«ISEUA1SBC@HS8C. James J Y 
MAOSEHIIBEU/HSBC^SBC. Jim LARGE/HBEU/H3BC@HSBC. 
Jon H OffHJHSEU/HSBCgHSBC, Martin S CLARK(SHSBC, Vikram 
30SE.^EU.'HSaC<gHS8C, Davjcf W J 
aAGl-Ey/HGHQItSBCgHSBC 
Subje Re: FwjTransaclionswillT Iran /Cuba, etc 


Enily HSBC Holdtnge pic -HGnQ 


Malcolm 

Sending payments via USA GMO subiects Brazl to an all currency prohibition br all OFAC entries. Brazi) 
is, however, permitted under current Group pokey to mane payments « currencies other than USD io 
entries on the OFAC let. provided that the leason for inclusion on the list is a reason other than 
Terrcrcsnv'Weapons of Mass Oestruebon (where payments cannot be made in airy currency!. We believed 
that this small volume of these peimissible payments wouM be sent by Brazil by 'maruar means {telex7). 

V^ilst we ttierebre do rot have an issue with Brazil's request from e policy point of vew, we would be 
concerned if a second SWIFT address entry drew attention to itself, or contained soma reference to this 
address being used ibr making payments lo entries on ihe OFAC as (Ms cou'd rasuli in a negarive 
perception by those not aware of the detail of our policy. 
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Regards 

John 


Makolm G EAS-nVOOD/MDBK/HSiBC 


Malcolm G EASTWOODMDBKTHSBC UDBK 

21/12^2006 21;43 Phone No . 709 ia3t» 

*44 (0) 20 7991 2300 Mail Size: 8019 


To Ml E F RICe/HBEU/HSBC@HSBC, Jor H CURUHatU/Hi.BC@HSBC 

^ V<V3(nBOSE/H3EU/HSBC@HSBC. Douglas 

MACLE/Wl/iS£U/HseC@HS0C, Ma/tiTiS CLARK@HSBC, Alison J 
wOOOff/OBKtHSBCeHSBC, .tonn ALLlSON/HC5HCl/HS0C<a)HSBC, 
James J Y MM)SEI«HBEU/HS8C@HSBC. Jim 
LARGEmaEUiHSBC@6SBC 
Subjo Transactions with Iran / Cuba, etc 
ct 


EntHy HSBC Bank {^-MOBK 


Bili/Jon, 


We have heard that this might be coming and here it is )i iiule lhaiihey want to spilt their traffic • is this 
possible ? 


v^at are Ihspiactical IT and Operational issues with this -ie with GMO going down in the middle ot the 
night fairly regularly couW we be taking on a problem we dont need he/a if Brazil are open when this 
happens? 


I have copied John Allison to see whether Group Compliance have a view given that they are only 
proposing to send US sanctioned items via this muta. i have concerns that we might be breaching at least 
the spirit of the US Serial Roirtlng GCl. If nol the letter of K. 


Thanks. 

Malcolm Eastwood 

Head of Payment and Commercial Operations 
UK Operations 

Tel: 020 799 12300 1799 1 7300) 

— Forwarded by Malrnim O EASTWOOOWOBK/HSBC on 21/12/2006 21 34 


Uoreana CASAQRANO&HeBRrHSBC HBBR to 


Malcekn O EASTWOOO/MDBKJHSBCiSiHSdC 
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^a/lMOOe 14 28 Mail SIxe: 3136 


cc CuzsrJR.^reR.'HSBC^HSBC, Erie STRIEGLE'?/HBfiR/HSBC@HSBC 

Transactions w*tJi Iran ! Cuoa, etc 
ct 

Eniay H$eCBankC>iC-MDSK 


Malcolm 


Your contact 6as been provided by Mr Nett Ctiantiy 

Appreciate If you could assist us with the fcrfKiwing. Not sure anyone has briefed you yet. 


HBSR has some payments goir>o into ban, Cuba and otfter sanctioned countries, which are con^liari 
with (he Group CompKance Policy. Curran^ our GMG s based in the US. so we ixn the risk of having 
sucti payrr^inis bloctced. For these specific trsnsai^ions (circa SO/year). we would like to use the GMG 
based in the UK and perform the transactions in EUR. To ert^e H. we have bean informed that we have 
to create a second SWIFT address (BIC 7} to be used exclusivety fbr this purpose, which should also not 
be published by SirMFT in Iheir t>Qoks. 


Could you assist us with obtaining ttija second SWIFT address? Any idea how long A would t^e? 
Grateful for any other Information you coukt provide. 


I look forward to hearing from you. 


Kind regards, 

Morgana Casagrande 

Trad** A kiternstional - HBBR 

Tei: -tSS It 3B47 9141 

Tie ime: 7 237 6141 

Fax: -fES 1 1 3847 5669 

E-mail: rrxirgana.cassgrandeiShsbc.com.br 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N./^SBC OCC 8876928 


VerDate Nov 24 2008 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00882 Fmt6601 Sfmt 6601 


% 

P:\DOCS\76061.TXT SAFFAIRS PsN: PAT | 



869 


VerDate Nov 24 2008 


THIS PAGE IS 
INTENTIONALLY 
LEFT BLANK 


Confidential > FOIA Treatment Requested by HSBC Bank, USA, N.AHSBC OCC 8876929 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00883 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




870 


VerDate Nov 24 2008 


FfSBC Bank pic 


Memo 


To 

Lucas Fraaoso 


26 January 2007 

CC 

Marisa Oliveira 

Alison Wood 

Rod Moxicy 

John Allisoa 

Jon Curl 

Qfll lUce 

Jim Larae 



From 

Malcolm Easrwood 


Seodei’s Reference 

Subject 


Receiver’s Reference 

TRADE TRANSACTION WITH IRAN/CUBA ETC 


To Facsimile No 

From Facsimile No. 

020 7260 9796 

Total No. of pages 


Lucas. 

Funtier to our Ti9cnit exchange of emails 1 have now sought views from Group Compliance, 

IT and my Operations team. 

\\'hilst what you are proposing is icchnically achievable we are not attracted lo a proposal 
which would segregate certain transaettons through separmc SWIFT address, albeit that these 
proposed transactions tnight be perfectly pentiissihlcurtdcr Group policy as this might briog 
unwelcome attention from external parties and ai least make it seem as though we are taking 
auliuu 10 avoid certain transactions being examined by (he US audiorides. Group Compliance 
share this view. 

Oa thus basis if we were to make a change 1 believe that it would have to be on the basis that 
all of your currcoi SWIFT traffic be directed via the UK GMG. Of course this would be a 
much more sigrificantchaitengefor allofu-sbuiifitis this mue that you wi<h lopirsue 
please could I ask your team to discuss with Bill Rice (UK Operations) aod Jon Curi (UK IT) 
and Rod Moxley (Risk Managonent Services. UK Opciatioos and Compliance). 

Tbe points I would like covered are 

1. Message volumes including averages and peaks so that we can ensure that these 
volumes are manageable. W hilst the UK GMG is cuneotly meeting our needs IT are 
currently looking to reshape our GMG infrastructure to ensure better reliability We 
must avoid ciatiog further iusiabilit.v- 

2. That we can provide viable opeiabona! support given the time zone differences 
between UK and Brazil 

1 WOLF terrorist filteriog support, who would undertake ibis fuocdoD including case 
escalaiicm? 

Page I dfS 
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Clearly this substantially broadens fbe scope of ouroriginai rctitiest,iniroducing more 
operational complexity and tepuEaiioDa! issues from both tbe UK and Brazilian bunks 
perspective. 

If SVC arc to progress this broader request then I believe ttiat itwould be prodent for me to 
discuss the proposal vcith the UK Banks CEO before we wotdd fonnatly agree to proceed. 

Happy to discuss further with you once you have cuusdered the above. 

With kind regards. 


Malcolm Eastwood 

Head of Payment and Commercial Operations 


l>a«e 2 ol'2 
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From; David W J BAGLEY 
Sent: Sat Jun 09 06:38:13 2007 
To: Michael F GEOGHEGAN 

Cc: Stephen K GREEN; David H HODGK3NSON; Douglas FLINT 
Subject: Re: Iran 
Importance: Normal 


Mike, 


I should briefly clarify that there is very little lefl of our relalionship wit 
that il wouikl have been Inaccurate to teS Le\«y there was nothing 



tithough enough to mean 


Without being able to look back over previous corresspondence on the issue my recollection of key recent 
decisions on Iranian banks include 


1 . We decided some time ago to stop using the IMum exemption under OFAC. 


2. We cancelled trade lines previo usiy extend ed to certain Iranian banks includingg 
have virtually ruh off In the case ofp 


usiyextenc 

A 


3, We discovered that there was an agency banking retabonship in HBEU both 

Iranian b anks. Notice has bem givKi on Biese end we have made it clear that these 
end Jutyj 


Jand other 
bed 




There are further complications surrounding Ihe process of closure wito all Iranian banks as we have 
some USD 9m in reimbursements due fromSepah, where we are running off trade lines, where we may 
need co-operation from Central Bank of Iran. David is in the loop here. 


I am in fact travelling next week but wSt monikw by BlacKBerry. Apologies for the length of the e-mail but I 
thought the above detail may help detSrerations next week 


HSBC Holdings pic 

Registered Office: B Canada Square, London E14 SHQ, United Kingdom 
Registered Number 61 7967 


Tron: Michael ? SSOGHESAM 
Sant: 08/06/2007 20:30 6DT 
To: David H J BASLET 

Ce: Stephe.n GREEM; David H HODGKINSON; Douglas HiINT 
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Subject: Re: Iran 
David 

This is not clear to me because some Sme ago t sak) to close this relationship other than for previously 
contractually committed export finance comrratments 

Possibly we can discuss this next week when I will be able to re^new my past entails 
Mike 


HSBC Holdings pic 

Registered Office; 8 Canada Square, London E14 5HO, United Kingdom 
Registered Nurrtief 617987 


David WJBAGT.F-Y 


From: David W J BAGLEJ 
S«nt: 08/06/2007 08:17 GOT 
To: Michael F GEOGHEGAH 

Cc: Stephen GREEN,- David H HODGKINSON; Douglas FLINT 
Subject: Iran 


Mike, 

Stuart Levey . the US Treasury Under Secretary for Counter Terrorist Financing and Sanctions was a 
speaker at the recent annual conference of the Wblfeberg Group . of which t currently act as Co-chair. 
Levey asked for a private rreeting with me to discuss a number of matters including Iran. Levey has been 
extremely active in promoting the US policy on Iran . particutarly the use of sanctions to deter weapons 
proliferation. He has in the past met with David and i to encourage us to refrain from dealings with Iranian 
banks. The key points raised with me. end the subsequent actions agreed with David are best 
summarised as fblows: 


Levey acknowledged that we as a Group have acted responsibly on Iran and I took the opportunity to 
emphasise to him that we applied OF AC across the Group when dealing in USD, and had acted 
whenever specific sanctions were enacted either by US. UK or UN. wasKMaa 

Levey however expressed concern that we were stiti operating accounts fOf[ 

n identified as having acted as a conduit fbr Iranian governmental Ending of l 
I this is a repeat of aNegations made praviousty by the US which hacve led to target 
s in the US , but have r:ot had support within the UN. 

Levey essentially threatar>ed that If HSBC did not withdraw from relationships 
make ourselves a target fbr action in the US. It appears that we have been appro; 




may well 
way as he 


Redacted Materia! 
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alleges tnat^^^ ^a jse tr>e fad that we have m^tained account for theTD as an arguement in support 
of representations made to other banks for on going sup port. 

We in fact have only limited relationships, with ^^^^ and in fact overat! with Iranian banks. 

Following this meeting I have Oisq^^d^ approach we shoidd take with David, His decision is that we 
should irmiediately withdraw fron|^^^§and also withdraw fiom all Iranian bank relationships in a co- 
ordinated manner, recognising thaTthem may be some legaBy binding committments we will have to 
honouf( fore>ample PEF focilities}, and we may need to alkm for an orderly run -oft. 

Once the position is clear on pret^ely what steps se braig taken I will than advise Levey of the steps we 
have taken. 


1 am aware that Levey has sought to persuade rther non-US banks to withdraw from Iran, but the lone of 
his remarks were notably more direr^ and strident . 

David Begley 


Redacted Material 
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From: John ALLISON 

Sent: Wed Jun 13 1 1 :36:00 2007 

To: Clive BiSSETT 

Subject: Fw: GROUP MESSAGING GATEWAY FOR LAM - CLEAR CHOICE REPORT 
Importance: Normal 
Attachments: Doc Link.htm 


Clive 


Any thoughts on how to deal w'fth these countries? 
Regards 


John 

— - Forwarded by John ALLISON/HGHQ/HSBC on 13/06/2007 11:35 - 


Neelesh HBREOIA/HBMX/HSBC HBPUK 

11/06/2007 1602 Mall Sije: 26167 


To John ALLISON/HGHQAtSBCgHSBC 
cc CSwa 8ISSETT/HBEU/HSBC@HSBC. 

Tomas davidovich@hsbc.CfflTi.fTw, Jon H 
CURL/HBeU/MSSC@HSBC 

Subje Fw: GROUP MESSAGING GATEWAY FOR LAM - CLEAR 

Ct CHaCE REPORT 

Entity HSBC HcMings ph: - HGHO 


John, 

We have not engaged with Cl and Nassau as we have no leadership responsibility for this geography. I 
trust they will deal direct with IT, PCM. et at and look atler thenrelves. 


Regards, 

- - Forwarded by Neelesh HEREDiA’HBMX/HSBC on 1 1/06/2007 09:59 a.tn 


Sandy Flockhart/HBPAUHSBC 01/06/3007 06 34 jo Neelesh MEREDlA>iBMVH5BC@HSBC 

^ cc ***" BEAmE«eARA1SBC@HSBC, Amonto M 

LOSADAAH8AR/HS8C@HSBC. Muro 
RIVERAOHeM>UHSdC@HSBC. Clive 
BISSETT/H8EU/HSBC@!HS8C, David WJ 
SAGLEYW01CVHSBC®HSBC, Eduardo Palacios 
Kahuam/HBMX/HSBC@H$BC. Emrtson 
ALONSO/H8BR/HSBC@HSBC, Gary M 
PMUIPSfl<BMX«SBC@HSBC, Graham 
MACNAUGHTON/HBMX/HSBCeHSSC, JM 
PARKO1BeR/HS8C@«S0C. John 
AaiSONA1GHaHSBC@MS8C. John R 
RENOALUHBMXA1SBC@MSBC. Jon H 
CURL/heEU/HSBC@HSBC. Lus 


I Permanent Subcomrorttee on Investigations 1 
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EDUAROCVHKR/HSBC@HSBC, Luis M 
MARTBffi2S^BAFW^C@HSBC, Luiz 
S!MIO£/HBBR/HSBC<SHSBC. Marian 
s»TSlY/t«eu/HSBC@HSBC, Paul A 
B«JF«TOI4i»eM)VHSBC@HSBC. Ramon 
GAJ«:iA«BMX;HSBC@HSBC. Tomas 
DAViOOV(CHft10MX/HSBC@HSBC 
Suh^e Re. GROUP MESSAGING GATEWAY FOR LAM - CLEAR 
ct CHOICE REPORT 


Neelesh, 

As this is the most cost ef^ctive solution you have my approval to proceed as proposed. 



Regards, 


Sandy 


Alexander A. Flockhart 

President & Group Managing Director 

Latin America and the Caribbean 

Paseo de la Reforma S47 

Oficina 23 Piso 32 

Cof. Cuauhtemoc 

06500 Mexico. D.F, 

Tel: 52-55-5721-3914 


Neelesh HEREDIA/HBMX/HSBC 



Neeleth HEREDIA/HBMK/HSBC 05/31/2007 SaodyFlockhan. Gary M PHILLIPS/HBMX/HSBC®HSBC, 

05 59 PM Eduardo Palacns KahuarrvHBMXTHSBCQHSBC, David W J 

eACLEY/HGHQ/HS3C®HSBC. Ramon Garcia. Jae 
PARK/H8aRftiSeC@HSBC. Graham Macnaughlon. Luis 
EOUAROOmeeRMSBCQHSBC. Alan 
BEATTI&HBAR/HSBC^HBBC. John R 
RENDALIJH8MX7HSBC®KSBC 
cc Paul A THURSTONiH8MX/HS0C@HSBC. Emilwfi 
ALONSaHSBR/HSBC®HSBC. Antonio M 
LOSADA/HBAR/HSBC@HSBC, Tomas 
DAVIOOVICtWBMXimiSBC@HSBC, Ghva 
8lSSETT/HeEU/HSBCeMSBC, John 
ALUSOMiHGHQnHSBC^HSBC. Jon H 
CURL/HBEU/HS3C®HS8C. Marian 
JEFFERY/HBEU/HS8C@HSBC. Aduro 
RIVERA/HBMX/HSaC®HSBC, Luis M 
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MARTINEZ/HBAR/HSBC@HSBC. Luiz 
SlMKmE/HBBR/HSBC@HSBC 

Subje GRCXIP MESSAGING GATEWAY FOR lAM - Cl.EAR CHOICE 
ct REPORT 


As you are aware, we ha'« been assessing the most viable and C^oup policy compliant Group 
Messaging Gateway (GMG) far future processing of LAM payments. Attached is the final version of the 
Clear Choice (CC) and to which I request your approval to proceed. 


For ease of reference, I advise that the CC report recommends migration of ail LAM non US Based 
SWIFT addresses to the UKGMG. 


The CC was coliectivety put together ly IT. PCM and CfctP in the UK and IT, CMP, PCM in LAM, 
representatives from HBBR, HBAR and OPSCO (for HBMX, LAM Intefitationai and CC sponsorship). My . 
(hanks to el! participants. 


Post approval, priority next steps indude; 

Defnition of : Project sponsor, ProjectCcordinatorsfor LAMaod theUKfrom Business and IT. ln-coun!ry 
Business and IT representation and supporting LAM artd UK Project teams, Acftoo; Davidovich. 
Preparation and approval of a Project Terms of Referertce. Action: Project Coordinators rn LAM and UK. 
Advice to alt LAM countries of CC decision. Aetkm: Heredia. 

Progress with HBEU IT the need for Spanish speaking support dunrtg LAM's working hours at the 
SYDGC, Action; Heredia witti Phillips. 

Identify and agree Pilot site. Acfion; Heredia wHh Klacnaughlon. 

Follow on actions will include: prioritised list of countries to be migrated, rofl-out plan and timelines, 
project plans per country, SLAs between countries and the SYDGC, formalisation of the migraticn of Keys 
and Access rights, demise of SWIFT Alliance etc. 


Please address any queries arising to me. 


Regards, 


Neele sh 


(attachment 'Clear Choice - Non US SWIFT Address GMG Migration - FiNAL.doc' deleted by Neelesh 
HEREDIA>IBMX/HSBCJ 


Davi'd, 
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The contact sfiould be Neelesh Heredia but Graham Macnaughton Head of Intemationai and Eduardo 
Palacios Head of PCM should be copied bi afi cwrespondence. 

Regards, 

Sandy 

AlexanderA FlocJchart 

President & Group Managing Director 

Latin Amertca and the Caribbean 

Paseo de la Refbrma 347 

Oficina 23 Piso 32 

Col. Cuauhtemoc 

06500 Mexico, D.F. 

^ Tel; 52-55-5721-3914 


David W J BAGLEY/HGHQ/HSBC Sent by; 
Manon O ROACH 22103/2007 11:11 a m. 


To Sandy BoclihaT»HBMX/HSBC@HSBC 


Subje GROUP MESSAGING 




Sandy 

i refer to your e-mail of 14th March. 

Clive Bissett, Global Project Manager, GTB has been nominated to assist with the preparadon of a Clear 
Choices document. Could i suggest Ihaefore that someone be nominated tor LATM to liaise closely with 
Clive which wi ensure that a proper and comptele consideralion will be given, including to the capacity 
issues. 


I am aware from my contact with CMP in Brazil that they were giving some consideration to giving up 
certain payments activity given the challenges of passing that ectivity through the US. We have indicated 
that any final dacision should be deferred In this tegerd pending a proper consideralion as to whether the 
payments messaging can be migrated elsewhere thus allowing us to preserve as much activity and 
business as possiWe. There may also need to be a conversation at some stage with Paul Lawrence if It is 
necessary to persuade H6US lo conbnue with payment messaging pending any migration, i will however 
advise further if this proves to be the case. 

At my end I will asir one of my team, John Allison, to support Clive. 1 took forward to receiving details of 
your nominated contact whereupon | will esk Clive to make appropriate contact and commerce the 
necessary work. 
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I am grateful for your assisance. 
Regards 


David Bagley 


S a t dv Flockhart 
— Original Message — 


FroB: Sandy Flocxhart 
Sent: 03/14/2007 J3:«5 PM 
To: David » J BAGLEY 

Cc; David Leighton; Neelesh HEaEDIA; Paul A THURSTON; Grahi 
Subject: Be: Group Messaging 


HaCNAUGHTON 


David, 

We are similarty keen to ensure that payments con^ue to operate smoothly, whilst being completely 
compliant with Group requirements, and to this end «vould not be averse in piticiple to re-routing 
payments traffic i^a Sheffield, rather than as present via the USA. 

Whilst clearly this wouW need to be fully evaluated, not least in respect of the cost savings lhat would 
presumably accrue, as well as the ability to meet specific Latin American requirements (time zone, 
language etc), we would want to ensure that ail Latin American counties met the most stringent 
requirements, possibly by centralistog aH payments through a Paymwrts Services Centre such as the one 
we recently commissioned in Mexico. One component of this rrtght be to ensure that we used precisely 
the same algorithms and screentog parameters as are used by the US, but this too would be part of the 
abovementioned evaluation. 


Clearly a decision will need to taken soon as we are in the process of defining the migration of Banistmo. 
which, until your communicaUon was received were going to be routinely routed through the United Slates 
in the usual way. However, you mention there may be capacity issues in the UK, and of course these 
would need to be resolved without disproportionate cost implications tor LATAM, it would therefore be 
helpAjI If you would advise the name of a contact with whom we could discuss various points of detail 
prior to reaching a final decision, and with who we could work with afterwards to convert if such was 
decided to be the way forward. 


I took forward to receiving your thoughts on the above, 
Regards. 

Sandy 


Alexander A. Rockhart 
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President & Group Managing Directw 
Latin America and the Caribbean 
Paseo de fa Reforma 347 
Oficina 23 Piso 32 
Coi. Cuauhtemoc 
D6500 Mexico, D.F. 

Tel: 52-55-5721-3914 


David W J BAQLEY/HGHQTHSBC Sent by. 
Manon 0 ROACH 13/03/2007 09;06 a.m. 

To 

Sattdy Fteckharl/HBMX/HSBC@HSeC 


Subje 

a 

Group Messaging 


Sandy 

With apologies for the length of the note set out below, I need to raise an issue with you which relates to 
payment messaging for iarge. if not att. parts of Lath America. This is an issue that has been around for 
some time, but probably now needs a strategic high-level decision given the polential, commercial and 
cost consequences. The key issues are as follows;- 

You will of course be aware of the Increased significance of compliance with the US sanctions 
promulgated by OFAC. This has led to the Group leinbrcing and reiterating a requirement for all Group 
offices to comply with OFAC in relation to transactions denorrtnated in USD regardless of their place of 
incorporation or operation. This policy is well-established, arfo appears to be adhered to very closely by 
Group companies. 

Obwously our operations in the US are obliged to comply with the requirements of OFAC in ail currencies, 
not just USD. This obviously reflects the fact of either their US incorporation, orthe feet that they were 
operating within the US. Within the US however there is an increased focus upon effective compliance 
with the requirements OFAC on the pan of both OFAC itself but also our banking regulators. 

At present, errsss-border payments, regardless of currency, Initiated by mcst.«nolall of our operations in 
Latin America pass through the payment gateway operated by HBUS in the US. The increased focus 
upon OFAC compliance has led us to consider various situations where transactions pass through the 
US. but are not initiated by and do not involve our Group companies in the US. They are. in effect, merely 
a service provider. 



Redacted Material 
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This cleariy has the potential fof adverse commat:}^ consequences, in that transactions in currencies 
other than USD involving countries « entities covered by US sanc^ons would be caught even though 
overall they were permitted by Group poScy by reason of thCT non-USD denomination. For this reason, 
we are in the process of relocating the .net and .com services, and made a conscious decision to develop 
a stand-abne WHIRL system server in the UK where the original proposal was to host all Group credit 
card transactions through servers located in the US. 


Obviously the signiftcance of the above is ^at where payments are processed thrtJugh the New York 
gateway on behalf of Latin American operations then HBUS. taking a cautious approach justified by the 
current regulatory environment, wiRneed to filter aS transactkxis regardless of cunency and reject those 
transactions where they would breach OF AC regardless of currency. This would clearly be 
disadvantageous from Latin Arrwrtca's perspective, and equaSy I suspect tfie logistics of having to locally 
pre-screen all cross-border payments in all currencies would be commercially and operationally 
challenging for ouroperations in Latin America. 


My own view is that commerdally you would find the introducb'on of fiKen'ng by our US colleagues 
unattractive commercially, and i dorerrtemberthe problems that a local US hotel chain got into when 
refusing access to certain Cuban lAsitors. tf my assump^ here is correct then on the assumption that 
you will want to carry out as many vansacfions permitted by Group policy as possible the most viable 
option and way forward would seem to be to relocatad your payment processing to a different Group 
Messaging (GMG) gateway. This however would need yoiA- support and the generation of an appropriate 
business case and clear choices proposal. Any such proposal would rteed to take account of likely 
impacts upon operational support, time zones, pertorrrance and cost. We have informally explored the 
possibility of relocating Latin American flows to the UK GMG. but this centre has experienced some 
capacity issues. 


Vi^ilst we have lived with the currerrf postbon for some time, it is feir to say that now that our US 
colleagues are on notice they feel exlremety uncorrrfortable in altowing tfie position to continue 
indefinHely. In essence, we will either have to have a pass and timeline for a ralocalion of the payment 
messages or will need to turn the fiHering on. 

I thought It important to canvas this issue with you fkst, but recognise that you will probably want to 
nominate one of your team to take matters forward. Simiiafly. we wRt (X'ovide as much assistance as we 
can here in GHQ CMP, having developed some understartding and knowledge of the Issues posed by 
OF AC. and possible solutions and approaches to resolve those challenges. 


David Bagley 
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O' 

HSBC-OCC_E 0599421.txt 

From; anne liddy/hbus/hsbc 
sent; 6/19/2008 11:S4;26 AM 
To: NANCY HEDGES/HBUS/H5BC@HSBC02 

cc: 

subject; Re: DFAC processing in GSc's 

ok, thanks Nancy. We are all feeling the pressure re not hiring onshore - only 
off. Keep me posted. 

Anne Liddy 

.SVP, AML Compliance I HSBC Bank USA, H.A. 

452 5th Avenue, Tower 7, New York, NY 10018 


Phone 212-525-5906 
Fax 2U 525 5769 • 

Email anne.liddy@us.hsbc. com 


Nancy Hedges/HBUS/HSBC 
06/19/2008 12:20 PM 


Anne Liddy/HBUS/HSBCSHS0CO2 
cc 

subject 

^ Re: OFAC processing in gsC’s 

c 


■^i - I have put forth the suggestion of hiring up some first level checkers 
for OFAC processing in the esc... we're strapped and getting behind in 
investigations (on OFAC crises) and have some of our key managers in the queues 
releasing items... I'm told I cannot hire first le/el staff unless it s, 
offshored... so.... here we gol Have asked for the greenlight to commence 
further discussions with compliance and will set something up with you when I 
get It. 


Anne Li ddy/HBUS/HSBC 
05/30/2008 08:54 AM 


Nancy Hedges/HBUS/HSBC®HSBC02 
cc 

Subject 

Re: OFAC processing in GSC's 
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Confidential & Non-public OCC Information 


OCC-PSI-0089823 


rr'*) ; 

^ ■ HSBC-OCC_E 0599421.txt 

Nancy, currently we have offshore resources conducting first level reviews of 
customer hits with oversight and QC conducted by ICRO. we have emphasized to 
our regulators when offshoring is discussed (tiiey get very nervous on. this 
topic with respect to AML and OFAO that the risk ^s lower In offshoring first 
level customer hit reviews vs payment hit reviews. The customers have already 
been vetted, we would really have to talk this one through internally and then 
potentially let the regulators know If the Bank decided to move forward on this - 
- just my thoughts. I reached out to Denise on this as well and she agrees. 


Anne Liddy 

SVP, AML Compliance | HSBC Bank USA, N.A. 
452 5th Avenue, Tower 7, New York, NY 10018 


Phone 212-525-5906 

Fax 212 525 5769 

Email anne.liddy@us.hsbc.com 


Nancy Hedges/HBUS/HSBC 
05/29/2008 12:37 PM 


10 

Anne Liddy /H bus/hsbc@KSBC 02 
cc 

'I ■ subject 

^ J OFAC processing in gsc's 


Any issue that you know of with processing our ofac hits out of one of the 
6SC's7 The only thing i think there may be an Issue with is how the fed might 
view it and the fact that personal fines / incarceration of staff could occur 
(hopefully never here) and how would that be handled / looked at if the staff 
are 1n India / Malaysia? 



sr poi Dept Ops Mgr i hsbc Bank usA 
90 Christiana Road, New castle, de 


Phone. 
Fax, 
Mobile. 
Email . 


302-327-2333 

302-327-2363 

302-438-0336 


nancy. hedgesSus .hsbc. com 
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HSBC-OCC_E 0041342.txt 
From: MICHAEL 8 GALLAGHER/hBUS/HSBC 
sent: 12/11/2009 2:38:40 PM 
To: CHRIS P DAVIES/HBUS/HSBC@HSBC 
CC: LESLEY M1DZAIN/HBUS/HSBC@HS8C02 
subject: Fw: OFAC Payments 

This is concerning. 

Michael B. Gallagher 
Executive Vice President 
Global Transaction Banking 
452 5th Avenue 
New York, NY 10018 
Tel: 212-525-5680 

Forwarded by Michael B Gallagher/HBUS/HSBC on 12/11/2009 02:38 PM 

From: camillus p Hughes/HBUS/HSBC 

To: Sandra Peterson/HBUS/HSBC@HSBC02 

cc: Charles G oel Busto/HBUS/HSBCeHSBC02, Mictiael B Ganagher/HBUS/HSBC@HSBC02, 

"Thomas W Halpin" <thonias.w,halpin@us.hsbc.com> 

Date: 12/U/2009 02:28 PM 

Subject: Re: Fw; ofac Payments 


Sandra, 

We have considered all options at this point the compliance team in DE is 
already fully deployed dealing with wire camp alerts and bank examiner requests 
for the current exam. There is no bandwidth there at all they are behind on the 
current alert clearing process which we are also working on dealing with. 

^ Thanks and regards, 

Camillus P Hughes 

Grp Di r-specialized comp! ii j hsbc Bank USA 
452 Fifth Avenue 


Phone. 212-525-8607 

Fax. 212 382-5961 

Email . cammus.p.hughes@hsbcpb.com 


From: Sandra Peterson/HBUS/HSBC 

To: Michael 8 Ganagher/KSUS/HSBceHSBC02 

cc; '’CamiTlus Hughes" <camillus.p.hughes8hsbcpb.conv>, Charles G 

Del8usto/H8iJS/HSSC@HSBC02, "Thomas w Halpin" <thomas.w,halpin®us.hsbc.com> 
Date: 12/11/2009 01:21 PM 

Subject: Re: fw: ofac Payments 


Michael , 

We have been providing headcount to the operations team here in Delaware as 
follows: 

Nov. 24th — >Nov. 27th 
Stephanie Brown 
Denise Richards 
Francisco Fernandez 
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HSBC-OCC_E 0041342 -tXt 

NOV. 30 >Dec. 4th. 

Francisco Fernandez 

Dec. 11th 

The above individuals to assist on addressing the investigation OFAC queue 
today. 

Trying to manage our day to day and assist as best we can. I do not have other 
resources to give at this point, but will double check with ops to see if 
resources can be shifted. 

cam, have we tapped the compliance team here in Delaware? 


Best regards, 

Sandra Peterson, SVP, Global Payments and cash Management 
Regional Head client Management, Americas \ HSBC Bank usa 
90 Christiana Road 
New Castle, DE 19720 


Phone. 302-327-2220 

Fax. 302-327-2128 

Emai 1 . sandra. petersonSus . hsbc.com 


Michael B Gallagher/HBUS/HSBC 
12/11/2009 10:01 AM 

TO 

Charles G oelBusto/HBUS/HSBC, "Thomas w Halpin" 
<thomas.w.hal pinSus. hsbc.com>, 

"Sandra Peterson" <sandra.P6tersonSus.hsbc.co(ir> 
cc 

"catnillus Hughes" <carninus.p.hughes®hsbcpb.com> 
Subject 

Fw; OFAC payments 


Do we have some bodies we can lend. This backlog is concerning and it is in our 
collective interest to get this cleaned up. 

cam - is this a blip or do we have a new staffing requirement? 


original Message 

From: camlllus P Hughes 
Sent: 12/11/2009 09:44 AM EST 
To: Michael Gallagher 
Subject: OFAC Payments 
Michael , 
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HSBC-GCC_E 0041342.txt 

Spoke with our OFAC team, we could use 5 or 6 people for 10 days who can review 
payments to clear the 700 and building backlog of payments that have been held 
over and need to be worked to process. 

Skillset is fairly straight forward. They would need to understand how to read 
a wire and be able to review the information provided by the client against 
payment information to determine if the item is a false positive and can be 
processed. We have all of the materials printed for review and can set this up 
as an assembly line. 

You can reach me on 212-525-8607. 

Thanks and regards, 

camillus P Hughes 

Grp Dir-specialized Compl ii | HSBC Bank USA 
452 Fifth Avenue 


Phone. 212-525-8607 

Fax. 212 382-5961 

Email . canillus.p. hughesShsbcpb.com 
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From: David W J BAOLEY 
Sent: Sun Aug 22 20:20:52 20 10 
To: W&ikh G LEAMING 

Subject: Fw: Project Topaz US Urgent Requirements 
Importance: Normal 


Warren 

Rotuii of the push. 


HSBC Holdings pic 

Registered OfBce: 8 Canada Square, London EH 5HQ, United Ks^sm 
Registered in Etrglsnd number 61796? 


From: Andrew P LONG 

Sent: 22/0ai'2fll0 38:51 GDT 

To: Irene M DORNER/HBUS/HSBC@HS8CQ2 

Cc; Dm-id W I BAOLEY; Michael B G4llagba/HBUS«SBC^SBC02: Niall S K B<»1ciir/H3US/HSBC@HSBC02; 
Nicholas 1 TAYLOR/HBUS/HSBC@HSBCQ2 
Subject: Re: Project Topaz US Urgent Requirements 


Irene 

I wid work with the rest of Group as requested. 

Because the relationships are not actually owned by RO. being orphans, i have sent the note to Heads of 
international in the regions to forewarn them and I expect to hear by tonwrnwv from them. J wM try and push this 
through in the next 46 houre. 

Andrew 

Andrew P LONG 

CtuvpGcner^ Mwug«r a Heed ofOlobdTreaastion BsAking HSBCHokUt^^ 

Level 28.S Caaada Squara, Lerdon EI4 5HQ. Untied Kiasdaic 


Phrme(44)(eiaOWl 2i« ' Internal; TW J2I0O 
Email 8T 


https://relativity/RelativitY.Distnbuted/Download.fispx?ArtifactID=>4760279&GUID=407... WQMlOM 
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Iran* M 

DORNER/HBUS/HSBCQHSBCOa 
Aug 20 201 0 22:10 Mall Sisa: 
275155 


To 


Subject 


'Andrew LONG* <andrew1ong@^»c-eorn> 

NIal 3 K Bookef/KBUa/HaeC, Nicholas J TAYt.OR.'H5Lr$/HS8CQH9{ 

Gsll9ghermBU3.'HSSC@HSBC02 

Project Topaz US Uipent Requlrementa 


Andrew 

Following the Topaz meeting, 1 explained that the US wmM need some immediate assistance and probably an 
interim eoiotion as we cannot wait for the outcome of a complex and prolonged project. We need to move quickly 
to reduce the AML alerts and the connecrted KYC issues as it is impossbie to plan the required capacity unless 
we do and Ir addition, we need (o sliow progress to our Reguialor. 

We have completed Phase 1 of a review of InternaiSonal banks and countries and HBUS must now move quickly 
to withdraw from those which do not meet either rtsk or return hurdles. We cannot get sufficient traction across the 
HSBC world to exit these names in a timely fashion.We have consulted widely and a^ieved broad consensus 
from Product and Global banking but inevrtaUy, (Or some, there are stili pockets of dissent, usually from 
reg!onal/in-country teams. 

Attached Is a list of 1 21 international banks that we can no longer support and need to exit. For each It shows the 
country of origin, the country of parentage, the reason for exH and the direct revenue implications. The lota) 
revenue estimate for tiieee banks is USDlS.lin (althou^ for a small number of primarily high risk exits frils data 
Is not immediately availabte). However, you will note that of this total Angola accounts for ov^ USDISm and 
Sierra Leone and Beia-nis together close to another USD1 m. 

The ratioreja for e»l will be one of two broad categories: 

1. Where an independent review by FEOO h.as determined the credit or reputational risk is too high, or 

2. Where rationalisation on the basis of commefctaWy is recommended foHowIng a country by country Panel 
review comprising Global Banking, TSC arxJ PCM. 


This is being managed and coordinated centrally by HBUS FIG but where there Is no GRM, PCM Executives will 
be required to write to the dients. n is not viable for the CEO of HBUS to ask for ctosure of an account In another 
Court^ and so, similar to Barron. I would be grateful for your help in getting prompt cooperation in the exit 
IKOoess. 


In the absence of a compelling business case for retention, we need to start exiling these relationships next week. 
We cannot afford the time to negotiate each name, so rMher than HBUS asking for a closure, waiting for the 
pushback end getting foto multiple debates, i propose that we view the situation differently and we teR you which 
names we can ne longer support and set timelines for the exits which need to be accomplished in ihe relevant 
geographies. For high risk clients we wiil give 30 days notice of termination end for all othem 60 days. 1 am happy 
to discuss how wo go about this but I believe that the commuf^catlon of the names to be exited and the timelines 
needs to come from GMO. 

Just to keep you in the loop, Phase 1 focuses on USO PCM only but will be followed rapidly by Phase 2 as you 
wfli apprsciate the urgency with which we need to resolve our regulatory issues related to i^C and AML alerte. In 
Phase 2 there wB be Trade names The exit forwhich be more compiicaled but to give you a flavour of the 

problem, we seem to have 16 correspondent banks In Sudan which canrot be right. From our analysis of the 
situation aside from risk, it is dear that the sheer voteme of dients we have contributes to the currant problems. 
Phase 2 of our review will therefore concentrate on revenue and for HBUS PCM alone, it appears that 


https://rclativity/Relativity.Distributed/Download.aspx?ArtifacllD=4760279&GUID“407... 11/01/2012 
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approximately 1 .200 names collectively earn less than US04.5m per yea*. This is an average revenue of less 
than USDS, 600 each, which In many instances, does not cover our ongoing compGance costs. Whilst some of 
these are prc^sitional, for high risk countries and high alert genersdors, vre will propose a material further 
rationalization shortly. We will need your help here too. 

Ciearty, the US requirements cut across business fines and it is crucial that the strategies of PCM. TSC and FIG 
are aligned to prevent this situation occurrir^ in the future. 


Regards 

Irene 


Irene M Dorner 

Pftsidsnl & CEO, HUSI & KBU5 
HSBC estO;. USA 

452Pift1]AvettB| I Olb Fluor f Mew Yurie. MY lOOlS 




Fix. 

Eirtaii. 


212-335-«SS9 

2(2.525-8213 

ixne.tadomBTStM-hrfg.etMii 


[attachment "08-20 HBUS PCM Exits.xls.zip" deleted by Andrew P LONG/IBEU/HSBC] 


HSBC Bank pk may be solicited in the course of it$ piacement efforts fora new issue, by investment clients of the 
nrm for whom the Sank as a firm already provides other services. It may equally decide to allocate to Its own 
proprietary book or with an associate of HSBC Group. represents a pc4entiaJ conflict of Interest HSBC Bank 

pic has internal arrartgaments designed to ensure that the rirm would give unbieised and full advice to the 
corporate finance client about the valuation and pricing of the oflerir>g as wall as intamal systems, controls and 
procedures to Identify and manage conflicts of interest 

HSBC Bank pic 

Registered Office: 8 Canada Square, Lor>don E14 SHO. United Kingdom 

Registered in England - Number 14259 

Authorised and eegulatad by the Finandal Services Authority. 
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RESULTS OF THE TRANSACTIONS REVIEW - UK GATEWAY 


March 29 2012 


Thi# document U confidential and has been prepared solely for use by HSBC Holdings pic, Sullivan 4 Cromwell LLP and Cahill Gordon & 
Reindel LLP In accordance with Deloltie LLP’s Terms of Reference. The finding* should be read In the context of these terms and the 
associated limitations. Thie document may not be used, reproduced or circulated in whole or In part to any third party without prior written 
consent of DeMtte LLP. 

This document should be read In conjunction With the explanatory nolea on page 71. 
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CONSOLIDATED RESULTS - TRANSACTIONS SENT VIA THE US PER SANCTIONS REGIME 


o (n 
o CD 


Reporting Category 

Iran 

;,:''.'-.'Cuba' ' 

Libya:: ■ 

'. Myanmar • 

North Korea 

Sudan 

Total 


- Value $000 

yalue^’QOO.. 

Value $’000 : 

Value $’000 

Value $^000 

Value $’000 

Value $'000 


(Volume) 

.(Volunie) ' 

(Volume) . 

(Volume) 

- (Volume) 

(Volume) 

(Volume) : 

1. Identified US Nexus 

19^22,415 

53,932 

21,836 

110,231 

S02 

188,546 

19,797,462 

transactions 

(24,9ffr) 

(151) 

(226) 

(435) 

(6) 

(2,882) 

(28,689) 

2. Permissible 

19,232,256 

11,527 

420 

293 

502 

28,478 

19,273,476 

Transactions 

(24,651) 

(45) 

(34) 

(62) 

(8) 

(608) 

(25,398) 

A. Iranian U-tum 

16,950.651 


- 

- 

■ 

* 

18,950,652 

transac^ns 

(24,171) 

(■) 

(-) 

(-) 


(■) 

(24.171) 

B. OFAC license or olhar 

271,252 

11,475 

420 

139 

502 

25,335 

309,123 

exemption 

(402) 

(30) 

(34) 

(41) 

(5) 

(541) 

(1,056) 

C. Blocked, rejected or 

10,353 

52 


164 


3,143 

13,702 

cancelled 

(78) 

(15) 

(-> 

(11) 

(-) 

(87) 

(171) 


190,159 

42,404 

21,416 

109,938 

- 

160,068 

523,986 










(336) 

(106) 

(192) 

(383) 

(-) 

(2,274) 



145.052 

109 

1,555 

1,879 


7,991 

156,586 

4. Potentially llcensat^e 

(267) 

(29) 

■ (29) 

(51) 

(-) 

(340) 

(706) 

5. Remaining 

45,107 

42,295 

19,861 

108,059 


152,077 

367,400 

Transactions of Interest 

(79) 

(77) 

(163) 

(332) 

(-) 

(1,934) 

(2.5K) 


No Uansactbnssant vlatfie US were ktenUfiedas being subject to Syrian or Iraqi sanctions. The iran results include Mo transactions relating to charges, of $15 each, 
that were processed from the correspondent accounts of two iraniar banks aftor they were designated as SDNs. 

The total number of tiansacBons sot out above is higher Btan the total listed on Slide 1 0. as there are a small number of transactions which relate to more than one 
sancfions regime. These have been inciudedinaii applicable sanctions regimes in the table above. 
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CORRESPONDENT ACCOUNTS BY SANCTIONS REGIME 


The (able below summarises the number of all USD accounts and non-USD accounts, with USD transaction activity, 
by the location of the account and the related sanctions regime. 



There are four additional accounts held by the Bank in another jurisdiction, subject to the Sudanese sanctions 
regime, which are not included in the table above. The names of these accounts cannot currently be disclosed, 
however the SWIFT transactions relating to these accounts are included within this document. 
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PAYMENTS RESULTS -IRANIAN TRANSACTIONS SENT VIA THE US BY YEAR 
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PAYMENT PROCESSING - CONSOLIDATED RESULTS 


Reporting Category 

. . Total : 

.ValueS'sOOO 

Permissiblp 

Transactions 

t . Value 
: , V(Vb|uni6) 

Transactibhs of 
Interest ' 

:l yaliie'$i 000 ; 

TVolume)/ 1 

Potentially 

Licensable 

Value $’000: 
.(Volume) 

Remaining 
Transactions of 
Interest 

ValueS’OOO: 

. (Volume) 

1. Payment with sanctlonedelemen! 
cBsclosedto the US 

325,371 

(1;395) 

306,107 

(1.257) 

19,264 

(133) 

16,888 

(46) 

2,376 

(92) 

2. Cover payment ~ sanctioned element 
not disclosed to the US 

3.920,304 

(22,339) 

3,553,661 

(19,698) 

366,643 

(2,641) 

132,258 

(590) 

234,385 

(2,051) 

3. Serial payment -sanctioned element 
not disclosed to the US 

1.189,753 

(659) 

1,183,983 

(569) 

■ 5,770 
(90) 

16 

(3) 

5,754 

(87) 

4. Cancelled and re-submitted vdihout 

8,085 

2,531 

5,554 

614 

4.940 

sarrctioned element present in the 
message to the US 

(128) 

(60) 

(68) 

(22) 

m 


47,858 

38,366 

9,492 

4,061 

5,431 

5. Other 

(683) 

(462) 

(201) 

(43) 

I1S8) 


5,491,371 

5,084,648 

406,723 

153,837 

252,886 

Total 

(25,204) 

(22,066) 

(3,138) 

(704) 

(2,434) 
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GCL 050047 - Compliance with sanctions (28/Jul/2005) 

■UuiDUBQC Fxancais | Portu^ess { Eqanol j 21714^ . 

Intrcduciioa 

Groi^ Standards Kaoual^GSH) £.6 requlrcsti^all Group Oflices coitifiiy wtth bQ antHsmirlsn] Bnd crfmeleglstatlon and wmiafl 
econorrtlc and trade sar^'ons to the extent 3p;taQbJe pursuant tc local bws and reoulaSans. 

2n addlQon. tiowever, Group Compnance (CHQ CH?) is require by the above setHon oTthe GSH to Issue s drurlar advising an relevant 
Group Offices when any leplsjetloR or nnctlons have eitra-terrltorla] effecL 

OFAC stmcUORS 

The Office dT Foreign Assets Ctmbol (OFAQ Is a departm^ of the US Department of the Treasury, and b responsible for the 
adrolnlstr^Uon and enforcement of economic and trade sanctions based on us foreign poScy. These sancUoits target fordpn countries ' 
suspedsd tenurists, drugs tralfidcers and those engaged In the prollferatidn of weapons of mass destmctloh. 

The OFAC sanctions consist of bod) country-level sanctions fIndudSnp sanOlons against Cuba, Irari, Zimbabwe, North Korea, Myanmar and 
Sudan) as well u sancborts against Individuals (Spedally Designated Nadonals (SDNs)). Thera are variations in each of the statutes 
establishing tbe cpuntry-level sanctions such Out there Is ru untforna a;^>rDach («-g. the Iran sanedons contain art eoteiripUon which Is not 
appileabie to“ other country-level sanctions). 

Revised policy 

With Immedfate.cffect^ xU Group Offices (Including those Offices Irtcorpomted oropera±lr\gouterdethEtJS) must refuse to 
participate In any trsnsacUons and activities, or make any payments denominated irs USD, Wblch, If carried out by a US 
pcEsorv would be prohibited fay any OFAC sanctions (except for the specific *1>tum exempQon' relating ta Iranian sanctions 
dboissed below). 

When considering transactions for compliance vrilh these sanctions, the trenactlon as a whole should be considered. This requires that 
where.any transactions Involve tije use of cover payments (MT202s) any ftUced message (e.g, an HTIO?) should be considered together 
with the covu- paymer^L 

GHQ CMP already maintains a database, whldi Indudes details of aQ Sanctions afTedlng Group Offices, indudlng the OFAC5andioft& A 
link to the principal protons of the current OPAC country sanctions Is here 

1q addition, further ad^o, instrucsisrts end guidans, with regand to the ;^djiBl provisions of the OFAC satvtf ons, wU be Issued by GHQ 
CMP to local Compliance functions to ctondde with this GCL to enable those iool Cotntdiancs hmtoiDns to pxii*dde advice with regard to • 
the practical appUcatlan of this GCL 

Group OfTtces should, however, ensure that they continue ta update relevant pmcedures In response to details of airy future amendment? 
or additions to appHcable sanctions, tndudlng OfAC sanctions, Issued by GHQ GMP in accordance with G5H 5.6. The guidance In this GCL 
shouH also be read in conjuncdon with GCUM007-< US OFAC Sanctions, which discusses, among oths* things, how OfAC sanctlDn? qan 
apply to US dttzens er^permanent resident aliens, even when outside ti)e US. 

It (s Bdcnpwledged that eempUanee with sancSons with extra>terrltsKa] re»d^, iadudlng DFAC san^ens* m&y be snlawfut 
under local laws. Where eompllsnee with tbis fiCL woofd result la-a breacb of local law or-regulatiBn or eadrtiag binding 
contractiral amegemeirts, the position should be considered In nslson with local CompHaace and Legal functions and GHQ 
CKP. Any dtspensatlao fnom the ternu of this GCL requires GHQ CMF concurreace, 

Iranian sanctions ’ ' 

The OFACsanctionsappQcabie to Iran are unique In Including tiie sipedflc'ccemption fer payments that quatify u a ’U<tum payuient*. U- 
twn payments con be summarised as fadng ‘cover paytnentslnvoMng tan that are by order of a third coutdry bank for payment to 
another third country bank - provided that they do not directiy credit or debit an Iranian Aezount*. Iraidan Accounts are defined as 
‘accounts of persons located in Iran or the Government of Iran contained on ti» books of a United States depository Institution*. In tills 
context, a third country bank must be non-US and nsn-Iranian and an Iranian Acesunt penereDy Includes an acount for a non-Iranian 
subtidlary bi vdilch 6n Iranian company has a 30 per cent dr grester Interest. A moto complete definiDlDn Is contained in the' guidance to 
be Issued by GHQ CKP. 

For the purpicses of this GCL Mranlari Payments' mean payments made to or Irom an acxount malntolned by any Iranian person (wWdi 
Indudes any Iranian national, arry IncOvfdual resident in, orentity doing business iru Iran, or any entity Incorporated or formed In Iran and 
suhsldiartes of any Iran'ran entity), or an Irardan government body (iiKtodlng govcmmental-owned entitles) whether directly or Indlrectiy. 
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In view, liowevcr, of the annplestty of the relevant pnn^slans gwenlng the Iranian sancaons end the 'U-turn escempaon*, aD Iranian 
Payrnents denotnlrnted h USD niust, wich effett from JSffTJS, or any eartlcr dale nofiSed by HBK£ DUB, be rooted through HBNE DUB • 
HSBC Middle East Hanagement OfAce, Dubai Internet Oty, P 0 Box 6fi, Dubai, UAE, Td. No, 1 1?713 {4} 390 4722, whidi will establish a 
dedicated team to pre-screen proposed Iranian Payments for CompBaocs with the Iranian sancfions and process coaipitant payments via 
dedicated coirespondcnl accounts. This wll! require Group Offices that vrtrfi to contlmje to make Iranian Payments to open USD accounts 
with KBMe DUB. All requests to open scsunts should be sent for the attention oT Alan Keir or Ahsan Raza, OBM H5ME. H5HE DUB win 
Issue more details to Group Office as to bow payroents-should be processed, VTith immediate effect, and prior to 1SEP05, all Iranian 
payments must be relerred to Rod Morfey, TeL Mg. + (443 S91 36&4 CemaB Rod MOXLEy/HBEU/HSBC), and may eatly be 

processed once co nfir matkin has been given that the payment Is -compEant under the IMiffh {or blie^ exemption'. 

Othercaflcaon* with cctra-tenitortaleffect 

GHQ CHP maintains a and current list of sanchORS that affect Group OfOce^ This list is accessible through the Group Compliance 
'Intranet vl? tt^ Dnk or via local CompTiance Funajons. 

Although cstaln sanctions only apply iocaHy, UN sanctions should be viewed as having Group-wide appliQtiom-SancDons Issued by the 
European Union bind HU persons (Individuals who are rraClonals of mernber states and companies incorporated or domicSed In mernber 
states) globally as well as those persons located or operating In member states. Group onicss should use WOLF or &ny alternative 
approved systems to load any additional names covered by local or ctfierextra-tEnhDhal sandlons applicable to Siose ofRces. 
Xmpicsnentztion 

It is recognised that the use of automated payment saeenlng systems'k necessaiyfortheeffe^veldentincaticm of payments potentially 
subject to relevant sanctions, Indodlng Of AC sanctions. GCL 040021 Payment Soeen'ng required sfl Group Offices whose payments are 
not processed through one of the Group's 3 reglorval T? site to InstaB the Group's solution WOLF by 31MAR0?. The names loaded 
centraAy by Group Messaping Systems will be supplemented by SAUGOS to Indude a fuQ list of OFAC country and SDN names, thus 
ensuring that aB cross-border USD paymerrts Group-wide win be pre - sc reened for OFAC compllancs. Group Offices should satls^ 
themselves that they are fully compBarit with the requb-ements of CQ. b400Zl and notify GHQ CMP Immediately of any deviation. 

Where there are Iocs! USD deartng systems (e.g. Hong Kong and UAE), reievarx offices must ensure tirat WOLF is capable oFscreenlng all 
ioca! payments csnslstentwtth the requirements of tiUs GCL In order to ensure that non-compllant payments are rejected. Those Group 
Offices local USD dearing systems must aonOrm to GHQ CKP by INOVOS that they are screening all local USD payments. 

In addBian, Group Offices should take at least the fnllowins steps where rtfevant: 

• Ensure that they .have adequate procedures to IdentlFy proposed transactions and activities other than payments which may be 
prolubfted by OFAC sanctions before the proposed transactions are entered into. This would Indude In-country book transfers over 
accounts. This may require the Issuanrx of staff circulars, acnendmeots ts desk Instruction books and local procedures manuals 

. • Once the SDN and country names are loaded into WOLF tt is Ukety that the number of payments IdentiAed as potential malitires te the 
OFAC sandtons wQl increase. Group OfAces need to ensure that they are suffldeptiy resourced to consider anypetentlal matches for 
dearar^ee or rejection as appropriate 

• Where proposed transadlons or psyreens are IdentiAed chat woidd breed) the OFAC sanctions, non-US Croup OfTjess shouU decQne the 

transaction and refuse to make any peymants resuming Che finds to the remltta'. US Offices are nonnany required to block or freeae 
payments ‘ • 

« Consider, In csnjunction with bat Legal or Compliance runcUoaSfV^retheranyemendmerstsoradditlons should be made to product or 
service terms and conditions or whether any advance notiRatlon should be given to customers to darlfy the banlCs right and intention 
to reject or aazpt relevant instructions or requests 

« Where Group Offices are In doubt as to whether a transaction ec payment Is affectEd by any saixtion, but partinjiarly OFAC sanctions, 
they should consult their local Comphance function wiuch may tn turn reter to GHQ 04P 

• It should be noted that the policy contained in this GCL, where K rdates to OFAC santflons, only applies to Iransaoions or payments 
denorninated In USD, except for those US Offices whitii are reqwred to apply DFAC sanctions to an transactians regardless of the 

• aarency of denomination . . 

■ Note the ^edhcarrangeinents required in relation to payrftents that n^ght be subject to the OFAC sanctions appllcabiets Irarv 

Yours faithfully 


GtC Green 

Group Qvef EsecuUve 
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1 ■ ' ' 

GCU 050047- Compliance Vfl’Ch sanctions (iafJnl/HWS) ■ ", ” 

InbediESa 

Cfcm SOndardt ttonal {GSH) S6 Tc qUlio tlm d &a;p glicc qgipty wgJi ta »ntH B TBil ia i ad olrne letfSaBon wg >ah aB 

' ecaionife ud ctKc ondsns ts Die c ttn t aptda&M pmuant to lnr»i b«a ad reguliasra. 

lir*<iiSa!in.toiiie«r.Crao?Cn<npB»nta(GHQC»F)lir«qi4rrtbyei«tt»«t*ale«BrO«GSHtolBiio« Oreiilaf »nr«cv»r* • 

Gruup OfflaSKhensijr legldfOoB ornactbirshan eSn-terrbKWcffed. 

Of AC AMfiaad 

Tlw oaice rf fsnljn Assets Control fQfM5 ta » deparone# or the IS 0«t»*(tiDent of 0« TrMJsry, wid 1* fe5>isnsl!>»e for tte 
adralnlsnOH) and entocsmait of eosnemicaad wide sansiors based en IS toMgn pefev-ltec sandioss tafstt fond^ cambles, ' 
susptded tenwists, trafS^ra and Wes scaped In the snBfeaOdn adaeeaponx of Bias 

Tbt OfAC lancljons cofiBst of fcp«li cBurtrHeed sanofam ClnOiBenB BanOJont Bjilnd- aibe, Irati, niitfab.ee, North Ima, Hyanmar and 
- SudanjBweUaisncaonsasaaisttitffilduibCSpetfaSyBedsnatBdMiionMiecs^HierairevimtiomhEBjioftheswiaa 
edafcIWiIng tta cOTBy-levti «>afce8 JuOi (hat ttiert la no iBilfenn approatJi Ifw aantUens eonUJo an exempBon irtddi 6 not 

app&Bbls W' offier t»ioOy-*e*tf niWkas). 

Itnfnd poller 

With kowEdhtB effect Bll6roBp OtBecs (Indudlne thaacOmccs Inostpontsd or apentinc mitdde tha US) im^ le&iae Cs 

pertldpuelnanr trmaettona and aoMiles. or mekeanr parmsms danoratnaied bi USD, aitilcivif wrlndout bra us 
peesoiV would baprehlhlted VaBrOFACianeHoo»(e««pttorll>«*i>««feSMarae**B^B<»«'ieJ.bns to IfoolanaioeUoo* 

discused btipw). 


When consMettao trareaeBon* to Bierfaans then renedaRS. Ok tnmsaiflon a* a ■hole should b* Qsnditereil, -T* resjofres that 

wtiertatTr bansacSeni hvelve tba use of aw larments (KI302s) uv Infced messase {tj. m tmCS) itiotM be enddfend tofleaw 
«rlW Che awer payroenl 

CM3 CMP abeuv tiudnblna a database, whUi tndudes detib ed ad doncUns tfedpig Citei. mdieftig the OFAC saKlio!& A 

ink b the principal prerisfeiB of Uie DKrerK OrfC onnrr sandtoa b here 

InaddMM,tomeri<}»feE,liistnicaorsaftd8i»a«e,adwreflerttotheiinn£i|«pn»rittowidtheOfACsanc» wO be bsued by GK) 

CMP t* total CompSems ftmetou to ertidde MW Ctds Ca to enable those leial Caapbna hacsoni to pnAde advice with le^ Is 
the pracBcal aepKoBon oftHa GO. 

Grmeomea «»uld, hopeever, (ptswe tW Owy taittoue to epdirte fefcaant pretaJures ta lespeast tb ddak of wy fstin* enwidnierts 

or eddUm D eppScabh tanalons, kidudne OfAC sanctioned boed br GMQ <MP In oocsdancx eem eSH 5J. Hie Mdena ta t«s ca 

shooM alas be read ta eorihcncBoo eriW eatMOC77d US Of AC S«waoM. iieiKh <fco«e% amof, othet ihincs. ho* OFAC aantjtw can 
epply to US Otzeni or pannaneotresldetaoen^ even when outsit ttoUSv 

It tsBctopwAedged thib csRipUence mISi oneSmevrltb eaKa-tesrltorie) readt, hdudlna OFACsenaicms, maybe Bnlaivful 

underl(xallaies.Whcrccaniplianeeii>iebtbUfiCLavoaldreBDBIa-eBt«>cb<dk>celtetomnpiilitb>« or exdstbsg blndtag 
contractoal artaBjemortb, Che poiUa should tmconddeeedbi Beisoa wttli loaS CeanplUecs hkI 1.esal f uedtees end SMJ 
CMP. Arry dkpensatroa from dietEcror of this OO. re^utresCMIlCHP cmaarean. 



.The OFAC caocBons sEvtaUe ts ban are uil<iut ta inckeSlag the specUc'eeaitiDon topayn*«iis Diet qualW u a V<mi paypienf. l> 

Wm paytt trts can t« BeruMfted M trifc^ -Bw partoero tn«Mno *e« Chat aa« by srttr 9* a Odrd cBurtiT beak to paymer* to 
arather Bdtd ouiBy Bar* - provided that tSey do ort dreeSr cede w art* aa keedan Ineto AcoiBib w drfmed w 
■boBUiai of peians located In Iren er the SowmrricTa: of »»A ewitadwd on Che bools of a twted States deposKery kuSBiDon-. JB Ws 

ontett, a 0*4 wdry bank ntes be eotKA and nen-lranlen and an Inrdan Aeownt paienSy putudes an aeauR I* a mn-lrvlan 

BubsidUfy b ariildi ao tmrdeo eobtor te a M pa- eesd dr fftotor kicen*. A eiore eoindm ddHBcn B eaaWhBS bi the' oudwo te 

be Issued by QQ CKP. 

Ptr the nnesB etf W «. Irwilta P?»w«itf mean peywiore tna* » ar boa an aowit BotmaifM by any Mrtar pow (MhOi 
MMdvry inaiaatnaanai, any tndvasdnatoitbver anttr doto9buttncabi,VM>er'aorBtfcy biterparptts as tanned hirvnattf 
svfcsaitdea of iryf bento «b|0» * » 9»«mniam body (bctadiig faveRmenaPeamd enOlIt*) adieOiw dkediy or sidbeair. 
Iflvtear.leaiew, ofthecanipledcrefthandefortinvutaragavendngOaiinrttaanBiabytdWaV'bBnexeeipiian', al frerdan 
Paymeca dectcRdnated h USO aiuK Mb eSed froa sSEnS, cr any earter ibu istKto by tests DUB, to rwtol ttabupb HBME OUS - 

KSBC Kktot ii* (toajonant omea, thibilUiteiTid aty, P O Oc* M, CKibal,'lM^ le Ito. 1 1*71) (4) 3»B <7a, ivhto ara ^tdWi I 
dedoKBd toam s prMRto (Boposad Imto Pvyments to CMnpaance'oMi a« barte SBwtes Md tBOcss coBufiane payosict Ida 

fleriteated carTtoseerdenC aaninto Ibb nO reqtoa Grew omoo tbat aibdi to esnOave to mate berdoa f armerto to’ open USD --•-«■ 
.orfBiHaecbUB. Mrcctotstao BpenacnaintstoouIgbotanttoaieattenllimrfAliaiKerrorehBBiM-., COM KBK. MEHC DUB-ntg 
Issue nwe deans to Creep OffltdSBto tow paymBito-shoidd be pcrabaptil, wa> liieaeaala affect, ecBl ptlof to ISEPDS, allridwi 

paymaria mito to retorto to Itod Mtote, TeL Ite ♦ IteJ (0) 207 S9l J6M (eswa ItocI TOXirtTWeVMSBC), and may onty be 

proosed enea eonfinnatloQ ba* boa ^vbi that the isiteerd Is cpatpAkot vidcr the IMvh {tf otto) aen^ltof . 

Othm- seotoSonx un th ortre-tecritorlal effea 

Gng CPIP Bia IntafcB a Kd and curent u tf senctiaas toal effea Grow OIBcb. Ito Sst b pccss&ilt tooit^ the btop Cenvlisto 

' Intnitt tlz trdt Bnk or vt) loial Cbro;ftoiee fLmlar&. 

MhouQh CBttoltancllolB anty epetTbi3ftl.ua santfonsahotol be Hew ed ex hUinie^np-wirt-i ^r^nn ^ ^ 

EuTteieajt Union bind EU persond {toSvtdoali Mia are nCbnaCs of meSnber stotis tod eompentes tnearpomed ar dstoaed b manibo- 
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st3CES}glab2DT UMeSulhDn penns bated cr speraanp la raiber C^sx, Gnup db«U use WOLF or any atsnsttvc 
approved srsterRstcInd nrc addittanal nama owed bf bcil or otMr ennHainulal anrllani applkatoi Is Biosc offices, 
Impleneiitatiba 


BUFScgeiSEdthitlMosecf aiCoraOd pvimeamaungqttEm'biiec&naiybrtlieeiTe^ivebenSnoSsn of payments potsSIiEir 
subjea to reJevait anOKitts. InclBAg afA£ andne. GCL 040021 taynett So eefunp retjufecd >11 Group CWbs whan payntencs an 
not proceseeettnupliaietf the Gnup^ 3 racial TP sits » asal On GnaVS sbKi&o« WOl^ty SIHAAO?. Tttt namsIoaM 
ceninffy by Gnup Hesgbq Sysnms wS! be supplcnentsd by SAUSO&to Induae a Ui >S of Of A£ aunry mt SDN nnws, thus 
erisulf^ met iR Tos-bsOs USD payments GroufMiiiee «A be pmmtned ter Ofnc ampSana. Group QI&cs shouM s^isft 
themsdves Oat Otey are blty ceopSai^ wth »e mprbonertB Dl GQ MDDSa and aot)^ GHQ CNP bnnieiSat^ ol arty ilnbdaia 
Whee chse an OSD dating lydstns {e.p. Hirig and UAE], nSeva r K oAos must ensure that VtOtf 0 ispaide of knerdng atl 

beat payioents siistaeKwItti the req u lre m eti ti ef ftb GO. b anier to cgtHe that r un -unio ba nt payrecTO art rele^tLTliBse Croup 
DIOas with bol USD dearirg syflsrs must tsnflnn B SHQ CHP by IHOWCS Out Day ■» sooenbg aO tod LSo payneno. 
lo BddEien, Group ones should als at least the foHowirp sttd when rdevants 

, BEura Out Otey.hevtedenualeproeedjruabenttfy Bupasd traruaSbasandadiv&esotliB^lliatipaTirxnts tvbldtmay be 
prot^ted by OFAC sanctions betore the preposed baisadn an citend Iran. 'DUs «cedd iKdode In^untry boohDirsfetsoverlSQ 

a mium - Thb truv regidrothelsgn&m gftfaff rtmdttre, anendofcwp m Uesr toerweuiw htwW wwiWW pmiw4*tf epawiate 

.• Qnct'theSOMBftdcamtry nansan toabed ne WHTItltBkeiy Oueitie (uiabN NpaymerdsidenyndupstenddnatOislB the 
OFAC saneEms wC kbrease- Groip Oflica need to ensure (hat Osey are suffidqpy rseutsd lo asstder anypoteitfal uubJ r s tar 
deannes or r^tedlan SNopttpriAe 

• Where bropesad trangmoiB anuneerea ere bentlSeddig a»n>«<lb«Bd»H»e OfaCmireiaiw, nji-tJS Gmint OfTire y thnuM r4»On » Hj 
transdjon and nhest n make airy paymenu raurrUng Die lUtdt to the tonAicr. US 0)T>ta are ibiitaty regiK’ed ta Hodc a- hose 

• Cendde, In eBb]viaba*rbh beat Legal a Comptanczftniiiut, whether any enerdamsaaddtdorsdimiU be mSbts (eoded a 
servla term and csodciorB aadtezher any a»<arbe reORcBiian awiM be given lo orsmeen U datlfy Ihe banlc^ rUS and feKBiticn 
CoreieawaccsptrdewiCInsiruaNrs arepuedts 

e Where Group OUbsare In floubt as te whtttgr a bansaetbn a paysiPtt Is eltecad by any andian, lax partraiTailT DFAC tanfltotts. 
they should cmstA tool Cea^ance hinoWi wWen euy bi tan reia to GMt) 0«P 

• It should be riKed that the pobcytonaiiieab this CO, eneaitnlats to OFAC taKOons.cnyaptdietblntuaainapayiiwnB 

OensnyruitEd In (SO, casept hr rhosa US oniad Mdi irempdmltDapply OfsCsanoJasa aO tniraclcns r eg aitl ea of tlw / 

oorarcy of denoiolnaliai i ^ 

• hota the apednEectangameeBrapiircd inrpatan to paymerdsthat n^IttbestAjea talhc DFACiansm appficabdc tolrwu ~ 

*ftiurs febhhdy 


Group Qaef EbrecutNc 
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( 

Introduction 

GCL 0S0047 'Compliance with Safvctions’ reiterated Group Policy with regard to Compliance with local and Intefnatlonal sanctions by Group 
Offices. Incfudfng sanctions issued by the US OfRce of Foreign Assets Control (OFAC). Group Policy arWnj from the above GCL prohibits 
any Group Offlee from Initiating any payment denominated In US Dollars (USD) that would constitute a breach of any of the OFAC 
sanctions, 

US regulatory authorities condnue to focus closely upon Compliance vrtth OFAC sanctions by US banks, particularly where they act as 
correspondentbanks for non-US banks, and by foreign banks with US operations. 

Payment Methodology 

USD payments made on behalf of underlying customers can be made either as cover payments CMT103 + linked MT202) or ss serial 
payments (two MT1035). An Illustration of bath payment types, Mslr>g the same underlying transaction, Is shown In Appendix l, Where 
cover payments are used, the payment message pastfng via the US correspondent CHT202) makes no mention of the underlying remitter 
or beneficiary. This is contained In the linked MT103 message which passes outside USA, 

Policy 

1. With effect from 30APR06 all USD payments Initiated by a Group Ofnee and remitted via HSUS, or any other US correspor»dcnt, must 
be made as serial payments. 

2. The requirement to make payments as serial payments does notvary the provisions of GCL 0SQ047 in that only USD payments 
permitted by OFAC may be Initiated or processed by a Group OfRce. 

3. The above requirements do not restrict the use of caver payments (MT202) for genuine bank>to-b3r>k payments, for example In relation 
to Foreign Exchange settlements. 

4. Untli further riotiflcatlon, U-lurn payments, under the Iran country OFAC sanctions, should also continue to be made as cover payments 
(MT103 + linked MT202) as serial payments cannot qualify as U-t«m payments. In accordance with GCL 050047, all U-turn payments 
must continue to be rtiade via HOME OU0. Where U-tum payments are made, field 72 of the Swill payment message must be completed 
so as to make reference to any linked MT103. 

5. By 31DECOS H8US Will require third-party banks to which HBUS provide USD correspondent banking services to make aH payments 
denominated in USD and remitted via HBUS as serial payments. 

6. Any dispensatkms from the requirements of this GCL require approval by GHQ CMP with agreement from HBUS CMP where relevant. 
Guidance 

Detailed gvldance Is to be issued via GHQ CMP, and any enquiries with regard to the Implementation of this GCL or relating to GO. 

050047 should be referred to local Compliance Officers, who can, as required, seek further darlflcatlon from GHQ CMP. 

Yours faithfully 

Stephen K Green 
Group Chief Executive 

HSBC OCC 3407587 


( Permanent Subcommittee on Investigatlms i 
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GCL 06001 1 Page 1 of I 

( 

GCL OS^Ii ' us Dollar Paymsots foWApr/2006) 

UnemtH: fnncin j PofUgusM I EspanO { 1SnH‘X 


Ztitroductlon 

ca osoo^r -camplIwicB wKh SsftCtioftj- reittf awl Group Ptficy wKh ropacd to CBawnmce H«tti locil and U>tem»t lonrt sanOtons by Group 
CWlca, Inaudlng ssnaians fsutt) by the US omct ef FordQn AucB CoMrol (OFAQ- t&oup Policy arlsihB from Uw ebove GCL proNbits 
any Group Ofllce from kiltUtln j eny piymti* denomlmted in US Oolare {U50) tlMt woulfl ojMBtute « eretth ol any of the OF»C 
sandkns. 

US resutacopy tuQwrillet ouiUnue to focus closely upon Con«Sme amli OFAC tonaloiq. by US banks, particulany where Uiiy ad as 
csrrfsponilcrtt banks lor non-US banks, and by lercian banks «dUi 115 oparaUM. 

Payment Hethodologv 

USD pay/nererrwde on behalf of uhdtrh'lrte oistomeit can ba naoe cllber as <B>cr payments (NTi93 * linked HT2Q2} oras serial 
payments (two MT103s}. an Illustration of both payment types, ucng the same undCrfying tnnsadlon, is shown In Appenoix l. Where 
diver payments are used, the payment messape paishg vts the us ctmi|Mndent (Mna2) makes no mention of the imdertyins remiOer 
or benefld w- fkis is contained In the linked HTIU messiGe wMdi passes 
Poticy 

1. With enect from JOAPAQg all USD payments InWated by a Group ontce and rer^Ped »Sa HSUS, or any other US corcspondeffl, mutt 
be made as serial payments. 

2. The retyjlremcnt to make payments as serial payments doesnntveeytheprovlfloiu of OCLOSOOs? In that only USD payments 
permlHed by OFAC may be Initiated or processed by a Crotip Office. 

3. The above requirements do nni restrid the use of cover payments {am02) lor eemrine baiA-to-bank paymenB, for exempte ki relahan 
to Forelsn ExcDange setUemerrts. 

e. tmn furtfier notification, U-turn payments, unde the ban caunby OFAC sananns, stKNdtf also continue to be made a; over peymenls 
{HTlOJ *■ Hnked KT202) as serial payments nnmt qualify as U-turo paymenu. In acdudance nhh SO. 05004?, all u-ium payments 
must eenllnoe to be made via HBMg OUB. Where U-tum payments are tnede, field 72 of the Swld payment message must be completed 
so as to make rffierenee to any Hnked HT103. 

5. By 31D£C06HBtJS will require third-party banks to which HBUS provide (ISO correspondent tsartfcing services to make all payments 
denomlniUd In USD and remitted via HBUS as seiUt payments. 

6. Any lEspensaSions from the requlrefnents of this SO. reoube eppreval by GKQ CMP wMi agreemeni from HSUS CMP where relevant. 
Guidance 

Detailed guidance is to be Issued via GHQ CMP, end aeyenquinesinllh regard to the Iraplemenlaoon ef this GCL or relating u Sa 
QS0047shoidd be referred to tocat Compliance Offleen, who can, asrequked. uek Aether dahficaUon (rom GHQ CHP, 

'fours filthblly 


Stephen K Gr««n 
Group Chief Svecutive 


http://group.ghq.hsbc/group/home.nrf'/ByRcf)’UKCM7GFAU8083122AM07112008?Open 03/11/2010 
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GCL OS0041 - US OFAC Sanctions against Iran - U-Tum Exemption (25/Oct/2006) 

LaiTguogs; Fwftctfs } Portufiuesa j Espanol j 
Background 

The Office of foreign Assets Control (OFAC) of the US Ocpartment of the Treasury is Tcsponsible for the administration and enforcement 
of ecpnoinic end trade sanctions based on US foreign policy. Hicse sanctions target specified countries, suspected terrorists, drugs 
traffickers and those engaged In the proilferatlon of weapons of mass destruction. 

The OFACsanctlorisincJude country-levef sanctions against a number of countries Including Iran. The regulatJons contain an eKcmpUcn to 
the sanctions unique to Iran, the so-called * 11-10171 ejcemption* for payments that qualify as a 'U-tum payment'. U turn payments-can be 
summarised as being 'cover payments involving Iran that are by order of a third country bank for payment to another third country bank • 
provided that they do not directly credit or debit an Iranian Accoonf (as de/med in the regulations). This U-turn exemption is described 
fully In GCL 050047 {Compliance wltti Sanctions). 

Revised policy 

With immeriiate effect, all Group Offices (Induding offices incorporated or operating outside the US) may no longer use the U-tura 
exemption of the OFAC sanctions against Iran. AH other re<tuirements of GCL 050047 remain In force. 

Valid U-tum payments can continue to be made in relation to binding contractual commitments (i.e. that cannot be amended or 
terminated) that pre-date this GCL. provided that these payments are processed through HBME as per GCL 050047. Where a U-tum 
payment is made it must be through the serial method pursuant to GCL 060012 (US Dollar Payments). 

Also refer to related GCLs; GCL 040074 (US OFAC Sanctions - Applicability to US Gtizens, wherever located, and other US Persons) and 
GCL 060011, where appropriate. 


Yours faithfully 

D H Hodgkinson 

Group Chief Operating Officer 


HSBC OCC 3407606 


Subcommit* >o nn Investigations 

^EXHIBirrTOc^^^^^ 
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GCL 06004i - US OPAC Sanctions against Iran - U>Tiim Exemption (2S/Ocy200G) 

lingiUQii; Rwicti>|Peftu}mte | Eapandt tTEII'X 

Backgrpuad 

'nte Otnce of Foreign Assets Control (OFApoftht USO^rbnem ofttw'nciaiirytcresoonslUc brUie admlnluraUon andenldTOment 
of eanertocend tr»* eonaion* tjsseOonUS foreign pofcy. These xanolans larga spediled coon&iM, suiseaedlerroriitj, drugs 
trefnekos end those engaged In Che proOrentjan of wetfMns of RiHSileslniaiea. 

The OfAC seeaions IrKlude covnirY-Ieversanaioos igeinst ) lUMfiber of atatrief IntXicing Iren. The regulalJocn esntarn *n oempUDn Co 
the ssneOnu unique to Ireii, the lo-csSed tl-Ujin BtCfnpHon* ft>r payments that guitfr as • V-iun paymenf. U turn payments ran be 
sunumrlstdisbang 'cover payments Invidrlng Iren that are by oRMrori WMisuidry bank Eof payment banslher the-d country bank - 
provided that they do not directly oedlt or debit an Irarden AcounC* (as sMIned h thcreflUlatlOM]. TMs U-tum exemption Is dsciSced 
Uy m GCL QSQ047 (CompKanra wim SancSens). 

With tinaiflnat8..A{fca. aO Group omcee (indusino ofRces beorponted or oparabig outside the US] may np loiger use the U-tum 
esempUsn of Lhe OFAC ssnctlons agalret Inn. M other tequhenvenu of 60. 050047 remain fe foroe. 

Vand IMum payments can continue n be nude bt relation to bfaubig csecradual ammltnients ^.e. that camoC be amended er 
terminated] that pra-dala this GCl, provMedthal these paymoits am processed Ihiot^ HOME atperBClOSKH?. Mheea U-tum 
payment b made It must be through the aenat rnethod puesuant to 60.060011 (US DoKar Payments]. 

Also refer to related 6CU; GCL 0<g074 (US OPAC SaneBortt - Appuraboty to US auzens; wherever bated, and other uS Persons] end 
GCL QGOQll, where approcetate. 


Yours fjlthAilly 

□ H Hodgkjhsoti 

Group enter Operadpg onicer 


i'" 



littp://group.ghqJ]5bc/group/home.ns&ByRef;^CM7GEKAX033659PM07102008?OpeQ 03A1/50IO 
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Group > News Desk > Group Circular Letters > GCL 070049 

GCL 070049 - Sanctions Against Iran (24ySep/2007) 

Language: Francais | Ponugues© | Espanol | 

Background 

GCL9 050047 end 060041 referred to compli^ce with economic and 
trade sanctions to the extent oppticabte pursuant to local laws and 
regulations and the application of certain Group minimum required 
standards in relation to transactions and payments denominated h US 
dollars. These GCLs remain in ftjtt force and effect. 

Policy 

Reflecting the current international wid polihcai situation and the 
potential risk of the inadverterit involvement of Group companies in 
transactions, payrr.ents or activities linked to the proliferation of 
vjeapons of mass destruction (VVMD) and nuclear proliferation a decision 
has been tak an to suspend all services and business with Iranian banks, 
Irrespective of currency to the extent and as detailed below. 

Relationships with Iranian Banks 

All account relationships with Iranian Banks must be closed as soon as 
possible after giving any period of notice required by local law or 
regulation and which is sufficient to allow an orderly run down of activity 
(foi example uncleared items), and U^e run-off of any outstanding 
exposures. In any event such accounts must be closed by 3WQV07. 

Similarly, any remaining facilities extended to Iranian Banks and SWIFT 
BKE arrangements should be cancelled or withdrawn as soon as possible 
and in any event by 30NOV07. 

Where local law or the need to manage exit In an orderly manner will 
require accounts/SWIFT KEYS to, be rnaintained beyond 30NOV07 
specific dispensation must be obtained from .GHQ CMP. 

Pending closure of acccxjnts and cancellation of SWIFT BKEs any 
payments debited to accounts held fc»r Iranian Banks, regardless of 
currency, should be made as MT103 serial payments. 

Existing Facilities and Transactions 

All existing Facilities and transactions where there are legally binding 
commitments should continue to be honoured. Such arrangements may 
Include committed facilities (for example Project and Export Finance 
taciiities), existing guarantees (see below) and Documentary Credits 
issued, advised or confirmed. Any payments linked to such pre-existing 
commitments may be made, but as serial payments. 


OCC-PSi-00141530 

OCC-PSI-00141531 


I permanent Subcommittee on Icvestigations I 

EXHIBIT #70d I 
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Where there are pre-existrig guarartees Issued on a pay or extend basis 
supporting business with Iran these may eKceptlonafiy continue to be 
extended provided that: 

Group Offices review each such gua'antee and are satisfied that 
tl-ie underlying transaction Is not linked to WMD or nuclear 
proliferation. 

Each such guarantee mu^ be reviewed on each extension and 
customers encouraged to negotiate attemative arrangements, 

New Business involving- Iran 

No new busines should be entered into in reject of any transactions 
Involving Iran, Iranian resident entitles cr Iranian goods subject to the 
detailed policy guidance issued by GTS simultarteously with this GCL. 

Further Guidance 

Further guidance In respect of FIG relationships can be obtained from 
FIG Dubai and/or FIG London (Client ManagementGroup). For guidance 
on payments into or out of Iranian banks end for ail o^er matters, 
contact your local Compliance function. 


Yours faithfully 


D H Hodokinson 
Group Chief Operating Officer 
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GCL 070049 


Page 2 of 3 


Newt Oesk > Ooup Circular letten > QCL OTOMS 

GCL 070049 -Sanctions Against lrarv(24/Sep/2007} 

Lenguega PraKttS i FWugusse | EscmSI Vfi'r'X 


trade sancncns to meeitenl applicedle porsuartt to local lews and 
regulations anad>e aopiiconon al certain Gfo»«> mlnifmjfn required 
stsnSsrds in relation to Iranseotions and paymonU Oeftomnaled h US 
dollars, These GCls remain m foil force and effect 



v^ere local law or the need to manage e>it in an orderly manner <*l> 
require accounts/SWIFT KETS to. 6e mairsatted beyond 30NOV0? 
scecrlic diwereatlcn must be oolalned frsn CHQ CMP 
Pendris cbSircoTaceourve and cence’IsDon of SWIFT OKEsany 
Dsyment* riebited to aecounts held fc» Iranian BarOrc, rsgardkaa of 
currency, should be mode M MTlQJ serial peymenis 


carrynHmunts ^uld eorrtbue to be rnriourerl, SuA arrengemonls mey 
Ockjae caTvnIltidfeeilities (kr evampie reject andEaport Fnance 
racKEies), erdtrg ^jarantees (sea below) end Doaimostary Credits 
eaued, adrlted or confirmed. Any Myments Med to eudi prc-e>Blbo 
cemmltmcnte mar be meda. but as sviaibaymanis 


VAiere there era crt-erletrig guarantees micd on a nay o' eecend basis 
upsortlng buHntei with Iran dsese may aecapucnaly contmue lo be 
eatondBEl provided that: 


Crssip omeet reyit* eadi such guarantea and arc satlsfiad dtal 
Vis undariylng vansacder a not Inked ta v<isao or nuclear 
prptiforAlon. 

Eatf) auch nuaraniae rnuc be reviewed on eadv e<ttn»ots and 
cuatomra andduraget] to negonate akemaliva arrartgamants 

New Busiiteii Involving Iran 

No new buyinara diould be onterad Into In rcvad ol any treneacdcns 
nvpl«lr« Iran, Iranian raeidani envties cr trani«i goods stAjact to iha 
detaHaapoBey guidance Icfuad by STS 9muitanaou9y wan triis CO. 
Euriher Quldanee 

Kjrthat giidanea In reapeci of Aid reiaionthOs can ta obtaired bon 
FIG OiAal andTpr FIG London (CuontMsnagemeni Group). Far guldarce 
onpaymans into or out of Irvuanbankt and br aaotrser matte's, 
eantaei ycur iPcalCeiripnanca hncten. 


Yours faimbUy 


0 KHoddiin.son 
Orojo Chief Ooeraihg CiffRer 


htlp;//groiip.ghq.lisbc/group/liome.nsf/ByRefA;KCM7GJLP6045523PM07142008?Open 06/03/2010 
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From: Rod MOXLSY 
Sent; Fri Sep 23 16:57 ;3S 2005 
To: John ALLISON; John F ROOT 
Cc: Jeremy R WALKER; Jto F EBDON 
Subject: OFaC sancticsis 
iinportance: Normal 
Attachments: im3ge_0.gif 


John, 

You will be asvare that 1 am keen to ensure that implementation of the GCL 050047 is camied out both 
professlonafiy and efficiently. To this end, I have requested my colleague Jeremy Walker to supply Ml for 
affected USD payments over a 10 day period {5 a round the time of hnpieiTientaiJon of the GCL and 5 
more recently), so that I can review end address any issues ertsing. 

These figures, whicn you may nnO intereshng, are deiaieo befow: 


ias39/05 

Sudan 406 

Iran 181 

Cuba 144 

Myanmar Q 

TOTAL 731 


13/g/OS 14709105 15/09/05 

476 371 353 

155 165 128 

236 220 169 

0 0 O 31 

889 776 650 


16 ^: 9/05 

382 

172 

144 

729 


To darliy. these figures constitute the number of payment transacfions which have been identified by 
Vtfalf in UK as being possible hits. The figure shown wBI Irxlude both MT202 arv3 MT103 messages (so 
Lhe-reis an element of double countifQ in the figures supplied, as a typical single customer (ransadion wiil 
ha’/e both an MT103 a-nd an MT^02) and is (bran currencies -not purely USD -on a particular day. 


in particular regard to the Sudanese payments, but also to a lesser extent, Cuban and Burmese, there 
are a considerable number of U5D dertorranateC transactions. The precise amount Is dtfflcuH to quantity, 
unless manual counts are made and as you will appreciate, this is difficult In a volume driven payments 
envlronmern. Until 26 July, the above payments would have been Sltered by Wolf and providing they did 
not infringe UN/ EU sanctons or tenoiisl perametocs, they were paid or. the basis that HBEU were not 
affectsd direcliy by OFAC sanctiorw. 


Slnna isRtjpnnn nf the GCL, it h« henn mnila rJenr that U8 interests are fifimrunvuintimpoilarvuii 
and we should do nothing, when processing payment transacfions. which would leave HBUS in a 
vulnerable position. T he issues sunmmding Iren havw overshadowed other OFAC payments recently , 
however, I can advise (het we na<re not so tar physicaSy returned any USD payments involving Sudan, 
Cuba or Burma . I feel we now need to look far more dosely at these payments to ensure compliance 
with the GCL . 


I Permanent Subcommittee on Investieations l 

HSBC OCC 8877213 
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The choice a‘ present, from my wswpCT!t,wWif9gardS3 eppScationoftheGCLin respect of Lhese 
payments is this; 

1, We continue to process the USD transai^ions but ensure fftatthe method of routing of the 
peymenls is such that they are not frozen in US. This wffl involve fiteHigent usage of the routing system 
but may peq»tu3te similar scenarios to tftoss encountered wilh Iran (customer instrucOons saying Do not 
mention Sudan orrouting which does not make K^pwent mat these are Sudanese payments). This 
would create the exact scenarios illustrated in Corrv^nce's guidance axarnples re Sudan i.e the payment 
is prohibited under the sanction but is made because it pays a USD account outside the US . 

2. We apply strictly the wordlrtg of the GC1 .*._refusa te psitidpats In any transactbns and 

activities, or make any payments denorrmted ir> USD. whk^. if carried out by a US person, would be 
prohibited by any OFAC sancfions..’ and return the payments unprocessed. 

My instinct is to return all such USD payments but, before doino so. I would like confirmation that there 
should not be a cooling off period vrhert we continue lo make such payments, pending the Relationship 
Managers ' adw c e to their customer base. Addilionany, I warato beajre that I am correct in thinking 
that we should be "adopting' OFAC sanctions in lhese situations and not merely "interpreting" the OFAC 
sancliorrs so that our US colleagues' position is not compromised. If is perhaps also worth bearkrg In mind 
that OFAC sanctions are not limited to USD and K we made a Euro payment to Citibank In fovour of 
Sudan, we should likewise be cancelling such payrrents. 

I spnlcp.n in a niimher nf RMs reneritly and, righify nr wrrwuriy, tturre is iitke nr no krir>bvlK(1gR of the 
pr^iicaJ Implicaiions of the GCL. The is yet lo be updated and so it has not crossed the line of 
vision of many RMs. This does mesn that, Ifwe refuse to process OFAC related USD payments forthwith, 
the first time the customer will be aware <inl be when his payment fleets at our Wblf queue. This could 
cause considerable custorrter servicing Issues, parflct^arly If It Involves large corporates or valued private 
customers. 

To reiterate my stance atnve. I am keen to ensure that this is progressed professionally, and with 
minimum risk, but l am acutely aware that whicnover route t take may have other repercussions, albeit 
unwittingly. I feel that David Bagley should be made aware of this situabon but before advising him 
directly I thoi^t It sensiblo to involve yourselves, so that practicei remedial action can be drawn up. 

i would be grateful for your input, perhaps a short meeting to prevent protracted email correspondence 
could be amanged, but ! wll! await your views. 


Regards 


Rod 
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HSBC<X^ 

mFORMATION REQUESTED IN CONNECTION WITH: (NORTH KOREA. 
CUBA. AND MYANHAIQ 

L of iBc pod itltcl corriinl ■riivHiCT coirirRvwfij^ to 

frvin Ihe cvimtr?. (ojietber vi'Hh a deacr^llon of Hit Vosnenn and coatacU 
coatrlbaltni (« (bcM rcvctuM^ Thb idiooiM incltide, Vat nM be IfaniltJ (o, details iif 
tbe entitles end pnjrets to whldi you fesve provided Osencta*. 

IIBNd ' Mesico 

We wcjc notified Itiel tboe ere reletionsbipi with Caban atd Norili Korean cutliaiters. 
MLD ra<)uaeliad the conediation of tbeir accounU, and ftdtowed up ail the process until 
suck accounts dcnominaced in USD were canceled. AsaTtatky, wu have Ibund 108 
Noftit Kotesit enstoQten with bsbrsc«t orUSID.DMDsnd Cuban eucbxners u itti 
hslatioa hi The imcsird ofUSDiO.lIMn. Please note ihn the principal is denommstBil 
inMXP. 

Pkiue (L-id belovr en updtkd list of relatioukips with Cuban and Noilh Korean 
citizens: 


ToM aomberor casloincts by JurisdktRia, (flcms In USD) 


JURISDICTION 

CiutonerType 

/CMTewer 

Ns. 

CnstawM* 

No. 

USD 

BalsAcee 

Nurth Korea 


m 

174 

3.1t9.tM.26 


M.\P 

Bodi MNP Bid 

V2 

137 

«V7,P04.b4 


USD 

7 

38 

2.374,988.17 


USD 

9 

9 

46,5G7JiS 

Cube 


1368 

2468 

HU15.770.14 


MXP 

doth MXP end 

I2&4 

2249 

8J00. 194.29 


USD 

61 

194 

966,656.77 


USD 

a.) 

25 

348.919.07 

Total 


1A7« 

2.642 

13J34.S70.40 


BalarKes M of I IMAYP7 

Note: &e olieve figures have heee sent to bociness uniU so Ibol they w3l verify the 
nationality of the above relationships, end so as to canTiriD tbeir niigretoiy staats since 
wehavedetedeil Utal some of there have beat nahiriltsedB Mexican cilirreis. 
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Redacted by the Permanent 
Subcommittee on Investigations 




HBrA - Panam 

HSDC PinaiTia S.A. does m( havt iclaiionahipc triifi cwionKR of ihe 

afoienieiitioiRd natioDalities. 

BanUbno Penanw has (he follovinj relationsKijn with 0>l>«n astionals wIm reside in 
Psnami: 

Deposit Acoounts with bolenccs of USD I BSK 
Cr^il ChUs with talsnces ofUSD 39K 
Mortgages in (he amount of USD 24IK 

The acoounts oTCuban nstwnsls are expsaedtobecooccUod or39JUH07. 

(^^redit (2anb of Benistino Pbium lhal are svibomed to pm:«ra mssciious in Cid>s 
are eispecred to be cancelled on SOAJLAT. 

HBPE-reni 


HBFE <)oes not have any relMioiiships cilber with the riiove jurisdictions, baaks nor 
govenunents. 


HBCO-CotonibU 

o UMUctiont are related to 

I but it does not have loans with Bte bank. (Tl»y 

fiertber make transferi to Cube rtor receive roninimces. TIiDir deposhe are denominated 
in local cuntncy). Thcte c ad aocvint deoumiaated m local cwrency wtUi s babmes of 


nSHK-Tleiulunu 

There is one business relattonship widi IBcy maiinsin a savings 

scoouni denominated in USD Utnl ws upeued on 24-Dec-02 ivith ■ balaiKO as of 
21M,AY in (he amount of l.’SD9)lv TKe transactions oKeouled by the m are cash 
depositt, casli tvMidraviials that are evchanged imo local cwrency 


In addition, (here n one comsiercisl telMioitsbip svith 44 Cidica netionils with the 
fonouing bslaocesf 


Accounts deraniinnied k UbU'. USUlUk 

Aecaurfts denonsineicd m louat Currency (Lempiras): USD 22K 

HBCR- Con Rica 

Tha« is one ccetmaciti relaiioaship wkb )2 Cuban cusioniera who have difTersit 
saving) aod debit eccouats dcoceninaMd in USD with bshmees ofUSDI l.dK nd credit 
cords with balsooes ia (he anioujuorUSD$.$>L 


Confidential - FOIA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8876094 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00929 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




916 


VerDate Nov 24 2008 


HSBC^ 

HB5>'-EISaIvKl<>r 

TTiere h one releriondup n'rth a Cuban natiOfu) (A sa>wgK account dectominated in 
k>cal currency -Coion sa!va<>oieno- with ■ balance efl SIXZ3.12.) 

HBKi — Nkaraeua 

Kkaragua doei not execiAc hu not e;tecuied imDactkMK wiib Cuban, North VToreaiu 
orMj'anmarnaCionaU ' oitilies. 

Haliaraa 

Bshsreu rcporli lhai >t doec noi have any reUliouda^ with Cufcais natiojuk. 

U. An; Heir devdo^ents or ftitnrc anlldpaled btidnoa adMCttf rtiatcd to. or 
contacti with, the eounirlea Hiud- 

borthe eqrire r^ioa allneeestary amngomentt have been made to cancel all btisown 
rcldiocishqrs rv^i die sbove jurrsdicitoiis. ektiM' in relatioii lo ocooimis denonaiuied bi 
USD or oommcrdAl relstjonehipt widi such juhtdictioa*. Ibeie are not oew busincai 
lelaacntshipi to be opened \vfd> the above juriMlictKKB. 

IIL A dcCTtpt to n of direct or Indirrci coatacts niib the cove jKoiriUs ot the aanicd 
coontiie* and wMi taidividsals or entide* afllKated srltk or ewttroPad by those 
gweruKots, and the Bees mode by diote parties at fimdt received In the ichited 
transnctloos, 

Fct the eidifc regicn, ronnal rdvionsticps mainuiincd with tucti jurisdictions ore t^ilh 
the etubosiiia, ss chewn in section 1 hereof. 

IV. QuantiSeatltHi for each of 2003, 20M. 200 S*r> 1 2<MW of: 

(a) revmuca booi Oie country, 

(h) proRtabtttyofdiecoiinriy<pleaK advHcony dpsifiauaceanuitcsiiMd 

Ih nSoeutint eoMah and 
(e) total assets tn the coantry. 

No avsilabls informitlion. 

V. Details as lo whether the a t t i d O es McriBStd are subject to castomer 
conlMnatlallty. 

For th« eniire region. conTidenti.ility resBictions are appiicnble and ifiioiTus1]0)i may not 
be provided untess it is requested by ih: rescEator. 
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From; David WJ BAGLEY 
Sent: Mon Ocf 17 17:13:57 2005 
To: John F ROOT 

Subject: Re: GCL 050047 - Compliance wWi Sanctions 

Importance: Normal 

Attachments: image_0.9if Doc Linlchtm 


John , 

As per my earlier r>ole. 

Regards 

— Forwarded by David WJ BACXEY/HGHOniSBC on 170cl 2005 16 54 — 


)7 Oct 2005 1B:4Q 


From: MaMiew J W KING/GGM INA GHQTHGHQ/HSBC Tri: 7992 1176; 44 
2079 921176 


Graham THOMSON et al 

To: Graham THOMSON/HBMX/HSaC@HseC 

cc: David Leighton/HeUX/HSBC@HSBC 

Raman GARCIA/HBMXfl4SaC@HSBC 
Sandy Fk>ckhart/HBMX»HS8C@HSBC 
Sergio PINATHBMXAtSBOSHSBC 
David WJ BAGLEY/HGHQ/HSeC@HSBC 



Subject: Re: GCL 050047 - Compliance with Sanctions 


Graham, 


Thank you for the update. 

Sandy collared me on this last week. I told him then, and I have since confirmed, that the new policy 
applies specifically only to USD payments. However. I have now been advised there is also an issue for 
non-USD payments where these are transmitted through the HBUS TP gateway, as is the case in South 
America. Fernando BusneHo ts daating with this on behalf erf HBSfVHBAR and you may like to talk to him 
directly if HBMX' payments are similarly routed. 

I note H8MX continues to process USD payments involving Cuba. It is v«iy irrportani this Is stopped 
immediately as the regulators are getUng veiy lough and the cost to Ihe Group could be considerable if a 


I Permanent Subcommittee on Ibvestigations l 

EXHIBIT #71c I 
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breacn occurs, botfi in lerms of the fine and in the rectiHcatfon work which is likely to be a pre-requisite to 
any seltiement. If this identifies further breaches, the cost could spiral. 

Wth regard to non-USD payments as described above. GHQ CMP are urging HBUS to screen out these 
transactions to avoid any risk, and HBMX would have to put measures place to per-empt customer 
dismay, 

I am happy to discuss further. 

Regards 

Matthew 


Graham THOMSON/HBMXfHSBr 


Graham THOMSONfKBMXfHSBC HBMX To Matthew J WKING/GGM INA GHQ/HGHQ/HSBC@HS0C cc Sandy 
14.'10/2005 17:55 Mail S«e: 24601 Flockhart/HBMX/HSBCgHSBC. Ramon GARCIA/HBMX/HSBC@HS8C 

David Leis^on«BMX^1S8Cg!HSBC. Sergio 

PINAA1BMX/HSBC@HS8C Subject Re; GCL 050047 - Comjrtance with 
SarKtiofis EnMy HSBC Holdings pic- HGHQ 


Matthew 

I have received the fallowing commentary from HBMX CMP. which 1 relay in response to your query 
OFAC List Verification Implementation 


Background: 

The implementation of the ‘OFAC’ list as direcled by GCL050047 has not been completefy accomplished. 
This is due to the fact that the “WOLT system for the online deleclion of ’OFAC’ related matches will not 
be implemented until April 06, and because neither USD dematKl deposit accounts nor the Credit Card 
systems yet provide online validation against the ’OFAC’ list for rtew accouni openings. Please note that 
once these systems are updated, all other products and services will also be controlled as they ail require 
a cheque account to be operated. 


Pending these systems changes, manujtf controls have been imptemented in Private Banking. Treasury, 
Trade Services, and Trust however, please note that no automated means easts to ensure that these 
coritrois are properly being carried out. 

Our greatest exposure, and hence prtrKipal focus, is to the volume of business hislorfcafly carried out by 
HBMX customers with Cuba in US dollars. 


Regards 
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Graham Thomson 
Head of Group Audit Mexico 
Tel (52) 55 5721 6236 


Manhcw J W KING/GGM INA GHO;'HGHO/HSBC 


Madhew J W KMG/GGM tNA 
GHQ/HGHQIHSBC Sent by. Liz A TESTER 
04/10/2005 06.23 



To JonWADOIS/HOGAAAPHAiBAP/HSBC@HSBC, Mike R 
ALLSOP/HO Gf A GHQ/HOHQ/HS0C@HSBC, Pater J BOLAND/HD 
GAM/HBMEMSBC@HS8C. Alain CAOIOUrtHDQ/HBFR/HSBC@HSeC. 
Grace Y M LAM/HO ITA GHCi/HBAP4HSBC@HSBC, Vincent J 
MaiKUSOiHBUS/HSBC@HSBC. Ian MCMILLAN/H8EU/HSBC@HSBC, 
John RAMSOEN-KNOWLES/HBBR/HSBC@HSBC. Graham 
THOMSON«BMWHSBC@HSBC cc Subject Re: GCL 050047 - 
Complence nvith Sancticx^s 


Please see the attached. Can you please speak to your local CMP funcbons to ascertain the areas of 
highest risk. Please ensure that appropriate reference is included witWrt your audit programmes and give 
due consideration to the associated risks when planning your auditwork for 2006. 

A copy of the HTV guidelines referred to feRows by separate email. 

Regards. 

Matthew King 


David W J BAGLEY/HGHQ/HSBr 


David W J BAQLEY/HGHO/HSBC HGHO Sent To Mahhew J WKINOrOGM )NA GHQ/HGHQ/HSBC@HSBC cc Subject 
by: Marion O ROACH 03/10/2005 15:43 Phone GCL 050047 . Conpliarxe with Saretions Entity HSBC Moldings pic • 

No . :7e91 6645:44 2079 916S4S Mail Size: HGHO 

13949 


Matthew 

I refer to the above GCL, where the practical impact largely centres upon the OFAC sanctions, both at 
country and individuai (SON) level 
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Group CEO is particularty concerned to ensure as feras is possible tfiat the GCL ts properly and fu(ty 
implemented across the Group, recognising tfie significant US regi^bjty and reputational risks which 
might arise were even non-US Grouj^^^^^^^ngeor aid and abet infringement of the OFAC 
sanctions. The recent case involving perhaps provides a stark example of the 
potential conseguences which artse in circumstances wrhwe the US authorities suspect involvement in 
’breach". 


! attach a copy of my rrote to Stephen dated 19 September which sought to both update him with regard 
to certain significant steps required as part ofimpfementation but also Indicated that we would need to 
seek further assurance with regard to compBance with the GCL either by specific and targeted reviews 
(which will need to lake place in the first quarter rrf 2006) and Mil be the subject of the Compliance 
planning process, but also presumably through relevant scrutiny as pari of audils. 


Areas particularly affected by the GCL wouW include Trade Finance (where HTB have issued specific 
guidance), Payments areas. Correspondent Batiking and ptKsibly participation in local USD settlement 
systems. I am happy to discussrelevantaspecisof the GCL, and the practical issues which we have 
already seen arising out of implementalion, with any your team if you Itiink this would help, and whilst I 
recognise that as a matter of routine your audit (Mogrammes consider GCLs, His clear that Group CEO 
sees compliance with this GCL as being of particirtar significance. 


Regards 


David Bagfey 

(sent not seen by DWJB) 



Sent by; Marion 0 ROACH 



To; Stephen K OREEN/HSSH/HSBCMERIOlAN@HS9C 
ca; Richard E T B6 nnETT/mS8h*iS 8C®HSBC 
bee; 


Redacted Material 
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Subject GCL050047 'COMPLIANCE WITH SANCTIONS' 


Stephen 


Given the significance of the above GCL, and conscbus of the bet that! will miss the next pre-GMB 
meeting whilst in Hong Kong, 1 thought I shoiM update you with progress made in relation to 
implementation of the GCL since its issue. The Key points ans:- 

The required specialist 'U-turn' team has been estabfehed in HBME DUB who have opened a 
correspondent account with J P Morgan Chase through which the pre-screened complaint U-turn Iranian 
Payments can be made. 


A number of Group Offices have opened USD accounts with HBME (through which they will route al! 
Iranian payments) I am not convinced that gH Group Offices with Iranian payments are yet routing those 
payments through HBME, which the GCL required they should do by 1SEP05. 1 have already issued a 
reminder to Regional CorrpBance Officers and asked that they reww with their Business Heads if they 
do have relevant business which requires routing through HBME. It is of course entirely possible that 
some offices may have no need of these accounts if they have noreterant activity, i have asked for 
confirmations of the local position by close on 23 S 


GHQ CMP have provided, and corttinoe to provide, sigtuficanf levels of ad hoc advice in relation !o OFAC 
sanctions, including in respect of aclivitJes within CIBM. The latter constsfed of FX and Bond dealing with 
Iranian banks. Where necessary we have vaBdaled our advice with exterr>al lawyers. 


HTV, in close consultation with GHQ CMP have issued detailed guidance with regard to operational 
procedures for trade Iransactions inwoiwrrg Irart. Most of the payment flows linked to trade transactions 
we have considered to date are U-turn compKant MTVs procedures are intended to ensure that no 
further trade commilments are entered into wrhere the ultimate payments would be other than compliant. 
For operational reasons HTV have adopted an approach which is stricter than the requirements of the 
GCL. 


i suspect that ASP is rtwst heavily affected by the GCL. particularly in relation to trade by their customers 
with Myanmar, \Mii!st 1 am sure lhal there will have beeir some adverse reaction on activity involving Iran, 
most of the trade transactions have been able to continue as the payibents are U-tum compliant. 1 have 
not received any feedback on the reaction within Iran. 


I have indicated to the Compliance ftmetion globally lhal they will be required to carry out a 
comprehensive programme of reviews, against a standard template to be provided by GHQ CMP. to 
consider whether the GCL has been implemented. I wil also discuss with Matthew King how we can use 
routine audits to provide additional eorrtfort 


A recent meeting of the Wolfsberg Group confirmed both the substance and timeiiness of the approach 
we have adopted, it appears that at least 3 European banks hate OFAC reiaied issues, although ABN 
are by ter the worst affected. David Hodgkinson advised me that he has heard that the fine to be imposed 
on ABN may be as large as USO350m, although this is unconfirmed. Additionally Warren Learning RCO 
Dubai, has been called to a meeting with major banks at the US Consulate where they wiil be addressed 
by a representative from OFAC. i suspect 9iis follows on from the known visit to ABN's Dubai Office by 
representatives from the Federal Reserve. 


i wHl continue to monitor implementation of the GCL and at the Global Conference arranged in October 
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wii] re-emphasise !o the function the signiBcance and the reasons fts- our policy, and the need to monitor 
Compiiance. ! wonder if it would also be appropriate fix you to brieity about the significance of this 
GCL at the AOP offsite. 

No questions or issues were raised to connectfon with cover payments during the peer review carried out 
jointly by FRB and OCC of our correspondent banking acttvities with HBUS. 

I wilt be discussing how best to address the USD cie^ng system in Hong Kong, where HBAP act as the 
administrating bank, during my visit next week. Any changes to ftis system which we think are advisable 
in the conteict of toe OFAC sanction wj« need to be discussed virith HKMA. Given that there are obvious 
potential sensitivities in being seen to apply US reguiation extra-ierritorialiy 1 recognise the need to 
proceed with caution, whilst protecting us agairwl US regulatory risk. 


Vtfe have closed a number of USD correspondent relafionshtos wiUi Cuban and Myanmar banks. 

tAfe have, as anticipated within the GCL. aBowed a number of pre-ensting commitments to be honoured 
but emprfiasBed that no fresh arrangements should be enlered into whidi would breach the terms of the’ 
GCL, 


David Bagley 


9 


Confidential - FOiA Treatment Requested by HSBC Bank, USA, N.A. HSBC OCC 8874362 


VerDate Nov 24 2008 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 00936 Fmt6601 Sfmt 6601 


P:\DOCS\76061.TXT SAFFAIRS 


PsN: PAT 



VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm 00937 Fmt6601 Sfmt6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 


excerpt 


HSBC 


Deloitfe LLP 



Transaction Review Progress and Results Reporting 

IS'" SIS'" October 2011 


Prlvals & Confidenli^ 
Confidenth^ Treatment Requested 


Confidential Treatment Requested 


HSBC-PSl-PROD-OOg6628 


76061.349 


923 




VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm 00938 Fmt6601 Sfmt6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 


Correspondent and other accounts - Summary of accounts subject to 
review by location and regime 

The table below summarises the number of all USD and norvUSD accounts (containing USD transactions) with sanctioned banks 
or banks in sanctioned oounlrtes Identified, spn by the location of the accountand the related sanctions regime. 


Sancttoni Regime' 

^ «K 

Hong Kong* 

Total 

USO ,. 

Nen*USO 

U^O 

USD 

Non*USD 

Surma 

0 

0 

2 

2 

0 

Cuba.. 

7 

8 

0 

7 

6 

Iran , 

11 

11 

1 

12 

11 

Iraq 

5 

P 

0 

5 

0 

LIbye 

t 

0 

0 

1 

0 

North Korea 

2 

0 

0 

2 

0 

Sudan 

22 

13 

1 

23 

13 

Syria 

1 

1 

0 

1 

1 

Taltban 

2 

0 

0 

2 

0 

Total 

'. 51 

J1 

4 

S$ 

31 


* The Hong Kong reviews hove not commenced end (he overall number of accounts may change. 

See Appendix 1 forttetlng of cone^ndent and other accounts for the UK (USD and Non*USD accounts) and for Hong Kong 
(USO accounts only) 
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From: TERESA PESCE/HBUS/HSBC 
Sent: 1/28/2005 11:01:12 AM 

To: MICHAEL B GALLAGHER/HBUS/HSBC@HSBC:CHRISTOPHER LOK/HBUS/HSBC@HSBC;PETER G 
MeRRlTT/HBUS/HSBC@HSBC 

CC: TONY MURPHY/HBUS/HSBC@HSBC;JOSEPH M PETR!/HBUS/HSBC@HSBC;CAROLYN M 
V\^ND/HBUS/HSBC@HSBC; 

CAMILLUS P HUGHES/HBUS/HSBC@HS8C;A1jW T KETLEYWBUS/HSBC@HSBC;W1LUAM M 
WONG/HBUS/HSBC@HSBC: 

SUSAN A VVRIGHT/HGHQ/HS8C@HSBC 
Subject: Ai Rahji Trading/A) Rahji Banking 


As some of you may Icnow, the above nanfted cSents have been under evaluation by 
US and Group Compliance based, among o6ter things, on relationships maintained 
with enttties/countries on the OFAC list. Addition^ly, US law enforcement has 
placed these entities under scrutiny. After much consideration, Group 
Compliance has recommended that the US businesses sever ties with these clients 
based on the current regulatory environment and ttie interest of US law 
enforcement. Accordingly, I wiN not approve customer profiles for or 
transactions with these entities. Please make appropriate arrangements, lam 
available to answer any questions you rrright have. 

Regards- 

Terry 
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From: ALAN T KETLEY/HBUS/HSBC 

Sent; 3/16/2005 4:45:02 PM 

To: PAUL PLESSER/HBUS/HSBC@HSBC 

CC: 

Subject; Fw: A1 Rahji Guidance Clarified 
Paul 

Looks like you're fine to continue dealing with Al Rajhi. 
You'd better be making lots of money! 


AJan 

Forwarded by Alan T Ketley/HBUS/HSBC on 03/16/2005 04:43 

PM 

Teresa Pesce on 1 0 Mar 2005 12:26 
Note 

10 Mar2005 12:26 

From: Teresa Pesce Tel; 212-525-6099 

Title; Executive Vice President Location; 452 5th Ave, Floor 07 

WorkGroup: COMP/ANTI-MONEY LAUNDERING Mail Size; 1931 


To: Chris P DAV1ES/HBUS/HSBC@HSBC 
Christopher Lok/HBUS/HSBC@HSBC 
Michael B Gallagher/HBUS/HSBC@HSeC 
Alan T Ketley/HBUS/HSBC@HSBC 

Subject; Al Rahji Guidance Clarified 

Group has clarified the Al Rahji guidance issued last montti. They have 
evaluated Al Rahji Banking and Al Rahji Trading and now believe that the two 
are separated enough that relationships may be maintained with the latter but 
not wi^ the former. To be clear, recommendation is to sever with Banking only 
at this time. 


Confidential 

Confidential 
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From: CHRISTOPHER LOK/HBUS/HSBC 

sent: 5/23/2005 10:28:51 am 
to: TERESA PESCE/HBUS/HSBC@HSBC 


CC: STEPHEN J ALLEN 
Subject: fw: a 1 Raj 


|/H8MD/H5BCMERIDIAN^SBCMERIDIAN 


Terri 


After the occ close out and that chapter hopefully finshed, could we re-visit 
Al Rajhi again. London compliance has taken a more lenient view, as per 
below. 


Chris 

Forwarded by Christopher Lok/HBUS/HSBC on 05/23/2005 

11:29 AM 

Stephen j ALLEN on 23 May 2005 10:46 
Memo 

23 May 2005 10:46 


From: Stephen 1 ALLEN Tel; 7992 4555 

44 2079 92 4555 

Title: Location; 

WorkGroup: Mail Size: 759510 


to: Christopher Lok/HBUS/HSBC@HSBCAMERICAS 

Subject: Al Rajhi 

Chris, 

Here's the rest; 

Steve 

Forwarded by Stephen 2 allEN/HBMD/HSBCMERIDIAN on 23 May 2005 15:45 

Stephen 2 ALLEN/HBMD/hsbcmeridian on 23 May 2005 15:20 

Memo 

23 May 2005 15:20 


From; Stephen 2 ALLEN/hbmd/hsbcmeridian Tel: 7992 4555 
44 2079 92 4SS5 

Mail Size: 5101 


to: Christopher Lok/HBUS/HSBC@H5BCAMERICA5 

cc: 

bcc: 

Subject: 

Chris, 

we*n have to see if this will make any difference! I haven't seen the new kyc 
yet but, we are getting a copy. 

Steve 


page 1 
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David W J BAGLEY 
HGHQ 

23 May 2005 16:03 
;7991 8645;44 2079 918645 
Sent by: Marion 0 ROACH 

To: David H HODGKINSON/DCH MEM/HBME/HSBC@HSBC 
cc: Iqbal KHAN/CEO ISF HFSM/HBME/HSBC@HSBC 
warren G LEAMING/RLA LGA MEM/HBME/HSBC@HSBC 
Susan A WRIGHT/HGHQ/HSBC@HSBC 

Subject: AL RAIHI B/WK 
Our Ref: 

Your Ref: 

Entity: HSBC Holdings pic - hghq 


David 

Having now received the updated KYC from shariq siddiqui and reviewed the 
previous information received from Group Securities I am pleased to confirm 
that we have revised our recommendation in relation to the above. 

Accordingly we have lifted our recommendation against the commence or expansion 
of relationships with the above with immediate effect, we will communicate 
this decision to hbeu where I believe there are a number of pending 
applications, 

whilst we will advise hbus CMP of the revised view within GHQ CMP nevertheless 
I believe it will remain appropriate for HBUS CMP in conjunction with HBUS 
senior management to reach their own determination with regard to the expansion 
of business with Al Rajhi within the US. Although the revised view from GHQ 
CMP ought to be a material matter causing them to reconsider their position 
nonetheless, and particularly in the current US environment, I do not believe 
it is appropriate for us to seek to influence their determination one way or 
the other. This was something that I discussed as a possible outcome with 
Iqbal when we discussed Al Rajhi. 

Regards 

David Bagley 


Attachment: Al Rajhi HBME kyc 05.05.PDF 
Attachment: Al Rajhi Article 05.05.pdf 
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OCC-PSI-00343527 


SOME EMAILS FROM ICRO ELECTRONIC FILES PERTAINING TO AL RAJHI 
Note 

10 Aug 2005 12:12 

From: Teresa Pesce Tel: 212-525-6099 

Title; Executive Vice President Location: 452 5th Ave, Floor 07 

WorkGroup: COMP/ANTI-MONEY LAUNDERING Mail Size: 777381 

To: Sally G LOMAS/HBMD/HSBCMERIDIAN@HSBC 

cc: Lynda J CasseliyHBUS/HSBC@HSBC; Anne Liddy/HBUS/HSBC@HSBC; Alan T 
Kelley/HBUS/HSBC@HSBC; Gloria Stra 2 za/HBUS/HSBC@HSBC; Stephen J 
ALLEN/HBMD/HSBCMERIDIAN@HSBC; Susan SALAS/IBEU/FISBC@HSBC 

Subject: Re: Fw: A1 Rajhi 

Sally - 

This is not so simple. David does not object insofar as HBEU is concerned, but has left it 
to us to assess the US risk. We've gotten push back from the OCC on A1 Rahji Trading, 
which is less controversial than the bank. We can revisit this, but I am not inclined to 
push ahead precipitously, espcially in light of the regulatory scrutiny. 

Regards- 

Terry 

Sally G LOMAS on 10 Aug 2005 09:59 

Memo 10 Aug 2005 09:59 

From: Sally G LOMAS Tel: 799 11511 

44 2079911511 

Title: Location: 

WorkGroup: Mail Size; 773184 

To: Lynda J Cassell/HBUS/HSBC@HSBC 

cc; Teresa Pesce/HBUS/HSBC@HSBC 

Anne Liddy/HBUS/HSBC@HSBC 

Alan T Ketley/HBUS/HSBC@HSBC 

Gloria Strazza/HBUS/HSBC@HSBC 

Stephen J ALLEN/HBMD/HSBCMERID1AN@HSBC 

Susan SALAS/IBEU/HSBC@HSBC 

Subject; Fw; A1 Rajhi 

Lynda, 

please find attached an email sent by David Bagley, indicating that there is no longer a 
recommendation against expanding relationships with A1 Rajhi Bank. 
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I have asked Fig to check, when they do tiieir additional work, whether the same part of 
the A1 Rajhi fanily is invloved in both Banks. We now need to wait until we have the 
more detailed EIDD information which you have requested. 


Regards 

Sally 

- Forwarded by Sally G LOMAS/HBMD/HSBCMERIDIAN on 10 Aug 2005 14:52 - 
Stephen J ALLEN/HBMD/HSBCMERIDIAN on 10 Aug 2005 10:17 
From; Stephen J ALLEN/HBMD/HSBCMERIDIAN Tel: 7992 4555 
44 2079 92 4555 
Mail Size: 767532 

To: Sally G LOMAS/HBMD/HSBCMERIDIAN@HSBC 

cc: 

bcc: 


Subject: Fw: A! Rajhi 

- Forwarded by Stephen J ALLEN/HBMD/HSBCMERIDIAN on 10 Aug 2005 10:17 - 

Christopher Lok/HBUS/HSBC on 23 May 2005 16:28 

From: Christopher Lok/HBUS/HSBC Tel: 212-525-2062 

Mail Size: 761889 

To: Teresa Pesce/HBUS/HSBC@HSBC 

cc: Stephen J ALLEN/HBMD/HSBCMERIDIAN@HSBCMERJDIAN 
bcc: 

Subject: Fw: Al Rajhi 
Terri 

After the OCC close out and that chapter hopefully finshed, could we re-visit Al Rajhi 
again. London compliance has taken a more lenient view, as per below. 

Chris 


David W J BAGLEY 
HGHQ 

23 May 2005 16:03 
7991 8645;44 2079 918645 
Sent by: Marion 0 ROACH 

To: David H HODGKINSON/DCH MEM/HBME/HSBC@HSBC 
cc: Iqbal KHAN/CEO ISF HFSM/HBME/HSBC@HSBC 
Wanen G LEAMING/RLA LGA MEM/HBME/HSBC@HSBC 
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Susan A WRIGHT/HGHQ/HSBC@HSBC 
Subject: AL RAJHI BANK 
Our Ref: 

Your Ref: 

Entity: HSBC Holdings p!c - HGHQ 
David 

Having now received the updated KYC from Shariq Siddiqui and reviewed the previous 
information received from Group Securities I am pleased to confirm that we have revised 
our recommendation in relation to the above. 

Accordingly we have lifted our recommendation against the commence or expansion of 
relationships with the above with immediate effect. We will communicate this decision 
to HBEU where 1 believe there are a number of pending applications. 

Whilst we will advise HBUS CMP of the revised view within GHQ CMP nevertheless 1 
believe it will remain appropriate for HBUS CMP in conjunction with HBUS senior 
management to reach their own determination with regard to the expansion of business 
with A1 Rajhi within the US. Although the revised view from GHQ CMP ought to be a 
material matter causing them to reconsider their position nonetheless, and particularly in 
the current US environment, 1 do not believe it is appropriate for us to seek to influence 
their determination one way or the other. This was something that 1 discussed as a 
possible outcome with Iqbal when we discussed A1 Rajhi. 

Regards 

David Bagley 
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H8US GLOBAL BANKNOTES - Purchases & Sales of USD 














Summarv bv Country: 2008 vs 2009 



Ail figures are in USD thousands. 




fowludino HSBC Group aflliatos. FRB & US D«p(s) 






s 

COOMTRY 

Risk 

HSBC 

ending Mar -OB 

ending Mar-09 

20D8-200B 


AZERBAIJAN 

Hioh 

PunHiisss 





BW4OtA0ESH 

High 

Purchases 




R 

BELARUS 

High 

Purchases 

$113,864 




CAMB(X}IA 

High 

Purchases 

$278,072 


99% 


COLOMBIA 

High 

Purchases 

g-__ 


iSSiS 



High 

Purchases 






High 

Purchases 





GEORGIA 

High 

Purchases 

$26,090 

$9,6ia 

■«4% 


HAITI 

High 

Purchases 






High 

Purchases 






High 

Purchases 



•66% 



High 

Purchases 




KYRGYZSTAN 

High 

Purchases 





LAOS 

High 

Purchases 






High 

Purchases 





MACAU 

High 

Purchases 






High 

Purchases 






High 

Purchases 





NEPAL 

High 

Purcrrases 






Hioh 

Purchases 






High 

Purchases 




27 

PHILIPPINES 

High 

Purchases 
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1 


MEXICO 

High 

BANCO MERCANTIL DEI NORTE 



MEXICO 

Htah 



113 

MEXICO 

High 

BANCO NACIONAt DE MEXICO 




High 

BBVA BANCOMER SA 

' ; 


MEXICO 

High 

B0VA BANCOMER SA 


117 

MEXICO 

High 




MEXICO 

High 




MEXICO 

High 




MEXICO . . .... 

High 





High 





High 





Redacted by the 





Permanent Subcommittee on Investigations 











page 24 of 133 


76061.360 


934 





VerDate Nov 24 2008 14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm 00949 Fmt6601 Sfmt6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 





76061.361 


935 




936 


VerDate Nov 24 2008 


11/17/2006 08:53 AM 
To 

Beth Fisher/HBUS/HSBC@HSBCAMERICAS. Alan T Ketley/HBUS/HSBC@HSBC 
cc 

Subject 

Al Rajhi Banking 


Beth/Alan, 

Salman Hussain, the PCM Regional Sales Manager at HBMEin Bahrain, who has 
recently visited the subject, has called to say that Al Rajhi has now run out 
of patience waiting for us to re-start our banknote trading relationship and 
unless we can complete the kyc formalities and advise them accordingly by the 
end of November, they will terminate all product relationships witti ttre HSBC 
Group - which 1 believe to be substantia. 

Their main point of contention is thatthey that ttiey were exonerated by 
all US legal processes from TF suspicion some time ago and yet we have still 
not been able to re-start trading with them. Gordon finished our latest attempt 
at the profile on Tuesday and you will find ttie kyc profile to be currentiy in 
the '!B Pending' inbox. Could I please ask you both to expedite your reviews so 
that we can attempt to prevent the loss of an important client to the Group? 

thanks and regards 
Steve 


I Permanent Subcommittee on Investigations 1 

i, Inc. HSB03666147 

...uMMucu,,, - rum rviTHuc;: HSBC OCC 3280505 
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From: CHRISTOPHER LOK/HBUS/HSBC 
sent: 11/17/2006 10:05:55 AM 

To: STEPHEN I ALLEN/HBMD/HSBCMERIDIAN@HSBCMERIDIAN 
CC: DAVID M WILENS/HBUS/HSBC@HSBC 
Subject: Re: Fw: At Rajhi Banking 

Steve 

At the end of the day, its compliance who's the key. I'll speak to Ketley & 
ask him to re-evaluate this name. 


Chris 


Stephen 3 allen/hbmd/hsbcmeridian 
T el: 799 24555; +44 (0) 20 7992 4555 
11/17/2006 09:34 AM 

To 

Christopher Lok/HBUS/HSBC@HSBC 
CC 

David M wilens/HBUS/HSBC@HSBC 
Subject 

Fw: Al Rajhi Banking 


Chris, 

Who do you suggest can/will sign this profile? 

You will see that it is pressing - perhaps David could IS and you could IB 
approve if Susan and i sign it again?. 

Steve 


Forwarded by Stephen 3 allen/hbmd/hsbcmerioian on 17/11/2006 14:30 - 

Beth Fisher/HBUS/HSBC 
HBUS 

17/11/2006 14:23 
Mail Size: 7422 

To 

Stephen 3 allen/hbmd/hsbcmeridian@hsbc 

CC 

Alan T Ketley/HBUS/HSBC@HSBC, Christopher 3 Heusler/HBUS/HSBC®HSBC 
Subject 

Re: Al Rajhi Banking 
Entity 

HSBC Bank usa. London Branch (Treasury and capital Markets - TCM) 


Steve, 


Page 1 
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I am not trying to be difficult, but I do not personally feel comfortable IB 
approving this name. I do not know this bank. Additionally, several years 
ago, when HBUS had relationships with 2 different a 1 Rajhi names, management 
would ask me questions about the customer every time the name appeared in the 
US newspapers, i do not know this bank personally and am therefore not 
qualified to render an opinion; i cannot answer questions if/when the Alrajhi 
name appears in US news media. 

Therefore, please ask another officer to 18 approve. I am IB-Denied the KYC, 
so that my name can be removed as RM. 

Thank you. 

Beth 


Stephen J allen/hbmd/hsbcmeridian 
T el: 799 24555; +44 (0) 20 7992 4555 
11/17/2006 08:53 AM 

To 

Beth Fisher/HBUS/HSBC@HSBCAMERICAS, Alan T Ketl ey/HBUS/HSBC@HSBC 
cc 

subject 

Al Rajhi Banking 


Beth/Al an, 

Salman Hussain, the PCM Regional sales Manager at HBME in Bahrain, who has 
recently visited the subject, has called to say that Al Rajhi has now run out 
of patience waiting for us to re-start our banknote trading relationship and 
unless we can complete the kyc formalities and advise them accordingly by the 
end of November, they will terminate all product relationships with the HSBC 
Group - which i believe to be substantial. 

Their main point of contention is that they feel that they were exonerated by 
all us legal processes from TF suspicion some time ago and yet we have still 
not been able to re-start trading with them. Gordon finished our latest attempt 
at the profile on Tuesday and you will find the kyc profile to be currently in 
the 'IB Pending* inbox. Could I please ask you both to expedite your reviews so 
that we can attempt to prevent the loss of an important client to the Group? 

thanks and regards 
Steve 
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Occ-Psi -00150798 

From: CHRISTOPHER LOK/HBUS/HSBC 
sent: 11/17/2006 10:31:07 AM 

To: STEPHEN 3 ALLEN/HBMD/HSBCMERIDIAN@HSBCMERIDIAN 

cc: 

subject: Re: Alrajhi 

I would tell Salman that he should relay the 'concern' Alrajhi has expressed to 
the higher ups. To cancel the Amanah business is much bigger than not dealing 
with banknotes. Hopefully somebody in London will listen and given nyk 
C ompliance a gentle push. 


Chris 


Stephen 3 ALLEN/HBMD/HSBCMERIDIAN 
Tel: 799 24555; +44 (0) 20 7992 4555 
11/17/2006 10:20 AM 

TO 

Christopher Lok/HBLiS/HSBC@HSBC 
cc 

subject 
Re: Alrajhi 


chri s , 

This is the note that I received subsequent to Salman calling (I sent it on to 
Alan) 

As ever, we are taking an inordinate amount of time to make our minds up. 

I discussed this client with Terry, Linda and Alan when I visited in February, 
we eventually received and have now answered a raft of supplementary questions 
from Linda and now that she has left, no doubt there will be more questions 
from Alan! 

Steve 

Salman hussain/hbme/hsbc 
HBME 

17/11/2006 13:56 
Phone NO. 0097317569599 
Mail Size: 16093 

TO 

David B ILLIN6/HBMD/HSBCMERIDIAN, Gordon BROWN/IBEU/HSBC, Stephen 3 
ALLEN/HBMD/HSBCMERIDIANSHSBC 
CC 

ciara O’CONNELL/IBEU/HSBC, Shariq Z SIDDIQI/HBME/HSBC , John L 
SCOTT/HBEU/HSBC, 

Hammad Zaidi/HBUS/HSBC, Stephen D Loffredo/HBUS/HSBC@HSBC 
Subject 

Fw: Al Rajhi Bank kyc <& aml Policy 
Entity 

HSBC Bank Middle East Limited 

Paoe 1 
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Dear David, Gordon and Stephen, 

Further to my phone call with David last week after meeting a 1 Rajhi Bank in 
Riyadh, i was given a deadline by Mr. Cassim Docrat, Head of FI until end of 
Nov. to respond to them weather we will be able to resume the banknote 
business or not. Mr. Docrat indicated that HSBC Amanah business will be at risk 
and they will cancel any dealings with HSBC. 

Mr. Docrat understand Compliance Dept, requirements and suggested we request 
further information from Moody (Attn. Mr, Anwar Hasson) or S&P. He also 
indicated that IP Morgan chase, their main us$ clearer had done the same and 
accordingly an 0 /d limit of $290mm established by 3PMC for Al Rajhi. 

I can't stress on the fact that we do want to do business with this institution 
from PCM side, we do stand a good chance to win a us$ clearing account thru 
offering Islamic Overnight investment Product and the us$ check clearing thru 
Check 21. 

Kindly let me know if you do require any further assistance to obtain 
compliance approval. 

Best regards, 

Salman Hussain 
Regional Sales Manager 
Global Transaction Banking 


Christopher Lok/HBUS/HSBC 
HBUS 

17/11/2006 15:11 
Mail Size: 2435 

TO • 

Stephen 3 allen/hbmd/hsbcmeridianShsbcmeridian 
cc 

subject 
Al raj hi 
Entity 

HSBC Bank USA. London Branch (Treasury and Capital Markets - TCM) 


Steve 


lust spoke to Alan. He's going to read the whole file, including the few edd. 
He says the file is more than an inch thick and he's aware of the 'threat' you 
passed along. His view is Alrajhi may not really walk away if we can't 
revert by November end, which I agree. 
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I told him frankly lets avoid the middlemen and go straight to the decision 
maker, we should have an answer in the next few weeks. 
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From; ALAN T KETLEY/HBUS/HSBC 
sent: 12/1/2006 10:13:20 am 

to: STEPHEN 3 ALLEN/HBMD/HSBCMERIDIAN@HSBC; SALMAN HUSSAIN/HBME/HSBC@HSBC 
CC: TERESA PESCE/HBUS/HSBC@HSBC;CHRISTOPHER L0K/HBUS/HSBC@HSBC 
Subject: a1 Rajhi Bank 

Steve, Salman 

The purpose of this note is to confirm to you the willingness of HBUS to 
recommence a relationship with a 1 Rajhi Bank. 

I have reviewed Al Rajhi Bank’s aml information as well as all the 
investigative research that has been performed by ICRO, I have also conducted 
some of my own research and am satisfied that we can do business with this 
entity as long as our due diligence is thoroughly documented and close 
transaction monitoring takes place by Compliance along with a high degree of 
transaction awareness being maintained by the business. Over a period of years 
there has been much negative publicity associated with the principals of this 
entity - while none of these allegations has been proven or substantiated, the 
notion of 'no smoke without fire* is one we must bear in mind and any business 
unit dealing with this entity must acknowledge the associated risks. I have 
not yet reviewed their Lotus Notes KYC Profile in any great detail but will try 
to do so before close of business today - to paraphrase an expression from 
English Banking, if it is in my hands and in order I will approve it. 

I am confident that our Banknotes transaction monitoring is sufficiently robust 
to keep a close eye on this client’s activities and I would ask that your 
traders apply special vigilance when dealing with them. 

I'm addressing Salman with this note because I know that he too is looking to 
further develop the Al Rajhi Bank relationship but here I have to place some 
conditions. While we have a robust method of monitoring wire payment activity, 
we do not have a corresponding automated method of monitoring check or cash 
letter transactions. Accordingly, while I would be happy to see wire activity 
flowing over a future Al Rajhi Bank account, I cannot support paper activity 
with the degree of close monitoring that would be appropriate. 

Chris Lok has agreed to act as relationship owner for this name in place of 
Beth Fisher - he will thus review and approve the profile if he is satisfied 
with it. Should a PCM relationship develop, it must be with the explicit 
approval of HBUS’ senior PCM management. 


Alan T. ketley 

senior vice President, Anti Money Laundering 
Tel: 212 525 6147 / Fax: 212 382 7580 
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From; DANIEL JACK/HBUS/HSBC 
Sent; 7/26/2007 1:55:33 PM 

To: STEPHEN J ALLEN/HBMD/HSBCMERIDIMM@HSBC:GORDON BROWN/IBEU/HS8C@HSBC 
CC; 

Subject: Ai Rajhi Bank in Saudi Arabia 
Steve / Gordon - 

This article on AI Rajhi Bank &TF was in the V\bl Street Journal today. 

We realize that we re-activated the relationship with them last month. 

We in AML-NY wili draft a reply to Joe Boss & OCC soon. 

Please review this below & let me know if you have any commento. 


Thanks and regards, 

Daniel Jack 

VP - AML Compliance | HSBC Bank USA. NA 
452 Fifth Avenue, 7th floor. New Ytwk, NY 10018 


Phone. 212-525-8686 

Email. danjel.jack@us.hsbc.com 


Forwarded by Daniel Jack/HBUS/HSBC on 07/26/2007 02:48 PM — 


Forwarded by Alan T Ketiey/HBUS/HSBC on 07/26/2007 08:30 AM 

■'Boss, Joseph" <Joseph.BQSS@occ.treas.gov> 

07/26/2007 08:24 AM 


To 

alan.t.kettey@us.hsbc.com 

00 

"Boss, Joseph" <Joseph.6oss@occ.treas.gov> 

Subject 

Saudi's 


Alan, for your information and review. Please let me know if there is 
anything. This appeared on the front page of today's Vlfall Street Journal 
Thanks, Joe 
TERROR FINANCE 

U.S. Tracks Saudi Bank Favored by Extremists 


Confidential > 
Confidential - 


FOiA Treatment Requei 
FOIA Treatment Requei 
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Offidais Debated What To Do About Al Ra^, InteSgence Fles Show 
By GLENN R. SIMPSON 
July26, 2007; Page Al 

JIDDA, Saudi Arabia - In the 1940s, two Bedouin farm boys from the desert 
began changing money for the trickle of traders and reBgious pigrims in this 
then-remote and barren kingdom. It was a business buitt on faith and trust, 
Sulaiman Al Rajhi once told an interviewer, and fw many years he would hand 
gold bars to strangers boarding flights n Jidda and ask them to give the gold 
to his brother on their arrival in Riyadh. 

EXTREMISTS' ACCOUNTS 

The News: U.S. intelligence reports say Islandc extremists often use Saudi 
Arabia’s Al Rajhi Bank to move money. The bank has denounced terrorism and 
denies any role in financing extremists. 

The Issue: A confrontation with Al Rafii would be politically diffiojit for 
Saudi monarchy, and U.S. isn't satisfied wlh its efforts to curb the financial 
infrastructure essential to terrorism. 

Result: U.S. has periodically debated taking action on its own against the 
bank, but chosen instead to lobby the Saudis quietly about its concerns. 

Today, Mr. Al Rajhi is a reclusive octogenarian whose fortune is estimated at 
$12 billion. And Al Rajhi Bank grew into the kingdom's largest Islamic bank, 
with 500 branches in Saudi Arabia and mwe spread across the Mus&m world. 
Following the Sept. 11, 2001, attacks, the bank also set off an intense debate 
within the U.S. government over v^ether to take strong action against its 
alleged role in extremist finance. Confidential reports by the Central 
intelligence Agency and other U.S. agencies, reviewed by The Wail Street 
Journal, detail for the first time how much the U.S. learned about the use of 
Al Rajhi Bank by alleged extremists, and how U.S. officials agonized over what 
to do about it. 

After 9/1 1 , the Saudi monarchy pledged its fill! support in the fight against 
global terrorism. And following \iolent attacks inside the kingdom in the next 
two years, the Saudis did launch major strikes against militants c^erating on 
their soil. But the Saudi government has been far been less willkig to tackle 
the financial infrastructure essential to terrorism. U.S. intelfigence reports 
state tiiat Islamic banks, white mostly doing ordinary commerce, also are 
institutions friat extremism relies upon in its global spread. 

As a result, the Bush administration repeatedly debated proposals for taking 
strong action itself against Al Rajhi Bank, in particular, according to former 
U.S. officials and previously undisclosed government documents. Ultimately, the 
U.S. always chose instead to lobby Saudi officialdom quietly about ite 
concerns. 

The U.S. intelligence reports, heretofore secret, describe how Al Rajhi Bank 
has maintained accounts and accepted donations for Saudi charities that the 
U.S. and other nations have formally designated as fronts for al Qaeda or other 
terorist groups. 

In addition, Mr. Al Rajhi and family members have been major donors to Islamic 
charities that are suspected by Western irtt^ligence agencies of fonding 
terrorism, according to CIA reports and federal-court filings by the Justice 
Department. 

A 2003 CIA report claims that a year after Sept. 1 1 , with a spotiight on 
Islamic charities, Mr. Al Rajhi ordered Al Rajhi Bank's board 1o explore 
financial instruments that would allow the bank's charitable contributions to 
avoid official Saudi scrutiny." 

A few weeks earlier, the report says, Mr. Al Rajhi "transferred $1 .1 billion to 
offshore accounts - using commodity swaps and two Lebanese banks - citing a 
concern that U.S. and Saudi authorities might freeze his assets." The report 
was titled "Al Rajhi Bank: Conduit for Extremist Rnance." 

Al Rajhi Bank and the Al Rajhi family deny any role in financing exfremists. 

They have denounced terrorist acts as un-Islamic. The bank dectined to address 
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specific allegations made in American intelligence and iaw-enibrcement records, 
citing client confidentialtty. 

RELATED DOCUMENTS 

Al'Rajhi bank became a target for U.S. terrorism sanctions less than two months 
after Sept. 11, 2001. 

No action was taken, but in mid-2003, the Central Inteffigence Agency concluded 
that the Al-Rajhi family and their bank were finandng terrorists, probably 
knowingly. This is the summary page1 from the agency's report. 

The bank sued The Wall Street Journal Europe frv Nbd in 2002 over a report 
that it was under scrutiny in connection with temorism funding, but dropped 
the case in 2004 and The Wall Street Journal published the bank's statement2. 

The CIA's report and ofrier U.S. intelligence on Al-Rajhi remained secret, and 
in 2005 a federal judge threw out a lawsuit against the bank by victin« of Al 
Qaeda, saying there was no evidence Ai-Rajhi prodded anything but routine 
banking services to terrorists. Read the ofder.3 

The Al-Rajhi family and the ruling Al-Saud ten^ of Saud Arabia have been at 
odds for decades, in part because of the accidental death of an infrint Al-Rajhi 
family member in a botched police rescue atterr^t during a kidnapping. Saudi 
dissidents in London issued a communique recounting the incident4 that was 
highly critical of Saudi authorities. The document was made available by the 
Investigative Project on Terrorism, a Washington-based nonprofit group. 

This 1 992 State Department cableS from the U.S. ambassador in f^yadh discusses 
the Saudi press coverage ofthe Al Rajhi bank's purported role in the BCCI 
scandal. 

One ofthe Al Rajhi bank's major longtime clients is the Intemationai tsiamic 
Relief Organization of Jeddah, Saudi Arabia, a powerful charity backed by some 
ofthe country's wealthiest businessmen. This funcfraising sotidtationS is from 
the IIRO's March 2007 newsletter. The group strongly denounces terrorism on its 
Web site?. 

U.S. intelligence has alleged connections between ai Qaeda and the liRO since 
1 996, and the Treasury Department now ailegesS the liRO has been deeply 
penetrated by a! Qaeda. The group denies supporting terrorism in tiys statement 
9 from its most recent newsletter. The group also claims it no bnger sends 
money overseas, and that its accounts are frozen by Saudi banks. Yet its most 
recent fundraising letterlO solicits donations to Al Rajhi bank and touts a 
variety of ongoing projects in overseas conffict zones. 

In 2004, liRO funded a medical facility in Fallujah while that central Iraqi 
town was under the control of Iraqi insurgents- The U.S. Marine Corps blew up 
the clinic, and says ail three of the dty's hospitals were being used by 
insurgents as fighting positions. See the PowerPoint slidesll. 

In 2002, the bank sued The Wall Street Journal Europe after an article said 
Saudi authorities were monitoring some Al Rajhi Bank accounts at U.S. request, 
in a bid to prevent them from being used, wittingly or unwittingly, for 
funneling money to terrorist groups. The bank dropped the suit in 2005 and the 
Journal published a statement saying its article hadn't reported any allegation 
that the bank supported or financed terrorism. 

Also in 2005, a U.S. judge dismissed Ai Rajhi Bank from a lawsuit filed by 
relatives of Sept. 1 1 victims. The ruling said banks couldn't be held liable 
for providing routine services to people who turned out to be terrorists. In a 
statement in response to questions about suspected terrorists among its 
clients, the bank noted that "Al Rajhi Bank has a very large branch network, 
and a very large retail customer base." 

U.S. law-enforcement and intelligence agencies acknowledge it is possible that 
extremists use the bank's far-flung branches and money-transfer services 
without bank officials' knowledge. The U.S. has never obtained proof that the 
bank or Its owners knowingly facilitate terrorism, according to documents and 
former officials, despite what they describe as extensive circumstantial 
evidence that some executives are aware the bank is used by exfremists. The 
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2003 CIA report concluded; "Senior Al Rajhi fandy members have long supported 
Islamic extremists and probably know Aat terrorists use bank." 

Most major banks around the world are bourrd by a patehwork of treaties and 
agreements that, in effect, require them to know their customers and report any 
suspicious activities to regulators. The rules are designed to light terrorism, 
money laundering and narcotics trafficking. Ifs generaly acknov^edged that 
Saudi banks are bound by these rules, although experts diff» on when 
compliance became mandatory. 

The top counterterrorism official at the U.S. Treasury Department, white 
declining to comment on Al Rajhi Bank specifically, says Saudi officials 
haven't met a promise to create a commission to oversee Saudi r^arities, many 
of which bank with Al Rajhi. ’They are also not holding people responsible for 
sending money abroad for jihed," says ffie Treasury official, Stuart Levey. "It 
just doesn't happen," 

The Saudi government maintains it has been working dSigently with the U.S. and 
others to counterterrorism. It cites its arrests of several aUeged terrorist 
fund-raisers in recent years. The Saudis (Sdnt respond to specific questions 
about their efforts to counter terrorist finance or oversee banks. 

A White Mouse statement said that "the Saudis continue to be a strong partner 
in the War on Terror....We have made significant progress on numerous fronts - 
including the freezing of assets and the shutdown of known conduits of 
[terrorist] funding." A CIA spokesman s«»d "put^ishing details of how our 
government seeks to track extremist finandng" could undermine those efforts. 

For the ruling Saud femily, any confrontation with the Al Rajhis could be 
politically treacherous. To stay in power, the Sauds rely on the tolerance of 
clerical and business elites, many of whom view the royal ^rrvly as corrupt. 

The wealthy Ai Rajhis are a clan long at odds with the royal family. And U.S. 
intelligence files show tiie Al Rajhis also have close ties to another group 
critical of the royals: Saudi Arabia's conservative clerics. 

The Al Rajhi empire includes hotels, housing developments, commodities trading, 
shipping, aviation leasing and poultry. Its core is the bank, with more than 
500 branches in Saudi Arabia and other offices abroad, from Pakistan to 
Malaysia. For 2006, the publicly held institution reported $1 .9 billion in 
profit and S28 billion in assets. 

Sulaiman Al Rajhi grew up in the Nejd desert, die birthplace of a severe form 
of Islam, called Wahhabism, that forbids birthday parties, musical instruments 
and photographing people, in the 1940s. he and a brother, Saleh, went to the 
Saudi capital city. "From literally nothing - making change on what were then 
the dirt streets of Riyadh - Sulaiman and Saleh al Rajhi built the Al Rajhi 
Bank," Sulaiman's lawyers told a U.S. court in New York in 2005. 

Sulaiman described the business in a rare interview with Euromoney magazine in 
1983. With two other brothers, he and Saleh began changing money for pilgrims 
taking carnet caravans across the desert to (he holy cities of Mecca and Medina. 
When throngs of migrant workers came to Saudi Arabia during die 1970$ oil boom, 
the AJ Rajhis helped them send their earnings home to places like Indonesia and 
Pakistan. 

In 1983, the brothers won permission to open Saudi Arabia's first Islamic bank, 
one that would observe religious tenets such as a ban on interest. 

But relations with the njling family frayed. The government-controlled press in 
1992 publicized A] Rajhi Bank's tangential role in an international scandal of 
that era, that of the bank called BCCt, U.S. diplomats reported. Then in 1994, 
an infant relative of the Al Rajhis died in a kidnapping. Offidal press 
accounts said the kidnappers slit the child's throat, but Saudi dissidents 
claimed police shot the child. Mr. Al Rajhi blamed the royal femily, the CIA 
report says. 

Although Al Rajhi Bank continued to make a show of support for the Sauds - 
annual reports had flowery tributes to the royal fomiiy - the bank began 
revising to make loans to the Sauds or to finance their projects. U.S. 
diplomats said at the time. 
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Wth its Istamic procedures, the bank sivas a magnet for the dericai 
establishment, which grew rich from alms amid the boom. As foe clerics' 
charities spread, they became entwined Mifo Al Rajhi Bank and foe conservative 
A1 Rajhi family's own extensive financial support fOT Islamic causes. 

There is no reliable estimate of how much the Al Rajhis have given to promote 
Islam over foe years, but an endowment hddlng much of Saleh Al Rajhi's wealth 
gives an indication of the scale. Its Web site deta9s nearly $50 million in 
direct donations within foe kingdom to Islarrec causes and at least $12 million 
in donations abroad. The overseas money went to aid embatfled Muslims in 
Kosovo, Chechnya and foe Palestinian territories and to finance Istamic 
instruction. 

There are indications not ail the giving was for such purposes. The W Rajhi 
name appeared on a list of regular finandat contributes to al Qaeda that was 
discovered in Sarajevo, Bosnia, in 2002. The list was authenti’cated for foe 
Federal Bureau of Investigation that year by America's top judicial witness 
against a! Qaeda, a onetime ai Qaeda budness manager named Jamal Al Fadi, who 
is in foe federal vritness-protection pro^m. he caRed foe contributor list 
foe "golden chain." 

A 2003 German police report said Sulaiman Al RaJN and other famRy members had 
contributed more than $200,000 in 1993 to a chari^that financed weapons for 
islamic miltfonts in Bosnia, in addition to providing humanitarian aid. 

The 2003 CiA report tells of efforts by two Al Rajhi brothers to keep some 
giving secret. It says that Sulaiman and Sdeh transferred $4 milKon to 
parties in Germany and Pakistan in December 1998 using "a unique computer code 
to send funds ai regular intervals to unspecified recipients, suggesting they 
were trying to conceal the transactions and that foe money may have been 
intended for illegitimate ends." 

The report says extremists "ordered optatives in Afghanistan, Indonesia, 

Pakistan, Saudi Arabia, Turkey, and Yemen" to use Al Rajhi Bank. Mamduh Mahmud 
Salim, convicted mastermind of foe 1998 embassy bombings in Kenya and Tanzania, 
was carrying records of an Al Rajhi account (number 001 424/4) when arrested in 
Germany in 1998, German police found. 

In 2000, foe CIA report says, Al Rajhi Bank couriers "delivered money to the 
Indonesian insurgent group Kompakto fond weapons purchases and bomb-making 
activities.” 

A U.S. intelligence memo dated Nov. 16, 2001 , says a money courier for Osama 
bin Laden's second-in-comrrrand, Ayman al-Zawahri, fraveled on a visa that foe 
bank had obtained for him. The memo adds, however; "Reporting does not indicate 
whether bank management was witting" of the courier's terrorist connections. 

Al Rajhi Bank maintained et least 24 accounts and handled unusual transactions 
for Al-Haramain foundation - a charity that Treasury officials say has acted 
as a front for al Qaeda in 13 countries - until the Saudi government ordered 
the charity shut down in late 2004. accor^ng to intelligence and 
law-enforcement reports. The United Nations has de^gnated top officials of 
AJ-Haramain foundation as terrorists, and most of its offices now are closed. 
According to a federal indictment in Oregon, a top M-Haramain official in 2000 
carried $130,000 in $1,000 traveler's checks from Portland to Riyadh and 
deposited them with AJ Rajhi - funds the Indictment says were for foe ultimate 
benefit of al Qaeda fighters in Chechnya. The indicted official. Sotiman 
Al-Buthe, now works for the city of Riyadh. In an interview, he confirmed 
carrying foe checks and depositing them with Al Rajhi Bank but said that they 
wereni for al Qaeda and that he did nothing wrong. 

A Jidda-based charity called foe International Islamic Relief Qrganization, or 
lIRO, arranges for donors to send their donations directly to the Ai Rajhi 
Bank. The iiRO's chairman, Adnan Khalil Basha, says the charity is "absolutely 
apolitical” and has elaborate spending controls to prevent illicit diversions. 

The charity says it works with Al Rajhi Bank ^ply because its fees are low 
and its service is best. 
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However, the U.N. has labeled two of the ilRO’s branches and some of its 
officials as al Qaeda supporters. In 2004, the lIRO soScited donations through 
Ai Rajhi Bank for the Iraqi dty of Faliujah, then largely under the control of 
insurgents and the base of the iate Abu Musab al Zarqawi, who fed a! Qaeda in 
Mesopotamia. The liRO’s workers oversaw construction of a trauma clinic in an 
insurgent-controfied area of Failujah . The U.S. saw the cSnic as a haven for 
insurgent fighters, and Marines destroyed it in November 2004. That was "a big 
tragedy for us," says the IlRO’s chairman. Mr. Basha. 

He denies the charity had any involvement with the Iraqi insiffgency. Charity 
officials complain that the U.S. has produced no evidence of their alleged ties 
to terrorism. 

Two years earlier, federal agents raided the Vir^nia offices of a network of 
charities funded by Sulaiman Al Rajhi thatwwked dosely with die lIRO and 
that - according to Justice Department court filings — prodded funds to 
Palestinian terrorists, No charges have been filed. 

A year after the 9/11 attacks, U.S. authorities began to lament the tack of 
Saudi action in taking down terrorists' financial infrastructure. A November 
2002 CIA report said the Saudi government tias made litHe independent effort 
to uncover terrorist financiers, investigate individual donors, and tighten the 
regulation of Islamic charities,'* largely because of ‘domestic potilical 
considerations." 

The report advised against a noisy confrontation: "A key factor for continued 
successful counterterrorism initiatives with the Saudis, whose society is by 
tradition private, closed, and conservative, will be to ensure that thek 
cooperation with the United States is handled (fiscreetiy and kept as much as 
possible out of the public eye." 

The U.S. began to rethink that approach after an al Qaeda attack in Riyadh in 
May 2003 that killed 26 people, including nine Americans. Deputies from the 
National Security Council, CIA, Treasury and State departments debated a 
proposal for legal and political action against Al Rajhi Bank, induding the 
possibility of covert operations such as interfering with the bank's internal 
operations, according to Bush administration documents and former U.S. 
officials. 

One idea kicked around was "listing m threatening to list" Al Rajhi Bank as a 
supporter of terrorism. Such a listing can be done if recommended by a 
committee representing the Treasury, State and Defense departments and the CIA 
and NSC, and signed by the president. The designation bars U.S. companies from 
doing business with the named entity. A U.S. designation also normally is 
forwarded to the U.N., and if that body puts the name on its own 
terrorist-supporter list, all member states are obliged to freeze the entity’s 
assets. 

Other ideas U.S. officials discussed included enlisting friendly countries to 
step up scrutiny and regulatory action against Ihe AJ Rajhis. The CIA report 
said that "a successful effort against the Al Rajhis would encourage efforts 
against other donors, or at a minimum, vrauld discourage private frjnding of AI 
Qaeda." 

Ultimately, the Bush administration again chose merely to continue privately 
exerting pressure on the Saudis to stiffen Iheir oversight. 


This message originated from the Internet. Its originator may or 
may not be who they claim to be and the information contained in 
the message and any attachments may or may not be accurate. 
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From: CHRISTOPHER LOK/HBUS/HSBC 
Sent; 11/8/2007 9:23:11 AM 

To: BENJAMIN J SARAM/NBD S!P/HBUS/HSBC@HSBC 

CC: BENJAMIN J SARAM/NBD S!P/HBUS/HSBC@HSBC;KWOK YiNG FUNG/NBD 
SIP/HBUS/HSBC@HSBC:ROGER T K SO/HD NBD RNH/HBUS/HSBC@HSBC; 
WING KIN - SG CHAN/CEO SiP/HBUS/HSBC@HSBC 
Subject: Re: ISLAM! BANK BANGLADESH LIMITED 

Ben 


One, (he money is tfiere and we should go for this account 
Two, I will jump in and wear foe GRM hat. 

Three, I wonder where will can you get that much Saudi. Just relymg on what 
you and MKG can pickup in the region is not enough. Even induing London's. 
So how? 

Four, I wouldn’t reiy on Hersel to help you get the business. And he certainly 
cant help on clarifying the link to Alrajhi. I would instead suggest we 
ourselves visit foe client and sell our service directly. 

I believe we should be able to get the KCY sign off. 


Chris 


Benjamin J SARAM/NBD SiP/HBUS/HSBC 
11/08/2007 03:13 AM 


To 

Christopher Lok/HBUS/MSBC@Republic 

CC 

Kwok Ying FUNG/NBD SIP/HBUS/HSBC@HSBC. Roger T K SO/HD NBD 
RNH/HBUS/HSBC@HSBC, 

\Afing Kin - Sg CHAN/CEO SIP/HBUS/HSBC@HSBC, Benjamin J SARAM/NBD 
SIP/HBUS/HSBC@HSBC 
Subject 

Re: ISLAM! BANK BANGLADESH LIMITED 


Some background on the issue; 

According to our colleagues in Dhaka, approximately 60.000 Bangladeshis make 
their way to Saudi Arabia annually to perform the Haj. It is estimated that 
each pilgrim will require approximately US01, 000-3,000 in currency for 
expenses. On foe low side, we're therefore looking at about USD ^ mio of 
currency needs on an annual basis. 
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There is a shortage of SAR in the marftet Most of it is nowsuf^lied by money 
changers and banks who recycle SAR notes that come in from the transient worker 
population working in the Middle East. Pilgrims who cant secure enough SAR 
will cany USD notes with them to Saudi Arabia, where they w9i change them 
into riyals. 

There is therefore an underserved demand here, orte that Isiami Bank is looking 
to capitalize on. Assuming that about half of a8 pflgrims would prefer to 
change SAR in Bangladesh instead of m Saudi Arabia, thafs an annual 
requirement of about SAR112 mio. Assurrwng again that we take a conservative 
margin of 2.5 per miile, our estimated net profit would be approximately USD 
75,000/ year. 

Bangladesh is a relatively small market, but th&e Is potential. Our total 
volume in '06 was USD37.1 mio, gamering us MT1 of approximately USD47,000. 
Comparatively, our volume YTD Oct '07 is USD 46 mio, gamering us NTI of 
approximately USD72,000. We expect the full year's MT1 to be around 75,000, 
representing growth of about 53% year-on-year. We are a monopoly here, and 
margins are decent. 

I understand that Hersel Mehani is quite close to Isiami, and PCM already has 
dealings with the prospect. Would this help in supporting our bid to open the 
account, should we decide to proceed? 


Regards, 

Ben 


Christopher Lok/HBUS/HSBC . 

06 Nov 2007 01 ;2g Mail Size; 6066 

To 

Kwok Ying FUNG/NBD SIP/HBUS/HSBC@HSBC 
cc 

Benjamin J SARAM/NBD SiP/HBUS/HSBC@HSBC. Wing Kin - Sg CHAN/CEO 
SiP/HBUS/HSBC@HSBC, Roger T K SO/HO NK) RNH/HBUS/HSBC@MSBC 
Subject 

Re: ISU^MI BANK BANGLADESH LIMITED 


Our Ref 
Your Ref 


Mr Fung 

First, I'm happy to be the RM if this is an account worth chasing. How much 
money you can expect to make from this name? If this can be answered 
positively then I will ask PCM to check out the connection between me alrajhi 
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connection. I've looked at the Alrajhi Bank profile and found out an identical 
Abdul Aziz Alrajhi (chairman of the papenrefi co. in the tdamic profile) also 
appearing in the alrajhi profile, if this is the same person then we have to 
asssume there’s cross-connection betwen the Alrajhi Bank and Islamic Bank. We 
need clarificafion. 

The name Alrajh has been a name heatedly debated for many years. We terminated 
our trading relationship following 91 1 and only a ye^ ago after London 
Compliance came back telling NYK file group is happy to let us resurrect the 
relationship that we went back. You should check out the >^jhi Bank profile 
- done by Gordon Brown and comprehensive. 

Not saying just because of this connection we won't do busniess. Its just that 
if the revenue is there then we're prepared for a good fight. But before that 
lets get the facts straightened out. 

So come back to me with the expected NTI. Also teB me the entire Bangladesh 
market's worth please. 

Chris 

Kwok Ying FUNG/NBD SIP/HBUS/HSBC wrote on 11/06/2007 11:12:44 PM: 

> Chris 

> 

> The following mails are self-explanatory. Would you consider to be 

> the RM approver of subject PCM-6N shared diertt? 

> Regards, 

> 

> KY 

> Forwarded by Kwok 'ring FUNG/NBD SIP/HBUS/HSBC on 11/07/2007 

>12:00 PM 

> Beth Rsher/HBUS/HSBC 

> 07 Nov 2007 03:07 Mail Size: 15898 

>To 

> 

> Angela CassefI-Bush/HBUS/HSBC@HSBC 

> 

> cc 

> 

> Benjamin J SARAM/NBD SiP/HBUS/HSBC@HSBC, GiBian E 

> BachsteiPi/HBUS/HSBC@HSBC02. Kwok Ying FUNG/NBD SIP/HBUS/HSBC@HSBC 

> 

> Subject 

> 

> Re: Fw: KYC BankNotes Profile is IB Denied for: ISLAMl BANK BANGLADESH LIMITED 

> Our Ref 

> 

> Your Ref 

> 

> Additionally, I had mentioned to Gillian the past relationships with 

> Al Rajhi. In particular, a couple/few years ago. HBUS exited the 

> relationship with Al Rajhi Banking & Investment due to Compliance 

> concerns. (I do not recall all the details). I do see that the 

> relationship was re-activated. Gillian was going to cross-check the 

> Al Rajhi ownership of Islami Bank with our old KYCs for Al Rajhi 
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> Banking & Investment and Ai Rajhi Trading EstabBshment. 

> 

> This is not just an RM issue. This is a KYC due (fiNgence issue. 

> 

> Beth 


> Angela Cassell-Bush/HBUS/HSBC 

> 11/06/2007 01:41 PM 

>To 

> Kwok Ying FUNG/NBD SIP/HBUS/HSBC@HSBC 

> cc 

> Gillian E Bachstein/HBUS/HSBC@HSBC02, Benjamin J SARAM^BD 
>SlP/HBUS/HSBC@HSBC, Beth Fish6^/HBUS/HSBC@HSBC 

> Subject 

> Re: Fw: KYC BankNotes Profile is tB Dented for: ISLAM! BANK BANGLADESH LIMITED 

> Kwok; 

> Unfortunately, the KYC profile fw iSLAMI BANK BANGLADESH LIMITED 

> has been IB denied by Be^ Fisher because the client is not known to 

> CIB. As rt stands, we have not been able to identify the RM 

> Approving person for this relationship. I would suggest that you 

> reach out to Chris Lok to see if he is willing to be the the RM 

> Approver. Once this is confirmed, let me know and I wfll resubmit 

> this tiirough the approval chain. 

> 

> Regards, 

> Angela Cassell-Bush 

> Compliance Officer | HSBC Bank USA 

> 90 Christiana Road New Castle, DE 19720 


» Phone. 302-327-2017 
>Fax. 302-327-2128 
> Email. angela.casselt-bushiSus hsbc.com 


> Kwok Ying FUNG/NBD SiP/HBUS/HSBC 

> 10/24/2007 10:41 PM 

> 

>To 

> 

> Jarrett L Payne/HBUS/HSBC@HSBC, Angela Cassell-Bush/HBUS/HSBC^HSBC 

> 

> cc 
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> Benjamin J SARAM/NBD StP/HBUS/HSBC@HSBC 

> Subject 

> Fw: KYC BankNotes Profile is IB Denied for ISLAMI BANK BANGLADESH LIMITED 

> Dear Jarrett / Angela 

> Our banknote profile was "IB Denied" by Beth as she is not the RM. 

> Could you please update the client prolife with the correct RM? I 

> understand the client profile right now is also nB Denied", kindly 

> advise us once you put the profile back to approval process. Thank you. 

> Best regards. 

> KY 

> — Forwarded by Kwok Ying FUNG/N8D SIP/HBUS/HSBC on 10/25/2007 

> 10:14 AM 

> Beth Fisher/HBUS/HSBC 

> 24 Oct 2007 22:29 Mail Size: 1 908 

>To 

> Kwok Ying FUNG/NBD SIP/HBUS/HSBC@HSBC 

> 

> cc 

> Subject 

KYC BankNotes Profile is IB Denied for: ISLAMI BANK BANGLADESH LIMITED 

> Our Ref 

> Your Ref 

> A BankNote Profile in BANGLADESH for HSBC Office Singapore, has been 

> IB Denied (Reference #20501761). 

> Click on the attachment to link to the BankNote Profile. 
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Occ-Psi -00154139 

From; ANGELA CASSELL-BUSH/HBUS/HSBC 

sent: 11/9/2007 10:57:40 AM 

To: CHRISTOPHER LOK/HBUS/HSBCOHSBC 

CC: BENDAMIN J SARAM/NBD SIP/HBUS/HSBC@HSBC;WING KIN - SG CHAN/CEO 

sip/hbus/hsbc@hsbc; 

GILLIAN E BACHSTEIN/HBUS/HSBC@HSBC02;PSRR®HSBC 
Subject: Re: ISLAMI BANK BANGLADESH LIMITED-Bangl adesh 

Chris, 

In response to your inquiry, please note that there is a connection between 
ISLAMI BANK BANGLADESH LIMITED-Bangl adesh and Al-Rajhi Bank (aka: Al Raijhi 
Banking and Investment corporation). 

Based on the information that we have on file, the Al- Rajhi family has been 
associated with islami Bank Bangladesh Limited, since its inception. They have 
at least 37% direct ownership within ISLAMI bank BANGLADESH LIMITED through 
their ownership within the following companies; Arabsas Travel & Tourist 
Agency, 9.999%, Danab Yousif Abdullah Abdul Aziz Al-Rajhi, 9.936%; Al-Rajhi 
company for industry & Trade, 9.94%; Abdullah Abdul Aziz Al-Rajhi, 7.58% 

This same family has major controlling interest within Al-Rajhi bank (aka Al 
Raijhi Banking and investment Corporation). 

Hope this helps. Please let me know if this information is satisfactory. 


Regards , 

Angela cassell-Bush 

Compliance officer j HSBC Bank USA 

90 Christiana Road New Castle, DE 19720 


Phone. 302-327-2017 
Fax. 302-327-2128 

Email . angela.cassell -bush®us. hsbc.com 


Christopher Lok/HBUS/HSBC 
11/08/2007 10:17 AM 

TO 

Kwok Ying FUNG/NBO SIP/HBUS/HSBC@HSBC 
CC 

Benjamin : saram/nbo sip/hbus/hsbc®hsbc, wing Kin - sg chan/ceo 
SIP/HBUS/HSBC®HSBC, Angela Cassell -Bush/HBUS/HSBC®HSBC, Gillian E 
Bachstei n/HBUS/HSBC®HSBC02 
subject 

ISLAMI BANK BANGLADESH LIMITED 


KY 

Further to my email exchange with Ben, I like to confirm that I'll be happy to 
be the grm of this banknotes prospect/PCM client. However I would like to ask 
Page 1 

I Permanent Subcommittee on InvestigatiorLS 
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Occ-Psi -00154139 

Gillian and company to find out the possible link between this name and the 
Alrajhi Bank (an approved name for Banknotes business). 

Beth's statement about Alrajhi Trading Est is irrelevant as thats name we long 
ago taken out of our profile. That name is not related to the Alrajhi Bank. 

I've looked at the Alrajhi Bank profile and noted a chap by the same name who 
owns the papermill (islamic). 

Chris 


Kwok Ying FUNG/NBD 5IP/HBUS/HSBC 
11/06/2007 11:12 PM 

To 

Christopher Lok/HBUS/HSBC@HSBC 
cc 

wing Kin - sg chan/ceo sip/hbus/hsbc(3hsbc, Benjamin 2 saram/nbd 

SIP/HBU5/HSBC@HSBC 

Subject 

ISLAMI bank BANGLADESH LIMITED 


Chris 

The following mails are self-explanatory, would you consider to be the RM 
approver of subject PCM-BN shared client? 

Regards . 


Forwarded by Kwok Ying FUNG/NBD SIP/HBUS/HSBC on 11/07/2007 12:00 PM 

Beth Fisher/HBUS/HSBC 

07 NOV 2007 03:07 Mail Size: 15898 

TO 

Angel a Cassel 1 -Bush/HBUS/HSBC®HSBC 
cc 

Benjamin 2 saram/nbo SIP/hbus/hsbc^SBC, Gillian E 
Bachstei n/HBUS/HSBC^HSBC02 . 

Kwok Ying FUNG/NBD SIP/HBUS/HSBC^HSBC 
Subject 

Re: Fw: KYC Banknotes Profile is IB Denied for: ISLAMI bank BANGLADESH 

LIMITED 


Our Ref 
Your Ref 
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Additionally, I had mentioned to Gillian the past relationships with Al Raihi . 
in particular, a couple/few years ago, HBUS exited the relationship with Al 
Rajhi Banking & investment due to Compliance concerns, (i do not recall all 
the details), i do see that the relationship was re-activated. Gillian was 
going to cross-check the Al Rajhi ownership of islami Bank with our old KYCs 
for Al Rajhi Banking & Investment and Al Rajhi Trading Establishment. 

This is not just an RM issue. This is a KYC due diligence issue. 

Beth 


Angela Cassell-Bush/HBUS/HSBC 
11/06/2007 01:41 PM 

To 

Kwok Ying FUNG/NBD SIP/HBUS/HSBC@HSBC 
cc 

Gillian E Bachstein/HBUS/HSBC@HSBC02, Benjamin J SARAM/nbd 
sip/hbus/hsbc®hsbc , 

Beth Fisher/HBUS/HSBCdHSBC 
Subject 

Re: Fw: KYC BankNotes Profile is IB Denied for: islami bank Bangladesh 

LIMITED 


Kwok; 

unfortunately, the KYC profile for islami bank Bangladesh limited has been ib 
denied by Beth Fisher because the client is not known to CIB. As it stands, we 
have not been able to identify the RM Approving person for this relationship, I 
would suggest that you reach out to Chris Lok to see if he is willinp to be the 
the RM Approver, once this is confirmed, let me know and I will resubmit this 
through the approval chain. 

Regards, 

Angela cassell-Bush 

Compliance officer I HSBC Bank USA 

90 Christiana Road New castle, de 19720 


Phone. 302-327-2017 
Fax. 302-327-2128 

Emai 1 . angel a. cassel 1 -bushOus . hsbc . com 


Kwok Ying FUNG/NBD SIP/HBUS/HSBC 
10/24/2007 10:41 PM 
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TO 

:arrett L Payne/HBU5/HSBC@HSBC, Angela Cassell -Bush/HBUS/HSBCOHSBC 
cc 

Benjamin 3 SARAM/NBD SIP/HBUS/HSBC@HSBC 
Subject 

Fw: KYC BankNotes profile is IB Denied for: ISLAMI BANK Bangladesh limited 


Dear Jarrett / Angela 

Our banknote profile was “IB Denied" by Beth as she is not the RM. Could you 
please update the client profile with the correct rm? I understand the client 
profile right now is also "iB Denied", kindly advise us once you put the 
profile back to approval process. Thank you. 

Best regards. 

KY 


Forwarded by Kwok Ying FUNG/NBD SIP/hbus/hsbc on 10/25/2007 10:14 AM 

Beth Fisher/HBUS/HSBC 

24 Oct 2007 22:29 Mail Size: 1908 

TO 

Kwok Ying FUNG/NBD SIP/HBUS/HSBCeHSBC 

cc 

Subject 

KYC Banknotes profile is 18 Denied for; ISLAMI BANK BANGLADESH LIMITED 


our Ref 
Your Ref 

A Banknote profile in Bangladesh for hsbc office Singapore, has been ib Denied 
(Reference #20501761). 

click on the attachment to link to the BankNote Profile. 
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^ , HSBC-BNI^E 0050761.txt 

From: DANIEL JACK/HBUS/HSBC 
sent: 8/18/2009 12:44:40 PM 

To: CHRISTOPHER LOK/HBUS/HSBC®^S8C02®HS8C;Hatf WEI ONG/LGA SGH/HBAP/HSBC@HS8C03 

3AMES/NBD SIP/HBUS/HSBC@HSBC03.;G1LL1AN E 

VALERIE E COLE-HW)SON/HSUS^HSBC@HSBC02 

subject: edd Report of F1 nd1 n^s : IHllBPfcank. Ltd In Bangladesh Cbn-sp & PCM) 

Chris, 


government-owned 


I agree that we expect breaches in a large bank. But this is 
in a high risk country with a PEP and reputational risk due i 
Their KYC profile documents various allegations of fraud, internal control 
weaknesses, and the FBI investigation into terrorist financing (section i - 
General Consents) and the EDO R OF has m ore recen t negat ive information. Also, 
as noted, below, the chairman of VBlPBank Ltd, ■||||■■■■i■|■■■sa 



PSRR is reviewing this client and should reply soon with their analysis & 
recommendation from PCM. . . 


How Wei - As LCO in Singapore, please review the JCYC profile, EDO report, and 
e-mails below. Then let us know if you recommend SCC classification (for PEP 
and/or reputational risk) for this PCM and Banknote-Si ngapore client. 


k Bank Limited 


in BANGLADESH 


KYC profile — > 


EDD ROF: 


Thanks and regards, 

Daniel Jack 

Vice President - Compliance officer, gtb 
HSBC Bank USA, NA 

452 Fifth Avenue, 7th floor, New York, MY 10018 


Phone. 212-525-8686 

Email. danlel, jackSus.hsbc.com 


Christopher Lok/HBUS/HSao3HSSC02 
08/18/2009 01:08 PM 


Daniel Jack/HBUS/HSBCSHSBCAMERICAS 
cc 

Denis e O'brien/HBUS/HSBC@HSBC02, George james/nbd sip/H8U5/hsbc®hsbc 03, 
Gillian E Bachste1n/HBUS/HSBcaHSBC02, Valerie £ CDle-Hudson/HBUS/HSBC©HSBC02 
subject 

Re; EDO Report of Findings: MHPSank Ltd in Bangladesh (bn-sp & PCM) 
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Dan 


HSBC-BNI_E 00S0761.txt 


a ^^'■96 bank hence malfeasance is 

sJSSuld be classified/ ^ numerous breaches the bank 

■■iPlllplBank has a recent case of a bank officer in the private bankinq 
Duspiess^^tt^^^t^ing stolen KKOlOO million from the bank, should we . 
then classify milllllUPmBank, a 62% sub of HSBC, an SCC7 


Ch ri s 


(. 


Daniel Jack/H8US/HSBC 
08/18/2009 ai;45 AM 


TO 

Gillian E Bachstein/Haus/HSBC®HSBC02, Christopher Lok/HBUS/HSBCSHS0CO2 

Denis E o'brien/HBUS/HS8C@HSBC02 

Subject . 

EDD Report of Findings: Ltd in Bangladesh Cbn-sp & PCM) 


Gillian / Chris, 

Do you agree with see classification for this bn & pcm shared client? 


Thanks and regards. 


Daniel Jack 

vice President - Compliance Officer, GTB 
HSBC Bank USA, NA 

4S2 Fifth Avenue, 7th floor, New York, NY 10018 


Phone. 212-S25-8686 

Bnai 1 . dani el . j ackOus . hsbc . com 

— — Fonyarded by Daniel Jack/HBUS/HSBC on 08/18/2009 11:41 AM 


Hersel Mehani/HBUS/HSBC 
08/17/2009 Us 50 AM 


TO 


Daniel 3ack/HBUS/HSBC0HSBCO2 
cc 

. Anthony Julian/HBUS/HSBC®HS6C02, Christopher Lok/HBUS/HSBC®HSBC02, Denis e 
0 bnen/HBus/HSBC®HS8C02, George james/nbo sip/hbus/hsbc®hsbc 03, Gillian E 
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BachsteTn/HBUS/HSBC®HSBC02, Jacob X Ho«seknecht/HBUS/HSBC©HSBC02, Roaer T K 
SO/HD NBD RNH/H6US/HS8C(3HSBC03, Valerie E Cole-Hudson/HBUS/HSBC0HSBCO2, Wing 
KTn - sg CHAN/CEO SIP/HBU5/HSBC@HSBC03 • « 

subject — 

Re: EDO Report of Findings; HHBsank Ltd in Bangladesh (bn-sp & PCM) 


Daniel 

Many thanks for your updated information, 

I will support see classification for 6 month to allow the local grm and rm 
to do a full review of subject bank Sr. ngts and secure that internal controls 
are in place. 

^ you know the bank being the Govt owned will always faces such 

issues at a lower level of bank management's. 

I am aware that the Sr Managenent and senior officer are screened and 
officially chosen by the board of the centra! bank and from past experience 
they have chosen honest and professional Bankers. However they will always 
have exposure to some officers who will abuse their power and take advantage 
of the bureaucratic system of the bank. 

Overall I am comfortable with the relationship we presently have on the PCM and 
will support retaining this account 

Thanks and regards, 

Hersel Mehani 

Senior vice President | HSBC Bank USA M.A. 

Global Payments and cash Management 

452 Fifth Avenue, Floor 21, New York MY 10018. USA 


Phone. 
Fax. 
Mobile. 
Emai 1 . 
Internet. 


+1-212-525-6239 

+^ 1 ^ 2^699 

nerssMnehwn^s . hsbe. com 
HSBC Global Payments and Cash f>bnagement 
HSBC Global Site 


Daniel Jack/HBUS/HSBC 
17/08/2009 11:29 AM 

To 

Valerie £ Cole-Hudson/HBUS/HSBa5HS8C02-, Wing Kin - Sg CHAN/CEO 
SIP/H8U5/HSBCOHSBC03 
cc 

Gillian E Bachstein/HBUS/HS8C@HSBC02, Roger T K so/hd nbd 
RNH/HBUS/HS8C(3HSBC03 , 

Christopher Lok/HBUS/HSBO5HSSC02, Anthony 3ul1an/H8US/HSBC©H5BC02, Hersel 
Mehan1/H8US/HS8C@Hsec02, oenis e o’brien/HBUS/HSBC®HSBC02, Jacob x 
HOUSeknecht/HSUS/HS8C0H56C02, George JAMES/NBO SIP/HBU5/H5BC$H5BC03 
subject 

EDD Report of Findings: ^BBiBank Ltd in Bangladesh (BN-SP & PCM) 
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Valerie / WK, 


we will need a response from the client In Bangladesh and the business (bn/PCM, 
etc.) regarding the negative information identified in this EDO rof. This 
IS a PCM and Banknote-singapore shared client, so you may vfant to collaborate 
With each other and the RM & Sales Manager on this - and determine/confirm 
whether you want to maintain them as a client in each of your respective 
businesses. Resolution of the issues and risk mitigants would need to be 
well-documented. 


And we need to consider see classification due to reputational risk. 


\ Bank Limited 


KYC > 


Thanks and regards. 


Daniel lack 

vice President - Compliance Officer, GTB 
HSBC Bank USA, NA 

452 Fifth Avenue, 7th floor, New York, NY 10018 


Phone. 212-525-8686 

Email . daniel.jack8us.hsbc.com 

-- — Forwarded by Daniel 3ack/HBUS/HSBC on 08/17/2009 11:15 AM - 
FIG HBUS8HSBC03 

Sent by: padma M Meesala8HSBC03 
08/17/2009 05:56 AM 

TO 

Daniel 3ack/HBUS/HSBC@HSBC02 

cc 

lacob X Houseknecht/HBUs/HSBC8HSBC02, Jackie s k quah/nbd 
SIP/HBUS/HSBC8HSBC03 , 

FIG HBUS@HSBC02 
Subject 

Report of Findings; ^^^psank Ltd in Bangladesh; FIU 


Please find attached Report of Findings onp||H|Bank Limited. 

* Please note that for your convenience, -space for compliance Officer and/or 
Business unit comments has been reserved at the bottom of this report. 

[attachment mH^Bank- Final-doc. zip'* deleted by Hersel Hehani/HBUS/HSBC] 

Please feel free to contact Jessica oubensky (212-5255746) if you have any 
queries. 
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Daniel :ack 
13 Mar 2009 22:09 


To ; FIG H8US0HSBCO2 

cc: Jacob x Houseknecht/HBUS/HSBC@HSBcQ2 
Jackie S K QUAH/N BD Sie/ HBOS/ HSBS3 HSBCQ3 
Subject: EDO for Bankfl01n Bangladesh 

FIG, . 


Please provide us with an updated edd rof for this PCM and Banknote 
client in Bangladesh. The prior ROF is dated 19-Jun-06. 


I have ris k scored this request to be 31 now, due t o the recent corr uption 
convictionJ||B||||||||^H|B|||aHI|||B|^M|||Mir^^ the 

bank's 

einbezzlement by 3 bank officials in 2006], 


Refer to attached form and ale below. 


'attachment “eod rof for'IjMIMBank Mi Bangladesh (l3*Har-og) .xls.zip" 
leleted by Hersel Mehani/HBUS/HSBC] 


Thanks and regards, 

Daniel Jack 

Vice President - Compliance officer, GTB 
HSBC Bank USA, na 

452 Fifth Avenue, 7th floor, New York, NY 10018 


Phone. 212-525-8686 

Email. daniel.jackSus. hsbc.com 

__ — Forwarded by Daniel Jack/HBUS/HSBC on 03/1372609 12:25 PM 

Jacob X Houseknecht/HBUS/HSBC 
03/13/2009 11:26 AM 


To 

Daniel Jack/HBUS/HSBC@HSBC02 
cc 



Good morning, we are in the process of the annual review 
located in Bangladesh. I have attached the rof request form (score 25J 
, your review. 

lattachment 'M^^^HRtank Limited. xls" deleted by Hersel Mehani/HBOS/HSBC] 


I have also included the results from an RAO search conducted on 3/12/2009. 
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The bank IS listed as a PEP because it is owned by the government. There was 
information found on our internal database that seems to have already been 
addressed previousT^ntheKY^in General consnents) . The last listing is 
for the chairman, S||[||||||H who is listed as a pep, however he no 

longer holds any or tne positions listed. It seems to me that no further 
action needs to be taken on these items, however I wanted to get your opinion 
on the matter. 



since this information is not directly related to aml, is it something i should 
still pursue from the grm to get a response for? if so, what types of 
questions would be relevant to. this situation. Your help and guidance is much 
appreciated. 

Thank you, 


Jake Houseknecht 
PSRR 

HSBC Bank USA, N.A. 

90 Christiana Road 
New Castle, de 19720 
C302) 327-2520 

Jacob X Houseknecht/HBUS/HSBC 

Forwarded by Jacob X Houseknecht/HBUS/HSBC on 03/13/2009 11:04 AH 

RAU HBUS 

Sent by: Benjamin X Ciurdar 
03/12/2009 04:54 PM 


TO 

Jacob X Houseknecht/HBUS/HSBC@HSBC02 
cc 

RAU HBUS@HSBC02, ICRO ALES@HSBC02 
Sub ject ___ 

Re: (Bangladesh) 
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HSBC-BNI_E 0006344.txt 

From: Christopher lok/hbus/hsbc 

Sent: 9/2/2005 10:28:47 AM 

To: SHARYN ?4ALWE/HBUS/HSBC@HSBCAMERICAS 

cc: 

Subject: fw: Report of Findings -| 
sharyn 


very fed up with these people. . 

Forwarded by Christopher Lok/HBUS/HSBC on 09/02/2005 11:31 AM 


Christopher Lok/HBUS/HSBC 
09/02/2005 11:20 AM 


TO 

Wing Kin - Hk CH/y^/NBD RNH/HBUS/HSBC, Daniel lack/HBUS/HSBC 

cc 

Betty F S NG/NBD RNH/HBUS/HSBC@HSBC. BruCfi LI/RNH/HBUS/HSBC@HSBC, Gary C H 
YEUNG/SVP NBD RNH/HBUS/HSBC@HSBC, Roger T K SO/HD NBD RNH/HBUS/HSBC@HSBC, Tom K 
LAU/VP NBD RNH/HBUS/HSB<^5BC, Johtl S GUBERT/HGHQ/HSBC@HSBC, Lynda D 
cas S el 1 /H8U5/HSBC@HSBC 
Subject 

Re: Fw: Report of Findings - 


I disagree whole-heartedly wit^^lfi's recommendation. FIG displays ignorance 
to the b anking h ierachv or theHPbanks. As saiid many times, all state owned 
banks inH||il(pre appointed by the Govt and this Is not the ground to think 
that the person is a PEP. 

Yes , corrupti on can be rampant in this banl^^Uf not unique toBHA 

iMIllilillH Without exception a11 ^^Bstate owned banks have been and 

will continued to be plagued by misuse of state’s money, corruption and 
delinquent loans. Th ats why alone t his year the state has injected over^^^B 
billion into the IBBI banks. This is all public knowledge. 

Bank which HSBC has a 19X stake is the iftlB^tate Owned 

Bank and I'm sure HSbc must have found impropriety. Shall we then classify 
this name as an SCC? 

My point is HBUS being a US entity cannot simply use the excuse that because of 
US regulators' attention and then say that ’I want to classify this name as an 
see because of the adverse reputation this institution has’. 

If somebody in HSBC wants to take that view it will be at the group level. 
Proper consultation must be held at the Group compliance Level with the senior 
AYorntiveL-of-j-he S ank to examine this question : Are the State owned Banks in 
0 r 

3ohn: Could you please discuss this with lain and get his opinion. I want to 
elevate this to a much higher level now as I want a quick resolution rather 
than continue engaging myself in these unnecessary discussions. 


Chris 


c 
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wing Kln - Hk chan/nbd RNH/HBUS/Hsac 
09/01/2005 09:21 PM 


TO 

Christopher Lok/HBUS/HSBC0HSBC, Roger T K so/hd nbd rnh/hbus/hsbc@hsbc, Gary 

c 

H YEUNG/SVP NBD RNH/HBUS/HSBC@HSBC, Torn K LAU/VP NBD RNH/HBUS/HSBC@HSBC, Sruce 
LI/ RNH/H BUS/HS B C^SBC 
cc 

Betty F S NG/NBO RNH/HBUS/HSBC0HSBC 
Subject . 

Fw: Report of Findings - VHHHHHIBHHlBank - fig 


For your ini^rmation. 

Best regards 

WK 


Forwarded by wing Kin - Hk CHAN/NBD RNH/hbUS/HSBC on 09/02/2005 09:15 AM 


Daniel Jack/HBUS/HSBC 
HBUS 

09/02/2005 05:02 AM 
Mail Size: 37403 

TO 

wing Kin - Hk CHAN/NBD RNH/HBUS/HSBC®HSBC 
CC 


subject 

Fw: Report of Findings 
Our Ref 


Bank - FIG 


Your Ref 


c 


FYI - FIG recommends this BN-HK client be an see, so PCM will follow-up... 


— — — — . forwarded by Daniel lack/HBUS/HSBC on 09/01/2005 05:02 

PM — 

FIG HBUS an 01 Sep 2005 1€: 30 

Note 

01 Sep 2005 16:30 


From: FIG HBUS Tel: 

Title; Location: 

WorkGroup: Mail Size: 

sent by: Michael Ellis 


2B892 
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, HSBC-BNI_E 0006344.txt 

To; Shannon M Jones/HBUS/HSBC0HSBC 

cc: Gi'nny Tsge1/HBUS/HS8C@HS8C 
Rhonda Lee-Thomas/HBUS/HSBC^SBC 
Andree GaHndo/HBUS/HSBC@HSBC 
Paul DiBenedetto/HBUS/HSBCSHSBC 
Nanayo Ryan/H8US/HSBC@HSBC 
Pisrre Nasser/HBUS/HSBC©^SBC 
George Tsugpanes/HBUS/HSBC®ISBC 
Alan T KetlBy/HBUS/HSBC®HSBC 
Daniel Jaclc/HBUS/HSBC@HSBC 
FIG HBUS^HSBC 

Kristen o'connell/HBUs/hSBCSHSBC^^^^^^^^^—^ 
subject; Report of Findings - Bank - FIG 


REMARJCS/RECWMENDATIONS 

Shannon, 

AS you will read in the below Report of Findings for (■■■■■■■■■■iBank, 
the bank's senior management and employees have been involved in numerous 
significant instances of corruption, fraud, and embezzlement over the past few 
vears^HahHoh^ of such instances (detailed in the reports below) involving 
^■■■■■IHli Bank's management include the following; 


Redacted by the 

Permanent Subcommittee on Investigations | 

- -■ -- - i 


Also, ■|■■■■■■B■■|Bank should be considered for special category of 
client (SCC) status due to its current President being categorized as a 
Politically Exposed Person (PEP) on world-check (details below). 

For the above reasons, and the additional instances of financial crim e 
involving, the Bank's employees, as detailed below, we recommend that ■lll|0 ■ 
Bank's account relationships with hsbc be closely monitored. The 
number of instances of corruption, fraud and embezzlement at this institution 
appears high when compared to other institutions that we have reviewed, and nay 
be indicative of lax controls at the Bank. This is especially of co ncern given 
the fact that many of these cases have involved ■■^■■■■■■B Bank's 
management and top executives. 

Much of the inf ormation pertaining to the instances of corruption, fraud and 
embezzlement at ■ll■■■(■■l■|■■ Bank was obtained subsequent to our previous 
Report of Findings in CNctober 2003. Therefore, we recommend that you consider 
these findings and discuss them vrith your Local Compliance offfcer ClcO). 

sincerely, 

Page 3 
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Know Your Customer Profile 

HSBC Bank USA. N.A. 

Ve/s/an 7.0 


Reference; 


Crient Pro^e ,^^proval Status ; CO Denied 


Countiy Risk Status; High Risk 

High Risk Client Tj/pe: Special Category of Clie?it 


Needs Re-Ap^val 


Client Name; AL RAJHI BANKING & INVESTMENT CORP 
Country; SAUDI ARABIA 


* Changes to tt>©se fields on "Approved" Profffes require Re-approval. 


i. Genera! Information 


Oi«nt Nftma 

•M. RAJHi B-ANKING & iNVESIMENT CORP 

v.'.::,cis,tf5is8a)ant:(:tf Global Managemenf- 

i- '{PCM m Daiawara)? 

. /:Ye$;.# Nd'-;; 

Is this a C3ient.sfC(irpofat«and.b\*w<Aonai,g[Wiang ^(CIB)? 

♦ •Yes 0 No ■ 

ify»9 CIS industry 

Bilking 

•CInmtAcbvityStatus 

Deacavated 

<i ‘ XDeacevationData 

10/14/2010 

sDaaetrvationKBasnn 

t > 5 ‘ Commanis 

'' . -i ^ 

0;Kyc/Coti?iliafice Reason 
♦•Bikmess Reason • 

06thC{ 

Oua to imrr.imsm closure of Biinknoie business ami lack of reoeni 
rlealtnas 

s. .t|;C!i*ntCati»gory 

. ^ 'i‘ a"' ‘ 

Oodm^c^inano^ Inslitubon 
♦ FckeigrhPWanoal Insvtutioo . . ••• 

O'lhvesfrnarS Advisor or Ftidd :v 

OCorpasteDiem 

O sole ^iWnetwor Partnershw-- 

.^E^snk r i •:v-0^on:Banti 

. V 'Legal amity 

• CAi':; • ■ ^tv 

0;Parent;:;'A-.O S'ranchr;\-.-.rv Subsidiary,: 

Is tiB Cl ant t.Camral Bank?. 
- V ,, 

Qyes ^.No • 

Ciianta^SpaeiarCalagoryof Oiamr?' 

{Rafarta Group Policy GCL 000074 on SCCs) 

♦-.Yes-O No--^ 


1 -PEPowrtsdormaisge.dfPnliticaHv E:xposed Person has 
direa” inlkience) 

Vfriat'inferm'stloit'soureawas used^o'aKagorH^ftis.Chenl a%^an,\ 
\ /v'«^C{aa Convlianeal? 

.\ML Compirtrtts New roik lecomntendau.on based on ICRO 
recofts. 

•V TowhonvisthisQi#nlcannaeWd4ndhow..{ra}ationsNp)?, 

. • , . {indssaia nam« of PoIitte8ll^,&i^ds«d:P8faqn.'.{rp^=r3.or ettia'f 
. V see. ownarship.or managamantrola wittijaam; and outtida. 

' ' .JHtfarasl/position/Wla 1 

DirecKSf. AbCuUab Aijdul Al Rajhi, is a membei in ihe Northern 
Borders Provincial Courtol nn Saudi Arabia. 

, ; - . Has ths aierifa nama and loestioabaatt backed agamst : 
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< ' ji - t-iUii ( •' "r i-ik. Howevfs !his bank had a 

lationship with Banknotss, Lotirto!i u 
liB ha3re{3>ion.ships with HSBC in th 

mg and itaiy Approved as a Lcjncior 

Deosn^pj 2005 af.er Tf issues were 
Cofnfrfianca New York. 

IS Ba,r*. in Maiaysia. Have obiained 
liiPiO'’ 0 V''* " Kiiwni jIStou^ no svidsnca found tha; this 


lai'.' : i'\‘-3nc3'ierre’-it.Business Information 



■» v " 1 




d-:: . ■ . -■ . Cl 

c *• .M Gfrimai 

Chairman & Mana^ng Direcaor 

CEO 

Depu^’CEO 

COO 

General Manaaer, Group CFO 


5.777 


SAUD! ARABIA 

. - .V. ^.irsyA^sn.-' *' ri.i-tf.'.i 4ia^ 

1S88 

! V , WhiTitOlaSp^- r ;;*SS)S 

2 

' HowtmBnytireneh«»r‘»l***<lc«%pli«nihjj(i5^ 

6 cemral oflices. 694 branches 

^ Whare ara tt • ^ nr/^as 

Saudi Arabia (subsicJ has 1 8 in Malaysia) 


Bankinq 

. ^ For Fora.gn FtnanMl Ins* i.l*m onty 

indieatanaiurt'of Qiant's^snasl >>a aeiMfhB»aro^ 

Private Banking, Commciciai/Reiail Banking, Other 

Please describe: islainic Banking (Sharia) 

- . « XU'S?™™, 

General public 

t -* a c.piefaeNjCL*jfna« 

Saudi Arabia 


n/a 

Oo any of Radiant s eustomars rap aaar*a Mrnifnatti ScrfjtB 
“ <r&ibort»a?a? 

-O'-Yes #No'' 


The Al-Hajhi Famity 

Banking 

USD 22.5 Baiion 

Bankir^ 

Various Senior Positions held 

AJ SajW Banking & Investment 
^'lokart-^a Suildir.o. Oleya St. 11411. Riysd 

Indicate rapo(!inj aganey or aupaivitoiy /-a ^ j*a‘> iy,K.dy ,ia»)^iL 
5'- V -A3Sa?t^theeogrtfvfiaa)Mopar9tiofi> 

MA - SsucS Arabian Monetary Agency 

"Ustkesnsatypax 

.•.YB»reC!a«iane8^ V’ ’.V ..•Coumryoflaauaneai, 

ISLAMIC BANKING LICENSE 

38 SAUDI ARABIA 



" ‘ laCiiant'aShareholdara’&|ui(y25MiRtonUSDormbra7 

■ d;. ■ ' -t-. 

♦.Yes.tA^-v- 

:‘V.* 
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♦,yes;0‘.Np:' 


'-?es,#'Nb-- 



rf fta,Cli»nt_or BffiiiatM h«v».oth«r Acmunta.w 

Y.'.'lotionstiips vWiti HSBC in^ UK. France. Hong Kong s-nd incia. 


l!L Referral Information 


Hotv«as:»iti Cl«nt ntrodi^Mdlo the bank.-? 

: . 11. . ,:, 1, r .,iK3 isistionship with Republic since Iff/Os. 




^ • No ->; 


# No:>: 

. -.di-’VIiitjt-liirfi. ■ 

i: iiii. .1 m Md Hussain 

c. ;:™'ui^-rs;is!SE332!!$>ST::Kz_ 



■■...■".I i ■'■■■ i.jain 


Lok 


!V. Visitation 

General Visitation: 

t WBS8Cli»nt_^e,VUitpsifofTr«(l.?| ^Yes No 


Vtsi^tion Details: 



/lS.s:.'-':.Mo»t Recent StleiVisftation;.-- 



01.'20/2010 

11/14/2009 

'sf^^is3s^:^s:;:sss 

H.nilhem Katerp, Director HG . 

David HlKiq 


M«A Strategy 

Banknotes 

'i- 

• Y«. O No , 

• Yes No 

rv.Sf^sa^-faCTSi 

toiffefefSESTHaSijra 

Nikt^&s FoWas, Head of Strategy 

Ahnied Banhazat. Senior De.aler 


V, Purpose/Nature of Activity 



•i'.;.: Expected Freouency'.^^^i 

S 

1 

i 

1 


ACH (Clearing House) 


Mertey Mertiet 


ARP (Account Reconciliation) 


Seeuritias Landing 


Asset Manegemem 


Sweps 


Cheek Cctlectian (Cash Letter) 


Sweep Overnight Investment 


Ctiecks/Demand Drafts 


rime Deposits 


Caearing (Funds Transfer) 


rrading • Banknotes " 

See Banknotes Activity Section 

Comrnercsal Line 


Trading • Bonds 


Commitments 


Trading - Deiivatives 


Control Disbursement 


Trading • Emerging Markets 


Current Account 


Trading - Equities 


Denvatfves 


Trading - Rxed Irrcome 
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FaatoriDg 


Trsding - Foreign Ex^angs 


Forward Rata .Agreamsnts 


Fracfing - RAures 


GlobalizaEiofs 


Trading - Seet^des (Treasury) 


Guarantees (CD e^sat, 
Deposits) 


TradingA^ndstg - Fysel8us®as9 
Metals 


Infra Day EStposufs Limit 


^aro Balsnee Account 


Lstters of Credit J Bankers 
Acfieptanees 




Loans 




Lockbox j 

C^sf: 



Refer to CNent's file for anticipated volume of activity. 


[■“ Mane^n9f0'Va^.a -aidnt'*Profi(abiilyforH$B<r 

(Arn)j>ihzert rsi'anue •Bctusichntiopittad.jn USPnquivaisr^:: 

I ■ • A _ Tbti. ifaqui'redforaliPCM di^^i 

;aoljvi^^t^lHor>g Kong, L(5ndon 


jlKjieart hSBC <rf^«yhsr(i Renknout 


VI. Financial Summary 


■:Y\’ i.;> AHfinanei8t d8t»rBport^,b.8tow,^^^^®^,^^uh^#[^^«:geim^rison purposes globally, 

- < < (e g dollars ). 

- 's 'll 

12/31/2009 

■' Cur(afWK-t,l-pMi): 

SAUDI RIY/y. 

Exchange r^ (pj|i;U^SD) 

3.750210 

• .Diwonsnation. 

Actual 

. Alien 

45,525,378.312 

r ' Sh*r8hp^icJ.Eflt*i(^ 

7.663,8^,560 

^Nathcemef 

1,804,493,082 


VII. Documentation Checklist 


■■ Ust of Authorized Stgnatof ws and for Ctuporaia^WhAO]^^ 

•-YeO.Mo. 

Current Annual Report (Form 10-K) or Finaneia|<8tt^Mm^ 

res'OiNo'::/.: 

a'vri,-»'i'Y ,1ndical#.8«nking Reference* a •! nih p (bst.i)) 

%«m4rcri?*,^p^;;r,Yv,<^',-.TN8iheVC<5unfry'i/l3«e\Vnd 

CiQM KYC. Franca. 31 July 2006 

CIBM KVC. UAE, 19 November 2007 

banking. refTence'doWfrrieinletioffjgCI^Mg^ffjK 

';'i?^^f^H;d'wf*?jL'•i^!^.vv'(r<>f'Clieflts located IrtHioft'Ri^ 

. • .Yea-.ONo.,:/ 

Bank Client and Not a Central Bank 

? ^ Copy of Banking License in Oient fila 7 

♦ Yes Y f No 

. 

Foreran Bank Client and Not a Central Bank 

' !•. is a USA FSttnet^ CerfafieatioR on file ? 

1. ‘ 'V- »- JT 

^ Yes No , 

.. Ifves 'daie'reeaiyedbvHSSC: 

09;14;?000 

c-.Ifyea.daw-msi*l- recent C«rtif)c«t»nor.RejCertrfi«»iion.was 
>, -1 ixeeuted/ ignedbyoistomer? 

' (required by US Treasury every 3 years) 

05/12/'2009 
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Know YourCustwner: AL RAJHI BANKING & INVESTMENT CORP 


VIII. Summary of Reasons 


Ne have leviewed the InfcMmatlon provided above In the context erf the bank 's "Know Your Customer" 
icrficy and "due dfiigence" requirements and crReiia . Based on the foUowIng summary of reasorrs , we feel 
omfortable recommending this cBentfor bankltrg business . 


hifpgg> - Explain tha purpose of thi$ account I C»«n> wlationihfe and tufwwnn the antieiD«t»d activitv : 

banknotes Trading - Please refer to the KVC Banknote Profle for a descriptian far the reason for dealing in banknote transactions. 


e found on OFAC. World-Check 

EDD ROF dated 10 Marcft 2010 contained some negative news articles conceming the bartk's alleged refusal to cooperate with a US 
jovemment Supoena in relation to its "investigation into latorist lirtancing'’. The bank has launcited counter^rocsedings in the US 
i:ou(ts in resportse to the US Governments stance. This case is cufrendy pending an outcome and the US Government has yet to take 
my steps to make this a designated en^. London Banknotes has (fiscussed these news articles with the GRM, who is comfe^bie 
'with contkiuing tNs relenionship. Until further dev^opmerris London Banknotes is comfortable id continue the existing relationship, 
Whilst monitoring the situation as is warranted for this SCC Type4cBent. 


EDO ROF request made 1 3th January 2009. CompKance says not teqt^d from NY. Ovm due diligence performed and no issues 
ound. No references were found to the history involving court cases 

EDD ROF 4th December 2007: 

Despite the overall reputation of the AkRajhi family in Saudi Arabia, there have been rtumerous allegations of impropriety in the 
lusiness dealings of Al-Rajhi and their group of companies, specifically in Europe and Ihe United States. The controversy primarily 
'tenters around the patriarch, Sutaiman Bin Abdulaziz AI-RajNartd somewhat directly and mdirectly to Al-Rajhi Bank, of which he is 
bottt Chairman and Managing Director. These allegations allude to tax evasion, money laur^dering and terrorist ftnancing. Though 
severe in nature, none of tttese allegations have yet resuttedinany convictians or sanctioned by either U.S. or foreign governments, 
p his bar^ is already rated an SCC-1 due to the owrteiship and conbol by Abdiilah Abdti Al Rajhi. The KYC Customer profile indicates 
e various aitegations against the bankbut it is noted thatnofomial charges have been levied by US officials. We will leave this bank 
M a SCC-1. 


mershio -Commemonth* owMY'a.fprinciML’s background .histwy and repuation: 
jrhree Al Rajhi brothers own 44.5% of the shares in the Bartk. although the total Al Ra^f»nily shareholding is significantly higher. Four I 
'v RajN brothers are listed in Forbes Magazine as being part of the 400 vrealihiesi indivkluats in the world, with a cembined net worth of I 
k22.5 Billion. No mention is made in Forbes about any connections to terrorist financing or terrorism for that matter Apart from the 
General Organization for Social Insurance no portion of the ieinaining4S.4%isheldby an mdividualorentity with more than 5% share. 
[The founding Al-Rajhi family continues to hold a key stake and provides several of the top managers. It is the largest Istarrtc bank in 
the Arab world. Al Rajhi Banking and Investmertt Corporabon is a major name in Saudi Arabia’s banking and business world. It has 
brown from a strong base, focusing on serving the needs of Ihe nation and ils citizens, coniributii%g to the Kingdom's construction and 
Development, and always operating within the framework of Shariah piinciples. A! RaRii Banking and Investment Corporation ts one of 
the largest joint stock companies in the Kingdom, with a paid up capita of SR 2.250,000.000. Head Office is located in Riyadh and 
e sU Region^ Offices. The Corporation has the largest bran^ network distributed ttiroughout the Kingdom and the largest 
KTM network. 


^nagament • Comment e n the aienfs professianelism. expertise, exaerianee. and edueatien_ef s»filai_effieers / exaeutitfai: 
jrne followino Board of Directors and mansgers were checked aganst OFAC and World-Check as at 14 January 2009. No adverse 
tnfofmatior was found in the detabases oronOFAC. London Banknotes belteves that the management is competent as assessed by 
pur meeting vrith management since 1 99S. 

Board of Directors: 


Bulaiman Abdul Aziz Al Rajhi • Chairman & Managing Director 
Abdullah Sulaiman Al Rajhi • CEO 
^ulaiman Saleh Al Rajhi 
'vbduRah Abdul Aziz Al Rajhi 
7alah AiiAbaAlKhaa (PEP) 

\bdul Aziz Khalid Al Qhe^iy 
Mohammed Osman Al Bishr 
atohammed Abdul Aziz Al Rajhi 
yiohamed Abdullah A! Rajhi 
Ji Ahmed Al Shudy 

t aeed Omer Qasim Alesayi 

lanagement Team: 


kbdullah Sulaiman Al R^hi- Chief Executive Officer of the Al Rajhi Bank. He is a member of a well-known business family in the 
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Middle East and the GuK Area. He is a graduate in Busu^ss AdmMsIr^iofi. He «vas the Deputy General Manager for Investments & 
-orei^ Relations. During 1994 he was promoted to First Deputy Genial Martager and became Director & Genera! Manager of the i 
Jankin 1996. In 2005 he was further promoiedtothe CEO of the bar*. He is also a member of the Board of Directors of a^oup erf 
tflier SaucS Business enlifies, He was nominated two &nes as the vnnner of The Islamic Banker ofthe Year Award 2007. 

laeed Mohammed Al Ghamdi ^ Deputy CEO for AlRa^i Bank. With over 16years of banking experience, Saeed has held several key 
xssitions witft M Rajhi Bank including Chief Information Officer. Generd Manager of fT & Operations before becoming Heed of Retail 
banking in 2003. Saeed assumed his current role of DCEO in 2007 and in his previous role as GM of Retail Banking, Saeed was ^ 
esponsible for leading projects across the retail business, inducting mafot projects in the areas of IT and CRM development. 

ain Biackiaw - COO. Mr Blacklaw joined Al Rajhi Bank as Chief Operand Oflicerin JiJy2008. in tNs role he has responsSiUity for the 
T, Operations and Administrative Services, lain has over 20 years ofexpetienite in Banking and IT Service Management, having held 
senior positions with EDS, Westpec Bank and BenkofQueenslendinAustrdia, witftasucscessful track record of implementing major 
thange initiatives. At EDS lain was responsible for all operations across Asia fa EDS erfiants, in the Bank of Queensland he held the 
Kjsition Group Executive IT and Operations and a! Wesipac he facill and ran the mejorhy of the Bank's operations centres. Iain hold an 
honours Degree in Economics from Aberdeen Urtivei^y, a qualified acxountarA(CIMA), obtained whilst working in London in the Oil 
ndustry and atiended Stanford University for post grackiaie siucties. 

7ori Aftand GM, Retail Banking Group. Anand was appoinied Gerteral Manger of Retail Banking in July 2007. His is responsible for 
:hapir^ the short and longterm stiategyforthe ReiaK Banking Group. Anand. has been with Al Rajhi Bank since August 2003. Prior 
0 his current assignment At«nd held senior management roles in ttw Consumer Asset business and Opersttons department within Al 
Bank. Anand has 16 years of Retail Banking experience with exposure to bankii^ practices in countries across the CEMA 
egion. He has rich experiance in setting up green fidd (xojecis in bankirtg wNcfi include new bank set ups. off shore outsold cirg 
iractices and banking affiliate setups. Prior to jcuningAl Rajhi, he served asa Vice President in Citigroup, where he worked for 13 
'ears. Anand holds an MBA degree with specJ^ization in M^keting and Systems. He is also a member of Visa's Advisory Board for 
^EMA. Anand is married with 2 daughters. 

rfartm Lopez - General Manager of the Corporate Banking Group. Marlin has over 23 years experience in the Corporate and 
nvestment Bankir^ field. Martin spent 16 years working with Chigrtxjp where he hdd various management po.srtons including, Head of 
-inand^ Institutions and PubKc Sector, Senior Credt! Officer and Head of Corporate fex Malaysia and Southern and Eastern Africa. 

•lost recently vrhilst at Barclays, k^artjn headed up Merchant Bankirtg for the Africa artd the Middle East. 

Donstantinos (Dinos) Constantinides- General Manager for Strategy and has over 13 years of international experience gained ki the 
manciat services industry. His current resportsibilities include the development of tha Bank's business stralagy, together with their 
ransfoimation and execution into robust business plans. Previously, Dines has supponed Ihe Bank in setting up and growing the 
detail Banking Group both as an external consuHant as w^ as a member of the executive learn. Prior to joining Al Rajhi Bank Dinos* 
nain professional experience was with Accenture where he led several strategic initiairves for European banks and finandal 
nstiiutions. Dinos holds an MBA degree, with e specialization in Intemaiional Strategy from the Unrversrty of Birmingham and is a 
iraduate of the Economic University of Athens. C^os is married with 3 children. 

iaud Abdul Aziz Al Hoshan - General Manager for Human Resources. Joined Al Rajfv Bank in February 2008 as General Manager of 
itxnan Resources. Saud started his career as a Civil Engineer for about 6 years in the governmant. and later tianationed to Human 
Resources. He has avar25 years experience in many fields and indirsiries. Prior lo joining Ai Rajhi, he served as a Vies President of 
Human ResourcesinAlsalam Aircraft Company. Saud has an MBA and B. Sin Civil Engineering From Gonzaga University in Spokane, 
Washington Seta, USA. Saud Is married with 1 son and 1 daughter. 

7amien White • General Manager Treasury Group. Joined Al Rajhi Bank in January 2009 as General Manager of the Treasury Group, 
n his 20’t’ years of working experience Damian has held senior Treasury positions withihe National Australia Bank Group and Lehman 
brothers in addition lo serving as an Officer with the Australian Army. Damian’s focus in his current lole is on building an international 
Treasury function with a kil suite of IslamicTreasury products. DarrHan holds an MBA from the Melbourne Busness School. 

>aleh AbduBah Ai Uhaidan • General Manager for the Sharia Group. He brings a wealth of experience to the Bank. Associate 
Vofessar in the Department of Comparative Jurisprudence at the Graduate institute of Justice, he holds a PHD in comparative 
lurisprudence from the High Institute of Justice. He worked in the Faculty of Sharia in Qasskn in 1407 AH., and Ihen in the Faculty of 
sharia in Riyadh in 1412 AH., foiowedby a post as an assistant Professor inihe Oepartinent of Comparative Jurisprudence at the High 
nstitute of Justice in 1416 AH. Dr Saleh also worked in administration ofthe Higher Institute for Justice for rwo years, and asa member 
)f the Institute for six years. He is also a member of the Sdentific Coundl at the Unrversrty. 


/Itiittfign.- aimnwfBf ittfermaiioii obairtetifism 

’0 January 2Q10 • Heithem Ketarji, Director FIGrr 


» with Nikolas Foitias, Heed od Suaiegy at Al Rajhi Bank 


Met with Nikolas Fotilas on Wednesday 20ih January, 2010. The purpose of the visit was lo get an update on their M&A strategy for 
pOlO and run by them an apportunhy in Turkey. The main focus for 2010 is organic growth where the bank is due to open brancStesin 
Kuwait (1 branch) and Jordan (6 branches). They wilt be very oppoilunistic on the M&A front and they are interested in GCC and Egypt 
[Turkey is not of interest as the Chairman is not convinced of the Isismic Banking proposition in the country. 

IVe agreed lo stay in toudi and have monthly calls of visits. 


|l4 november2009 - David B llling met with Ahmed Bsgbazal. Senior Dealer 
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;/!ei wHh Ahmed at GTB roadshow fn Riyadh. 

He is very happy with the inaeased business we have done this year.espedaRy now that we repatriate our surplus SAR notes to 
hem, The recent order they hadfor ClOO mio vrasfulfiHed with Commerzbank had no issues with the creefit liskorihe deal, 
discussions took place in a later meeting abculAIR^i opening a USD accouit with us in New York which would assist the Banknotes 
tusirtess. 


’ Marr^ 2009 - Shamzani Bin Md Hussain met with Mohammad Faz^ Haque, M Farshad Cader 
discussion Points: 

Announced USD 1,7 bn profttfor 2008 - 4ih Quarter 2008 proTii was down 10% -YoYto2Q07 
Expect 2009 to be more chaHenging 

Agreed that a lot more business can be done between the two msiihiiions 
Requested for CAD clearing with HBCA asap 
To increase volumes of existing Banknotes business 
Perusing Docs for Structured investment Products 

To mcrease Brokerage Iransectionsi.e. Metal Trading, orwe they get clarity on fee reduction 
Trade transactions - ready !□ channel business if rebatas atr»^ment is agreed 
Requested HSBC for Bilateral Murabaha - 1-2 years tenor 

To build synergies with Al Rajhi Malaysia -immectele Treasury and Trade trartsaclions * mulli-cuirency platform 
PossibSty for funding exercise by -Hih quarter 2009 -either via Sukuk programme or Syndication - target USD2.0bn EMTN - HSBC to 
re advised 
\ction : 

Shamzani to continiie overall engagements to increase Flow business and secure potential EMTN mandate 
John / Salman to follow up on CAD accounts 
David Bilkngs to fallow up on Banknotes 

Sulaiman to revert on brokerage fee reduction and loSow up on Treasury Docs 
Shantzani and Davies to follow up wi^i CheZam/FatSlahof Al Rajhi Malaysia's Treasury. 


5hariq Siddicp - 23rd June 2008: 

tHei with Mohammed Fazal Hague, Manager Pinanci^ Instituliorrs.Moharnmed mentioned they have received Canadian Dollar 
iroposals from three other banks, and was asking if there is any update on our side. Apparently, he was not kept in the loop by his team 
rn this issue. ( told him that Al Rajhi had problems u^g otx Agreement, and HSBC Canada had reservations against the Agency 
Vj^ee^ent sent by them. I explained ^at if wehave to use their Agreement, we need to go through a tedious clearance / approval 
rrocess. It was agreed to dose the issue one w^ or other by next week. 

They would be interested in working with Amanah on de^ at Seitior level Historic^, the focus had been on Saudi market but they 
rave now started lookirtg at transactions outside the Kingdom as weB. He said iniiiai areas of interest would be infrastructure and PI 
txposures and they can come in transactions with USDIOOm and above. I loU him we will cenatr^ keep this in mind. With regards to 
heir own funding, the USDI.Om 5-year fadlity discussed earlier is not Bkely to happen tf^s year due to market conditions. They win 
evisitthe issue next year. He was pleased vrrth the relationship on banknotes side, and advised that Saleh Al Jumai would be the best 
rerson to meet in that regard. ! also expressed desire to broaden the contact with their product teams, and he will arrange meetings 
vhh asset msnagement, strculured Rnance etc during the next visits. 


Shartq Siddiqi • 23rd July 2007: 

with Mohammed Fazal Haque, Manager FinanciaHnstftutions. AJ R^i Bank is majoiity owned by the members of Al Rajhi Family. 
Recently, Pahad AJ Rajhi (GM for Treasury and FI) and Cassim Docrat (AGM for Treasury and FI) lefi the bank, We had requested for a 
neeting with Acting GM ofTreasury and FI (Anand Ancban) and his team, but only the Aaing Head of FI (Mohd Fazal Hague) along 
vithhis assistant turned up for the meeting. The bank has sirici KYC Foficids and monHors any unusual transactions through accounts 
is wen as reponirtg to the SAMA (Saudi Arabian Monetary Agency). Upon operwg an account, arstemers must provide suffidant 
nfoitnation about^emselves to satisfy the bank. Money laundering is not considered to be a major problem in Saudi Arabia due in 
)an to the extremely severe penalties for drug related aimes. 

They advised that it has been Al Rajhrspolicy to primarily deal with the targesi local bark in each country. As regard to their 
torrespondent barking relationship in Sudan, they confirined that the main correspondant is Bank of Khartoum, which also maintains a 
jBP account with HSBC London. Rsju corrfirmed that relationship with other Sudanese banks is either inactive or insignificant Ha 
ilso advised ^at the bank is reviewing its overaM relationship podfoBo witft a view to dose the dormant iraettve accounts. The bank 
tonfirmed that it fully understands the risks assodeted with provi(]ir>o financial services or making funds availsbte to listed 
errotiats/sanciioned names notified by the competent authorities. He confirmed that necessary due diligence based on FATF/SAMA 
juidetines is performed at the relationship inceptioA stage. They have an automated process to detect if the diant appears on the list of 
sON/sanctioned names advised by the regulatory authority. It also has a transaction monitoring system to detect unusual activity in the 
iccount and provides ds'iy reports, which are reviewed by compliance, if there is suspidor about an account, h is immediately 
eported to SAMA and the account is put under surveWarree. If it is established that the account is indeed being used for money 
aundering purposes, the relacionship ts immediately exited. 


Simon Putt, Hissam Kama! - 19th March 2007: 

t4et with Anand Anchan, AGM, Treasurer; Samer Faihoud, Deputy Treasurer and /kbdulazizAl Amro, Senior Manager - Head of 
deducts. Meeting to pitch a rated irtematioral Sukuk issue by At Rahp Bank They were very open ihatthey would very much like to 
ssue along the lines of ADIB and Sharjah Islamic Bank, and that altfrough they are highly liquid, they would do it tomorrow for strategic 
Purposes. 


Balm^r Hussain, Paliavi Kempdah - 19th July 2006: 

Met with Mcrfiarmied Fazal Haque, Manager Financial InslHulions and Mohammed Astwaf. Cassim Docrat (head of Financial 
Institutions) was attending the AD6 Conference in Hyderabad, hence MH filled in for Nm. MH appraised us that the Org was being 
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Know Your Cus;o!7>ef. AL RAJH! BANKING & INVESTMENT CORP 


< -C'. ■i./’i.' ■ 


as >ho Country.lha Ctiam is leeatad in havd’KVCtand.AMLv 

_ Bwia ^ra*- a s 

cenmarion iha eounlry a KXCandAMJ.igra4*icaa;{gast;. 
It and/er fL't’jra)' ragardaig Bj^aptMf^tmnayJau'ndanng': 


.'*■■*-* ’ 


!» ini»f!al Audit. Sian is lequired So li*- r liitr i i 
spect money laundering. Ths.AMLuni' v ilf ht' tjiri-.i 
[SDunf of ihe Customer i^der suspia VI o' r ir - ' u ' i 
d, if vrarranted, aten SAMA and the autnonnes. 

Xipy of Sieif extensive rules governing WAs 'r “'r- 
undermg and TerrOfisi Fmancing t« hf'ri or 'ifi ' ih i i 
udi Arabian Monslar/ Agency fSAMA) 'ho Cur t. n ^ rf 
igdom of Saudi Ar^sa, was esiaiili her II ‘'iV Tf“, t 
iional currency, the Saudi Riyal; 

■ i as a bankw to the govemincnf: Furen ,st- omT'en p 1 t 

■ mage Kingdom'sforeign exchange res-r s rr .. l m 
Bey for jvomoimg price and exchange rate stabilitv ana 

I' rmote #ie growth ana ensures flie soofi *1 s'- fslr fin u 

.item. 


•■YiiSv 


INGy 


:cScs Control Strategy Report 





' 1 V* 


aact from 2tXi9 international N 
i.'ICSR) 

I e Hjngciom of Saudi Aratsa is a growing rinjsncitil center in the. 

■ Mff Re^nof thefi^ddie East. However, there is no indication 
; it narcofics-related money launaeiing airientiy is vvjlnerabiii'y in 
I ' ! cotmtry. Saudi Arabia is nerHier a major center within the 
(ion fc» financi^ crimes nor an eftshore financial center. Saudi 
idals ackctew^sc^e diffkxifty in following tlw money trail due to 
I jweference for cash ftansac'icns in the country Money 
indering ^ terriyisi ftnandng are knowm to originate from 
udi ctHTiinal enterprises, private fodividuals. and Saudi-based 
srities. There is an absence of official criminal statistics, but 
lonedty.. there was no sianificam mcreose in ftnandal crimG.s 
ling 2008. it is believed the proceeds of aime from stolen cars 
d counterfat goods are substantial. All eleven commercial 
nks in Sauefi AjaWa operate as standard ■'Western -style' 
srteial institutions and are uixler the supervision of the central 
nk, foe Saudi Arabian Monetary Agency (SAMA). in 2003) 
i^i Arabia approved a new Aitti-Money Laundsiing Law that 
itains crimfosi penalties for money laundering and terrorist 
anefog. The law bans conclucltng ccmrneicial or financial 
nsactions with persons or eniilies using pseudonyms or acting 
onymously; ropoiras finaneia! iisstitudons to maintain records of 
nsactions for a miramum of ten yeai-s; adopts piecautionai v 
■asures to uncover and prevent money Isuodeiing operations; 
jiires banks and rmandal instifotions to ceptul suspicious 
nsactkms. authari^s government prasecutivs to investigate 
iney laundering and leirorisl financing; and, allows (or the 
« foange of mformaiion and judicial actions agaiasi money 
indering operations with k-xKintiies witli which Saudi Arabia ties 
idal agreements. 

May 21303. SAMA is.sued updated anti-mottey laundisring itnd 
. intertsffwisl finance guidelines for the Saudi Itanking system in 
Mrdance with lire Financial AcBon Ta.sk Force’s (FATF) 40 
convnendstions on Money Laundering ami the Nine Special 
convnei«iations on Teirorisi Financing. 

June 2007 the GOSA enaaed stricter regulations on the 
iss-biXdermovemBnt of money, precious metela, and jewels. 

e new 2007 regulations also stipulate that whoever is convicted 
money laundering will be imprisoned for up to ter yesr.s and 
sdup to five million Saudi riyals (approximaiety.? 1,333,. 300). 
e regulations also slate. ‘Wtroever funds tsrroiisis or terror 
tanizations is considered to he committing a aime of money 
rxJerifig.’ 

udi Arabia participates in the activities of rtie FATF through its 
mber^ip in foe Gulf Cooperation Council (GCC), and as a 
■mber of the Middle East and North Africa Finaiicial Ac.tion Task 
fce (MENAFATF), Saudi Arabia will be undergoing a seoond 
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Know V OUT CusSomec AL RAJH! BANKSNG& INVESTMENT CORP 


ss (ssooie raputaUonal ll'•ka^o^t ^ i I 
saations by U.S, auiboiibe tn v ul it t-l 
;ii3roc-fof!heAI-n3jbiCori»3ClKii i n r i 
:~Tam. Ou» accouni relab n }i p J II it i v ! ! 
ikg USDbanknoves Quio toiK-ni f 
i3 she reputaSonal risk based on ' ^ n ii r i 

Triiuid be measured agsins ihr- n ii 

s'-cJiip >\^en uitinateJy cV n.1irq->ir"* i i " 

aafc)n Banknotes leels that th ! -it kp inr I 
s=* to us. The senior inaTiSaemerit ot tba bai^K is 
= 3ia pre^icsjsfesuesiha caus ' njr f i i r h, ti 
:3unders!and the we have '0 abi eH Ui 1 1 1 
iasd regdaiion. Theyht e X’tt t ^ n ''Tvis s i 
•a^ketand customer tt-pe 01 UkC I irkro t b ^ 
ist-curs. Given that the b-nk npt-rjt s ts t rkr t s 
Sitimally only, coupled with the tact that this 
=: categaized an see, ifM ih ti e i at m it 
sriifeel thatweean leacOv 1 e tl IS K.! ii'-tip j 









' D«« of rrtost recent KYC review 


Department of the Account Meneger:/Adininistrator (AM) who 
prepared this profile; 

iodii'g 


Signature Section 


s: 0 jnl Manage/ (Mn^ni3^«^(,^} Appr<^; 

Denise HOLDER 1698/2010 15:1 1 

Cl Serytees / Menegsr ^prpvtd; 

Stephen J ALLEN 17/08/201013:10 

Functional Head;6f-Busina8»,':/.&ectd}ve'(IS);Approval: 

David MWnen.s 08/17/2010 10:22 AM 

' . / Re!sticii^pM«h«9«rHRM).^pr^*li 

Not Reqtared 

;-5.«T-'s;;';,!',i-v"j.:ln8titodon8i Banking.) /J'«am.L»«<>er.(|B} Approval; 

Christopher Lok 08/18/2010 03:32 PM 

vli^IJi.Regiphal Mone^ Laundenng Cemtrol Offieeh- (CO) Approval: 



APPROVE/DENY HISTORY: 


Created: or>/2S/'2001 10 20: i3 AM Converted irom Ef« 

OS-25-2o 6'1 14:28 PM Createdby: <EPic to KYC Conversion Proce3S> 
<AddresB>. 



P.O, BOX 28 
RIYADH 11411 
SAUDI ARABIA 


•;Status> 

<C!ienl Naine> 

<Acci..offr..cocie> 

<Acr.t..,offr> 

<Appfoval....acct...off!ca’> 

<Unii..,.offr..code> 

<AppfO'/ial.unitj?igr> 

<£xec,..dp.p;> 


:A - Approved 

;AL RAJHI BANKING AND INVESTMENT CORPCRATfON. 
:343141 

Mouiannar, Joe 4/9/38 16:04:00:276 
;343137 


4,9/98 17:27:09:773 
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Know Your Custcmer: AL RAJHI BANKING & INVESTMEf^n'CORP 


<Approval_exec_depl> 
<Lfigal_dept> 
<ApprovalJega!_depl> 
<L£9al dep commenis> 


In Process: (Old Status Approved), 06/1S/2QQ2 02:25 PM: Sharyn Malone 

Purpose of account changed from; D to: (USD Clewing] 

License Counlry{1} changed from: [] to: (SAUDI ARABIA] 


AM Approved; (Old Smis In Process), 21f0l/2004 12:08: ArmaT BROBERG 
No Comments 


CS Approved: (Old Status AM Approved), 21/0iy2004 12:18: Stephen J ALLEN 
No Comments 


IS Approved: (Old Status CS Approved), 01/21/2004 05:34 PM: Christopher Lok 
No Comments 


IB Denied: (Old Status IS Approved). G2/19/20O4 04:26 PM; Beth Rsher 

Pis remove Belh Fisher's name as RM far iNs bank. HBUS NYKCIB RMshave never met tNs bank. Since this is an SCC, an RM is 
notin tfte approval chain on the Notes system. If an RMnameisneeded. we suggest to input tfte Banknotes Product RM- or an RM 
in the Middle East who is familiar with the bartk. 


AM Approved: (Old Status IB Denied). 20/02/2004 09:01: Anna T BROBERG 
No Comments 


CS Approved: (Old Status AM Approved), 20/02/2004 09:13: Stephen J ALLEN 
No Comments 


IB Approved; (Old Status IS Approved), 03/16/2004 12:10 PM: Brian Robertson 
No Comments 


CO Denied: (Old Status IB Approved), 11/09/2004 C4;51 PM; Teresa Pesce 
No Comments 


AM Approved: (Old Status CO Denied), 1 1«)1/2005 17:30: Sally G LOMAS 
Profile updawd 


CS Approved; (Old Status AM Approved), 12/01/2005 08:33; Stephen J ALLEN 
No Comments 


IS /Approved: (Old Status CS Approved), 01/27/2C05 1 1 :22 AM: Christopher Lok 

I would ask for conditional approval for aooiher 6 months as lodaie despite negative news report no olTicfal commencement of 
investigations have commenced. If and when reliable info pointing to this dieni not appropriate for our business relationship we can 
then terminate immediately. 


IB /Approved: (Old Status IS Approved). 01/28/200506:11 PM: Timothy Waring 
No Cornments 


CO Denied: (Old Status IB Approved), 02/02/2005 10; 14 AM: Lynda J Cassell 
Denied at the request of Daniel Jack 


AM Approved: (Old Status CO Denied), U/1 1/2006 17:26: Gordon BROWN 
Reactivating ojstomer, ready for KYC reapproval process. 


CS Approved: (Old Status AM Approved), 14/11/2006 17:35; Stephen J ALLEN 
No Comments 


IS Approved: (Old Status CS Approved), 11/14/2006 02:13 PM: Chiislophet Lok 
No Comments 


IB Denied: (Old Status IS Approved), 1 1/17/2006 09:20 AM: Belh Rsher 
Please remove my name as RM. I do no! know this bank. 


AM Approved; (Old Status IB Denied), 04/12/2006 14:08: Gordon BROWN 
RM approval changed to Christopher Lok, ready for KYC approval process. 


CS Approved: (Old Status AM Approved), 04/1 2/2006 14:13: Stephen J ALLEN 
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Know Ycur Customer: AL RAJHI BANKING & INVESTMENT CORP 


No Comments 


IS Approved; (Old Status CS Approved), 12«M/2006 02:33 PM: David M W«ens 
No Comments 


IB Approved; (OW Status IS Approved), 12/04/2006 03:07 PM; Christopher Lok 
No Comments 


Approved: (Old Status IB Approved), 12/04/2006 04:44 F>M: Alan T Kedey 

Approval is given for Banknotes buartess - if PCM business is added at some future date it must not indude cash letter or demand 
drafts. Should a PCM relationship commence, senior PCM managemeni should approve it in writing. 


In Process: (Old Status Approved), 06/02/2008 11:48; CNslopherBAYUSS 

Name of principals changed tram: [Sulaknan Abdul A2izAlRajN,S^h Abdul Aziz AJ Rajhi, Mohammed Abdul Aziz A] Ra^i.Abdullah 
/^dui AzizAl Rajhi (four brothers corrtrol 57%),Put:iciy held (<5% shareholder)} to: (Suiaiman Abdul Aziz Al Rajhi.Saleh Abdul Aziz 
A1 Rajhi ,/^duflah Abdul Aziz AI Rajhi (three brothers contn444.5%},General Organization for Social Insurance, Publidy held (<5% 
shareholder)] 

Otvnefship percentage changed from: }57,43] to:} 24,7,13.7,6.1,10,45.5] 


AM Approved: (Old Status In Process), 26/03/2008 1 2:03: Gordtm BROWN 
KYC review completed, ready for reapproval process. 


CS Approved: (Old Status AM Approved), 26W3/2008 1 2:22; Stephen J ALLEN 
No Comments 


IS Approved: (Old Status CS Apprmred), 03/26/2008 04:38 PM: David M lAfrtens 
No Comments 


!B Approved; (Old Status IS Approved), 03/26/200804:43 PM: Christopher Lok 
! fully support re-activating this account wh3e we wiS dibgentty monitof the accounfs performance. 


Approved; (Old Status IB Approved), 04/01/2008 05:42 PM: Alan P Williamson 

AML risk should be ck'scvjssed in visitation/caS report including whether MSB payout agent. Note that like prior approval, this is 
limited to banknotes only 


In Process; (CMd Status Approved), 28/01/2010 13:40: Dertise HOLDER 

Nameofprincfpsis changed from: [Suleiman Abdul Aziz AI Rajhi, Saleh Abdul Aziz Al Rajhi, Abdullah Abdul Aziz Al Rajhi (three 
brothers control 44. 5%), Gene' al Organization for Social Insurance, Publidy held (<5% shareholder)] to: [Lehman AI Rajhi, Saleh 
Abdul Aziz AI Rajhi, Abdullah Abdul Aziz AI Rajhi .General Organization for Sodel Irvsurance, Publicly held (<5% shareholder)] 
Ownership percentage changed from: [24.7,13.7.6.1.10,45.51 to: 124.9,13.9,5.9.9.9,45.4] 


AM Approved; (Old Status in Process), 08/03/2010 07:51: Denise HOLDER 
Terr^orary AM approval to allow HKto update their BN page 


CS Denied: (Old Status AM Approved). 08/03/2010 11:02; Stephen J ALLEN 
No Comments 


AM Approved; (Old Status CS Denied), 12/04/2010 09:22: Denise HOLDER 
Temporary AM approval to allow the London BN page to be tq^dated 


CS Denied: (Old Status AM Approved), 12/04/2010 09:36; Stephen JALLEN 
dented as requested by OH 


AM Approved: (Old Status CS Denied). 16/08/2010 15:11: Denise HOLDER 
No Comments 


CS Approved; (Old Status AM Approved), 17/08/2010 1 3:10; Stephen J ALLEN 
No Commems 


IS Approved: (Old Status CS Approved), 08/17/2010 10:21 AM: David M WDens 
No Comments 


IB Approved: (OW Status IS Approved), 08/18, '2010 03:32 RM: Christopher Lok 
No Comments 


CO Denied; (Old Status IB Approved). 09/09/2010 08:58 AM: Joanna S Flanagwt 
busness being exited 
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Revision History 
Editor 

Denise HOLDER 
Denise HOLDER 
Denise HOLDER 
Denise HOLDER 
Denise HOLDER 
Denise HOLDER 
Denise HOLDER 
Denise HOLDER 
Denise HOLDER 
Saliy G LOMAS 


Date 

15/10/201008;12;31 
11/0 a /2010 09:31:47 
26/01/201013:48:10 
26/01/201013:4024 
01/12/2009 12:56:04 
15/09/2003 08:01:10 
15/04/2009 09:32:24 
02/03/2009 08:28:42 
23/01/200910:36:09 
15/01/2009 1 2:23:01 


Reason for Update 
F^ofie Deactivated 

Various i4)dates - Fmancials, management, EDD ROF and ALE 

Updated GRM support 

Annual review - various updates 

Updated financi^. auditors report and call report 

Updated p-cert 

Updated Visitatian 

Added Hong Kong to HSBC Banknote OfTice 

Updated EDD date 

GRM 


CRR Revifiion Hisinrv 






^ i V 




[Last UpdatsdByron 


I^Ktee'iypetnddiGemraO.'' ;. ; 

OMVakie' t ■" . 

New value V ; 


1 Denise HOLDER - IS/IO/MiOJ^l^^s'-il 

Tx./ •- *v ■* '»,U. 


Deactiyeted ':.'v 







' 
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- Redacted by the Permanent 
Subcommittee on Investigations 


Know Your Customer Profile 

HSBC Bank USA, N.A. 

Reference: flllHBiii CllentProfiieApprDvatStatus; InPiocess 

Country Risk Status : Hl^ Risk 

i hteeds Re-Approvar j 

Client Name: islami Bank Bangladesh Limited 
Country: BANGLADESH 

* Changes to these fields on "Approved” Profiles require Re-approval. 

I. General Information 


Clam Nam*: 

Islatre Banic eano^osb Limited 

Is this 8 Clant of Global Payments and Cash Man&oemant 
ff>CMb)Dala«nfa)7 

• yes O NO 

Isthlsadent^CorporeaandbismjdonalBankhio (CiB)7 

• VesONo 


Banks & Secufiiies Comparues 

-’"CHntAcOvitrStaftis: 

Active 

.. .. *.Caa(tCMBOoty: 

' • I**' TVwc^caiw 

O Domestic f manoal Institution 

• Foreicpt Financi^ Imtitufion - 
O Westment Advisor or Fund 

OcofpofBtBCfem 

O Sola Proprietor or Partner^ldp , 

• 0 Non-Bank 

^ , • Legal, anWy; 

• parent- O Branch OSubsidiwy 


O Yes • No 

V v’fiaf^enMIlilCMKpHyarc^^ 

(Hstarto GSiwe QCk IIMQ74 on 

Ores •no 

■QawiwimilaidrirBgiaparMjigiflellleiife^ 

(e:g':, 0 FAC 8 i«yitoiU< 0 lMi^ 

fTMa is 10 ba ooRwIatad for pnHpacbi on^ - CDdstihg cS^ M 
acannad monMy arid whan the Of AC lat ctmnoaa .] 

^•><».0 No 

• , .. Addnm (Bwanaas / Patmanent); 

lA PO Bev aim it mt aufRdsnt for aOdreaa .) 

40, Oilkusha Convneicial Area 

ctv: 

Dhaka, Bangladesh 1 000 

*Oounky: 

BANGLADESH 

^ Talaphona 

*880 2 955 2616 
*880 2 9567162 
*88029569147 

EnmeJdi*n«tClw|<waa: 


« >^CI»m%URLiWBbStol. 

www.islairftiankbd.r.om 

-ts-!?-’-' - Pbc 

*880 2 9564532 
*880 2 956 8634 

t dwmcoda 

IBBLBDOH 
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Know Your Cuslcmer: islami Bank Bangladesh Limited 


Redacted by the Permanent 

Subcommittee on Investigations 


Tucpevw or ^4): 

Petdov] 

. r NewClantorEdsfttoCtent: 

O New (proapecQ 

Eidsting {ac4ve) 
'O^/^ani^’Anane^ants anfy 


AcoxnitNtsntiw^: 


Me Account AcMiad : 

10/1A’2000 

* Purpose of Account : 

USD clearing S^^ces, Funds Transfer Clearmg Account 

- , ^‘;l|'f»ClgMcrKsPi|^M^onsnExch»nea 7 

• vesO.No • 

Ifyea, NameorExctwnoa: 

Dhaka & Chittaqono Stock Exchanges 


CtP \MRca0on of ID • Has ttw or^bial customer 
ietenfflcaSan/documentation been verified , as perUSA PATRIOT 
ActreguIefionsfbrt^cuBtomets (ornmivsccountsAxetlonsfor 
ejdsfing customeis)? 
fbocumenttrv and/or Non-Oocumentaiv eiAJeiKe) 

# Yes 0 No 

DocunetftHy Evidence lor CIP : 

Ohismqrindudebenldnollceise.re^^stered articles ctfbMOiporM{on.,fwlnership8(|reeimm, etc. -with more delsB In See^W) 
For the Bani(ln0Uc8nse , Indicate *Yas” ff you have a copy of tfis Icensa or a printout Screenshot horn thefr Cent^ Berdt Yiw^^s 
aooncrilMv fisino 8)e cfient /benk. 

. : ’ - if yes, weedocunentaryevidanoe verified? 

• Yes O No 

If^.tyoeofdocurnert 

Banluno License 

Non-Oocunentaiy EvIdafKe CP : 

eearchea , e^ • with rhdie datal in odiar aecliona } 

wes non<documerttry evidence verMed 7 

# Yes 0 No 

tfyu.l’Mflcatt verification medtodsuMd; 

Customer Contact/Msitation, FinandaJ Slatfimenis, Third Patty 
Source (eg Banker's ^manac). Banker's Almanac. Client's 
iwebsiie & Stock Exchange. Regulator's Website Screenprrnt. 
Auditor's Report 



' ■ 

Qeoaral cotranenta: 

1. Company Overview 


* 


The establishment of tsleini Bank Bangladesh Umileci on March 


'll- 

, , ... 

13. 1983. is the true relleciion of iNs inner urge of its people, 
which stoned functiortirtg wilh effect from March 30, 1983. This 

Bank is the first of fis kind in Southeast Asia. It is committed to 




conduct all baniuno and investmeni acirvilies or ihe basis of 


-A 

, ■‘fjVA -'-r 

•merest-free profit-loss sharing system. In doing so, it has unveiled 


' -5 ' ■ 


anewhoruon and ushered in a new silver lining of hope towards 


• J, 

.. 

tnaieiiafizing a long ^rished dream of the people of Bangladesh 
fhr doing their banking transactions in line with what is prescribed 
by Idam. With the active co-operation and panicipation of Islamic 
OevelopmeiH Brmk (lOB) and some other Islamic banks, fmanciel 

j 

’ , 

r * 

institutions, governmeitt bodies and eminent personefities cf the 


- ' - .I- S 

- ' , 

M'ldcfle East and the CuH countries, islami Bank Bangladesh 

. 


■> ^ • 

Limited has by now earned Ihe unique po.eition of a leading private 



■ ■ 

commercial bemi in Bangladesh. 




<source: hitp://www.islamibankbd,co(n/'introduction.php> 

. 


- 

It. Si^iport Staiemeni 

, ‘ 



u' > 



GRM Support provided by Sadique Reza on 04/17/2011,- You 

- 



have (Ktf support for the below mentioned relationship.” 




III. Findings 


V.' 


EDO ROF reQuested 3/21/2009. Compfiance denied responding. 



' 1 

"1 believe St updated EOD ROF fe NOT needed at this time for 




this PCM cBent. 
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Knew Your Customer: islarrt Bank Bangladesh Limited 


<■= Redacted by the Permanent 
Subcommittee on Investigations 


4 % 


X tf 




EDD ROFSrt 1/2006. a notice of cause was issued by the Bank of 
ll»je^ta1he CEO of Islamic Bank in March 2006 to explain 
owned by suspected Islamic Militants. Client was 
siiiser^mtSy Hoed by Benglade.sb Bank and lake measures 
)st 20 officers for their involvement. Sources .suggest this 
jwasfoe Ihkd Ikne Islami Bank Bangladesh Ltd was fined for 
co-^nng up miSlants transactions. 

GRM was queried and visited client; 

CUENTS RESPONSE: 

The client has indicated that the above-referenced case wss not 
ofteirmstfinarcing hut raiher an isolated case of 
|f^ure/negBgenceby txanch offidats to follow their AML 
{^KleNnes and operating procedures. 

GRM'S COMMENT: 

AVe performed the due diligence visit yesterday aflemoon." ‘A.s. 
:wefourtd the explanation on (he event and responses to die KYC 
quesuonnaife satisfactory, we recommend rot to take any further 
action on Islami Bank. However, considering that Islami Bank is 
, involved in mass banking with a pretty large branch network 
|wrthoui a sophisticated or integrated IT platform, there wHi always 
be a chance that isolated indderts like this might be found. As 
'Such, we wn cfosely moixtor the future events and keep you 
Imformedassnon as any issue of concern is detected." 
|Muh»nmad Shohiduzaman, emafl dated March 21, 2006 
jAccortSngioFIG H^S. various sources have indicated that Ihis 
'is the ttwd lime that the client. Islami Bonk Bangladesh has beer 
;fined for covering up imliiarts' iransacdnns. 

Addaionally, ROF recommended that the subject client's KYC 
jpro^ should be das^lied as SCC due to the following reason: 

'one of ns shareholders, the Kuwait Finance House, along with 
:several officers horn anofoer shareholder, the Islamic 
lOevelopmem Bank (issufo San ha, ibrattim Al-Mofleh, and A'issa 
lAbdellaoui). being categorized as Politically Exposed Persons on 
'WftilrFChedc.' One of the subjed dient's shareholder Islamic 
Development Bank, Jedda, Saudi Arabia, (7,5D%) has 
Imembeiship in 56caunuiesand Held represemalives in 11 
Iseveialnouniries, some of which ere OFAC sanciioned eountiies. 


LCO was queried for review o{.stalu.s 2f.1/2010, replied "The 
■nfomtation appearing below does merit SCC dassification.’' 


IV. AML Discussion 


V. AML Policy 
AML PcAcy in liie. 


e vishsiion section for 


:MTS Questionni^ in file. Client lists 53 MSB.s for which it arss 
!as payout agent. Bank of Bangladesh conlirms the following as 
remitiance relationsNps: 
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Know Your Customer: Islami Bank BangiaiJesh Umited 


- Redacted by ihe Permanent 
Subcommittee on Investigations 



oer AML KVC Policy of bank 
VI Notable Information 
Diiectors bioQiaphies pending 


il. Ownership/Management/Business Information 


* Name of Prtndpels or BarteflcM OwTwn : (List al aharehoUm 
v«Mt10%ormflra'owrant^. IfCorperauCliantnotptMely 
tradad, SpeeW Caagory CSant or High RWi Country , then Bat al 
aharehoklats wMh 5% or mor» ownarsKp^ 

' '.;_..s^-*.%'ar.aNnatahlp:' 

Arabsas Travel & Tourist Agency K.S A 

9.99 

A1 Rajhi Company for Industry &.Trade. Riyadh /V-KhobaraSaudi 

9.94 

Arabia 


Islamic Development Bank, JeddahSnudi Arabia 

6.46 

The Public Institution For Social Security, Kuwait CiiyKuwaii 

5.25 

Kuwait Finance House KSC. Kuweit CityKuwait 


Abdullah Abdul Aziz Al-Rajhi. KSA 

Others, none with 5% orOreater 

43,73 

:, A NamaofCorponMOfRcara; 

TWej:....V:. , ■ • 

(e.g. Chairman. Vice/DepuvCheuimahVPriBsidant, Cl^f . 


Eiecutive OfScet, Chief Finandal.Ctflid*', and those Members of 


the Board or odwrsmtlrdr^ influenee o^r the operaBohs of ttie 


. ...r: entire oroartization) 

Nasser Muhammad AhduzZaher 

Charman of the Board 

Yousif Abdullah AJ-Rajhi 

Vica*Chaifman 

Abdul Mannar 

Managing Director 

Shamsul Haque 

Deputy MO 

Mustafa Anw^s 

Vice dtaiimait 

- — ToWNtanberofEn^iloyoeo: 

9588 Source; Bankets almanac 

IMtaro la the Clortt Incoiporeled : 

BANGLADESH 

YearEsMbiaM: 

1983 

Whet bCMent^ Rat* In country (tael beaad): 

3 Sourt»: Banker's Almanac 

How marv branchee/bfloee does CReni havo : 

200 Source: Clients websiie 

When 81 * the brencfMa taflfcea locatad : 
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Know Your Customer Isiami Bank Bangladesh Linked 

Sanotsdesh 

PerFMon nrondal IrcflUiem edy : 

Indc^ nabire ofQtent^ bi^wu (setocial that 

Commeraa^PetaS Banking. Money Ser/tce Business Pay Out 
Agent, Other 

neasedeMiite: ^er: Shariah Banking 

hdcattmportno agency or stiparvisofy Aegulaloiy body(las}bi 
thecounttvOeei ofwmecm: 

B»tglade^ Bank 

‘Ustlcensatvpe: 

*Yearof iSManoe: "Counlrv of Issuance: 

Commerdal Banking License 

1983 BANGLADESH 



Is CBert's Sharehdden’ EqiJ^ 2S Mft»n ormors? 

# Ves,0 No 

HsstfwC&antbeanundertt^semeownanMpfcriatt lOyeais 
(or Syaarsffin a l^h 

Oy^€tNd.' 

is (he CSent or Rs Parent -Oimad? 

(Ansvw 'Yes* 9 the gcwerrment has the leigest (NRMc^ 
'"pereertade) 

O Yes 0 No 

Please M piinc^wl afliiBtM which have r^MioinKpa vM) 
HSBC: 

N«)e 

If the ClentoraraMBS have otter AecowtsvMi HSBC ertWes , 
oroide the ocwitrv In each aooowt ts toeated : 

HSBC Dhrd^a 

Ilf. Referral Information 

HcMrwastheCKMttinBoduaKlttthebank? 

Long standing relationship 

. . . By.whont: 

Long siafK^g telatinnship 

Is e fbrm or a CIBM KYC noSe from e ptfenlng offlee in tie 

- ^ COanltBa? 

W»»dM«MrafanM1(omanolh^ 

# Yes O No 

Olobtf RaMonri^ ktanager (ORM) or Cowifry ftolatkirnNp 
Menagv (Cl^ raconimancMIoh reeahed and In Cttant <la 7 

• Yes O No 

Rvaa.nameofGRMorCRM; 

Sacbque 

■ • Hyae.dato: 

04/17/2011 

Name of Salaa/Maitoibxz/Tracina oareon aaakirtad to Cleni : 

Hersel Mehani 

Name of RaladonaMo Marwoar (RM) for KVC Aoprtwal : 

V^en Lu WU 


IV. Visitation 


General Vishation: 

S«0 vifirt pwtDfTiwd ? j 0 ybs O No 


Visitaticm Details: 



Moet Recent SaeVWtstkm: 

Prior She VUtaton : 

' .:?l)«iaofeHlta«oo: 

10/19/2010 

01/20/2010 

' ..'ByWhom; 

Shatgusi Hos.4ain. Sadique Reza • Mgr 
IB/HSS. RaziS Fehih •Acting CEO Amanah. 
Amhad Rabiul Hasan 

Quaa, Ahsan H. RM, IB 

E PupoaaoBanUnsProtluciiaervtces 

■ r^E-EV^'dfceumil: 

Site Vish: Visit Head Office 

AMI Discussion 

: lacaiiapgUnClanitta? 

• Yas^Qkfe: 

• YesQNo 

Ooaananfc.pwiHdtoBiardaBfc' 

regndha>MMhn4!Mii^CMm^ 

Client Attendees: /Mkiur Rahman Khodetn - 
Prine'ma) Officer 

On site \'isit with Assistant VP Ahgur 
Rahman KHADEM 


V. Purpose/Nature of Activity 

Trftfiwoiwtt* j &q)ec«»d Frequency j Twntacdpna* EapectadFwqtwnty 
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Knew Your Customer: Islami Bank Bangladesh Limited 


<LCH {CIsarkig Hotsa) 


Money Marf^ 


(y^xount Reconciliation) 


SecutUes Lenting 


^sset Management 


Swaps 


Phed( (Cs^ L^t») 

OccasknaRv 

Sweep OvemighA Utvestmet 

Dally 

Ohecte/Demend Drafts 


Hme Deposits 


Dlearing (FundsTtensiw) 


Trading • Barrknotes * 


Commendal line 


Truing -Bonds 


Commftments 


nsdbtg • Derivedves 


Controi Disbursement 


Ttsdno - Emerging Markets 


Current /V»x)unt 


Ttadeig -Equitiee 


Deitvadves 


Tracing • Fixed Income 


Facsoring 


Tiating - Foreign Exckiange 


Ftwward Rate Agreements 


Tradbtg • Futures 


Qk^izalion 


Tiacfing • Securttes (Traasuy) 


Giuarsntoes (CDo^t, 
Deposits) 


riadkigAending • Pracious/Base 
Metals 


Intra Day Exposure Umit 


Zero Batence Account 


Letters of Oeeft / Banters 
Acceptances 

Occssionaily 



Loans 




Lockbox 


Otfiar 



’ Refer to Client's file for anticipated volume of activity. 


Menao^ Iw Vahia • CSanTs ProfltaMIty tor HSBC 
! (Annu^zsd remw • actiaf or andt^wlad , In USD aqutnfer*}: 
j TWb b fBquIred to at! PCM dtente . 


VI. Financial Summary 


A1 Bnanciaf date reported betow shoidd be in USD aguivelanl for comperlson ptaposee globely 

fe.a. no non-USD curendes and danoiiA^atad In actual USD doBaia). ' 

Fkianelal StatBRtartdala: 

12/31/2009 

Cumn^r (Local): 

BANGLADESH TAKA 

Exchange rate (par USD): 

68 139100 

Danemhaden: 

Actual 

Asaets: 

3,939,140.000 

Shareholden Eqt^: 

284,577,000 

Net Income: 

48,174,400 


VI). Documentation Checklist 


Un o« AiAmtZBd Signatottoe and ^ Corportta RecokMon ki 
CBentflla? 

O Yes • Mo 

ffno.eg^Mi: 

Sigrtatutes are housed in oui Buffalo OfTics. 

Current Annuri Report (Fonn 1CLK} or FkiwcW Stetemertirt 
COent.JBe? 

^ Yes O No 

Indteele EiBnMt^ Refarencee end ReledcraWp QJttS), 
(Name. Ocwttnr. Date arid Relatiotiehia): 

1 

1 

. .•.JeJMWli^iaietencadoeumantBiotthiClerttga. 

, . ‘^Oantt located In Htofi HskCountlaa)? 

QYas;#-No- 

Ifno.sqpWn: 

"Longsiarxlmg Reiatioriship: Waived per Compliance's email dd 
10/5/04 
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Knew Your Customer Islam) Bank Bangladesh Umited 


Bank Client and Not a Central Bank 

Cop/ of Banking Lleenw ki CM Me 7 1 0 : O^o 


Foreign Bank Client and Not a Central Bank 


Is a USA CardficaSon on ffle ? 

• VeONa 

If yes. data roceivMl by HSBC : 

03.'27/2011 

Hyas, detamoitt recant CrirtifcefiQn or Ra-Caniftcsiion was 

03.'27.'2011 

SQGBOilBd/s^ned by customer? 


(requirsd bf USTieasuy every 3 years) 



Vni, Summary of Reasons 

N9 have reviewed the irtform^npfovided above In th® context ofthe' bank 's "Know Your Customtr" 
xtllcy and "due diiiganca” requiremants and cnterla . Based on the following summary of reasons , we feel 
aynfortabie recommendirrg this client for banking bu^ness . 


The purpose of this sccourrt is lo handle USD furuts clearing services, Funds Transfer Clearing Account. Cash Lener, Letters of Credit, 
Sweep Overnight Investments, 

/ariance; Clients actual activity for the period 05f0 If2009 to M/3fV2010 vs 05/01/2010 to 04, '3a'2011 showed ro variance in actual vs 
expected vedumes. 


pwTwrshlt) - Comment on the oMwter *8/ Drlndpal’sbadcQrouftd.historv and reputation: 


Vabsas Travel S Tourist Agency, 9.999%: 

krabsas Travel STourrst Agency, Kingdom of Saudi Arabia {KS A), 9.99%, is represented by the Ai Rajhi Family members. Arabsasi 
oca ted at Prince Paisaj Sin Turki Street, Wuarat Oisifici, P.O. Box 152, Riyadh 11411 SaiKti Arabia. Tel: (-^66-1) 4056565 and Fax 
.-966-1) 4066009. Arabsas is a travel agency within the Kingdomof Saudi Arabia. 


rouslf Abdullah Abdul Aiaz Al-Rajhi, 9.936% 

<usif Abdullah Abdul A^iz Al-Re)hi is a businessman within the Kingdomof Saudi Arabia and also the Vice Chairman of the Board of 
directors. Islami Bark Bangladesh Limited. Please refer to the Ownership Section below fa his demits. 


V-Rajhi Company for Industry & Trade. 9.94% 

kccofding to the ownership confirmation provided by the GRM. Al-Ra|hi Company for industry & Trade is represented by Janeb YusH 
kbdull^ Abdul Aziz AJ-Rajhi (referenced above). 'Acs Chairman of the Board of Oirectors, islami Bank Bangladesh Umited. Please 
refer to the Ownership Secltcn below for his details. Al-Rajhi Company for industry & Trade Is member of the Al-Rajhi group of 
[ximpanles vritlch specaalizes in manufacturing building material products and metal fabrication . The AI Raijbi family is considered by 
post in Saudi arabia as the country's wealthiest rm-royals. 

Source. www.atrajhwdustri^.com; & http://en.wikipedi3.org/iMhi/AI.Rajhi_Bank 

Kbdullah Abdul Aziz /V-RajN, 7.56% 


Abdullah Abdul Aziz Al-RajN is the Chairman of G Jf Paper Industries Faclory (GPIF), a subsidiary of the AJ Rajhi group of factories. 
pPIF is said to he a leading paper miB factory in the kiddle East located at the htran of Saudi Arabia. 

pource: www.alrajhigroup.com/CTglish'paper/papef_rnain.htinl 

Islamic Development Bank. Jedda, Saudi Arabia. 7.50%: 
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Know Yoor Customer: Isiami Bank ^ngladesh Limited 


The functions of the Bank are to participate in equitycapitat and grantloars for productive projects and enterprises besides providing 
inandal assistance to member countries in other forms far economic artd sadal devetopment. The Bank is also required to establish 
md r^erate spedai funds for spedfic purposes inducfinga fond for assistance to Muslim communitiss in non -member countries, fo 
addition to setting trust funds. The Bank is authorized to accept deposits and to mobaize financial resources forou^ Shari'ah 
:ompa!ibl8 modes. It is also charged with the responsibitityaf assistmg in the pmnotion of foreign trade espedaily in capKal goods, 
imong member countries; provicting technical assistancetomenfo&coimlries;at>d extending trairting fatties for personnel eitgaged 
n development activities in Muslim countries to conform to the Shan'*ah. 

rhe present membership of Oie Bank consists of 56 countries. Thebasiccondition for membership is that the prospective member 
auntry should be a member of the Organization of foe IslamicCorrference, pay its comribution to the capital of the Bank and be vriBing 
0 accept such terms and conditions as maybe dedded upon by foe IDB Board of Governors. 

iachmember country is represented on the Board by a Governor and an Alternate Governor. Each member has five hundred basic 
'Otes plus one vote for every share subscribed. Gener^ly. decisions are taken by the Board of Governors based on a m^orily of the 
'Oting power represented at the meeting. The Board of Governors meets once every year to review foe activities of foe Bank for foe 
irevious year and to decide future polides. In its annual meeting foe Board designates a Charmat, who holds office until foe election 
if another Chairman at the next Board meeting. The Board ca Governors is foe highest policy-making body. It can delegate powers to 
he Board of Executive Director.s far foe general operation of the Bank. However, ortiy foe Board of Governors can deal vrith issues 
elating to membership, increase or deaeaseinthe Bank's authorized caphal. authorize cooperation agreements with intematiMial and 
egionai organisations, election of the President and Executive Directors end decide thek remuneration. 

The Bank’s prindpal olTice is in Jeddah in foe Kingdom of Saud Aratxa. Two regiond offices ware evened in 1 994 ; one in Rabat 
Morocco, and the other in Kuala Lumpur. Malaysia. In July 1996, foe board of Executive Directors also approved the establishment of 
m IDB Representative Office atAknaty, Kazakhstan, to serve as a link between IDB member countries and Central Asian Repifoiics. 
rhe offfoe became operational fo July 1997 and is now a fofolledged Regional Office. The Bank also has field represenialives in eleven 
nember countries. These are: Indonesia. Iran. Kaz^stan, Libya. Pakisian, Senegal, Sudan, Gambia, Guinea Bissau, Meuiitana and 
Vgefia. 

Source: http;/fwww.isdb.Qfgfii)/portal/anonymous?N8vigatlonTar9et=navuri://338b0248cc316h93543d314b0123B28 
The Pubtic Institution far Social Security. Kuwait, 6.46%: 


Cuwait began a pension srfoeme on January 1, 19^ within the framework of civil serrant system in the public sector. The first 
ndependeni lawfw pensions was issued in Law Deaee No.3 of 1960. This covered government employees, civil and military, and was 
ollowedby an independent law far pensions and indemnities for foe irtiKiafy.fo accordance with law No. 27 of 1961, which came into 
orce on Septwnber 9fo.1961. 

rhe Public Institution far Sodal Security is a pubfic instituiion of independent budget, feving a legal personality artd subject to the 
iupervision of the Minist« of Finance. 

The Institution is managed by a Director General with four deputies. They are Sable for foe implementation of foe policy drawn by foe 
ioard of Directors. The Director General specifies foe Institution’s Depenmeras and foe specializaiion of each. 

fhe wOTksof foe Irtstitution are performed through five main sectors, which are General Administration Sector, insurance Sector, 
Automation Sector, Irvestment Sector & Insurance Senrice Personnel 

Source: hap:j'/www.pifss.gov.kw/english/index2_er9.htm 

(uwait Finance House, 5.25% 


(uwart Finance House (KFH or the Sartt) was incorporated in the State of Kuw^in1977. and is listed on foe Kuwait Stock Exchange 
with a market csprtaldaiion of US$ 1,950 million as of 31 December 2001- KFH has a an investment grade rating, and has been rated 
t3 by Moody’s. The Government of Kuwait owns 49% ofthe equity, and foe generel public holds the remaining shares. KFH is 
ingaged in providing Islamic bankirrg services, and its spectrum of activities indude consumer banking, teal estate financing, lease 
inanefog, vade finance and portfolio investing, alt of which are conducted in stiiacompfiancewhh Islamic Shari'a. The Barkis foe 
naritei leader in foe Islamic banking industry in Kuwait, and holds an estimated 20% of foe total deposit baseoffoa country. 

turing 2002, KFH received a number of regional and intenational awards, which affirmed the bank’s iinantial strength, quality of 
issets. and its status as one of foe leading banks in foe le^on. Inastudy carried out by Gulf Banking Consultants based on 2001 
tnanefol performance, KFH was ranked first amorrg 25 Gulf based banksin terms of 'economic value. 

nfoe global Islamic banking arena. KFH is on foe forefront of the industry in teims prolhabilhy and total assets under its management, 
n terms of total assets and ret protits. KFH is ranked second to 
Al Rajhi Banking and Investment Corporation, Sauck Arabia. 

rhe branch nehvork has grown to 29 brartches in Kuwait with separate ladies section. In addition KFH has also recognized foe impact 
if non-branch efistribution of senrices, both in terms of customer seivics and refojced costs. The bank has become a leader in exfdorling 
echnology to serve business needs and Ks e-5etvtces offer a range of services which we believe to be among foe most comprehensive 
n the vrorid. 

>oufce:http://www.k1h.com/engli8h/Aboutus/irdex asp 
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Knew Ycur Customer: islarre' Bank Bangladesh Limited 


btfiers, none wilh 5% or more shares. 43.34% 


l!^:«?emffit-Commentori the aiait'sorofessionaism. expertise, wawrienoa. and educaBon Of aefliofoflicefs / executives: 

^ Nasser Muhammad Abduz Zaher - Chairman of the Board {Repesentalive: Ibn Skia Pharmaceutical Industry Lsnited) 

iominio a devoted Muslim family at Corrtpanygo in Noakh^on .Xily 1, 194B. He achieved his Masters Degree in English Irteratjre 
rom the University of Rajshahi. He is the Managing Director of Ibn Sina Pharmaceuticals Industry Limhed. Restarted his professional 
ife with teaching at Khandaker Mosharrof Hossam Degree CoDege in the seventies. Later, he was assigned at the Royal Embassy of 
>3udi Arabia to Dhaka as Seaetary and performed duties for 13 years. He is the {^airman of Industrialists artd Businessmen 
\ssodation of Bangladesh. 

I'ousif Abduliah Ai-Rajhi - Vice Chairman (Representative; A)-Ra^ Co. for IndtsUyS Trade industrial Division) 

r'ousif Abdullah Al-Ra]hi obianed his Masters Degree from U.S A He is ihe General Manager of Al-RajhiCorr^any for Industry & 

Trade, K.S.A Earlier, he performed duties of Branch Manager and ProjedFirrance Manager of Al-Rajhi Backing and investment 
Ilorporation during 1987 to 1995. 

^Source: http:/Avww.newsgebd.cotn/2Q07/sep/04/busi.htin> 

V>dul Mannan, Managing Director 

tfohammad Abdul Mannan, Managing Director of Isiami Bank Bangladesh Limiiedjomed the bank at the time of Hs inception in 1983 as 
Public Relations Officer. Later, he worked irt its Nawsbpiff & Idampur Bratvih and served as Branch irtcumbent in efifferent capadties in 
iessore, Mouchakand Head Office Complex Corporate branch for more than a decade with Success. He received the First Best 
i^anager award of the bank for his outstanding performance in 1991 & 1993. He moved 1s Saudi Arabia in 1995 as tha BankAca,-<§,$s 
natkeiitrg & devdopment representative for KSA and subsequently he was simultar^eously assigned to live other Gulf Stales , namely 
(uwait. Qatar, Oman. B^rain and the U.A.E. He served in those GCC countries tillJune 2000 and did extensive groundwork for 
acilitating expatriate remittance to the country as well as to the bank. After retunting from his assignment in abroad he took the charge 
)f Head Office Complex Corporate Branch in ^gust 2000 and «mder Ns ieadersh^ the branch became one of die top branch of the 
tank within a short time. He was promoted to the post of Executive Vice Presidant in January 2003. Mr. Mannan took the charge of 

ntemational Bankktg Wing in August 2005. He was promoted as Deputy Executive President in 2006. 

Source - http://www.islam)bankbd.com/management.php 

ihamsul Hagts. Deputy Managing Director 

jfd. Shamsul Hague, a career barticer joined tsiami Bank Bangladesh Limiledin 19S4 as Principal Officer and served in different 
opacities in IBBL He worked as Second Officer of Harayaitganj Brartch & Rajshahi Branch. He also woiked as Manager of Rajshahi 
iranch, Bogra Branch and also worked as Manager of Foreign Exchange Corporate Branch, Dhaka. He headed Dhaka North ^ne and 
:hinagong Zone to help affiliated branches of respective Zones on progressive tine to ensure growth . He also headed Assets 
Management Division of IBBL and at present he las been entrusted with respons^^ for looking attar the Internal Control & 
:ampliance Wing of die Bank. He started his careerinthe Janata Bank as a Probationary Officar in 1979. Later on, he joined tha 
iervTces of United Comm^cial Bank Limited in 1984 and switched over to islamiBank Bangladesh Limited in the same year. He 
ibtainedhis Masters Degree with Honors in Accounting (Fmance Group) from Rajshahi University. He obiarred Bankir^ Diploma from 
he Institute of Bankers, Bangladesh. He participated in various trairwrg courses, semineis, conferences & workshops at home and 
tbroad and traveled Hongkong, Thailand, Singapore, Malaysia. CNna. Saudi AraNa. Australia. Iran, UAE and Bahrain, in recognition of 
lis meritorious services, he had been rewarded with GcM Medal for best manegetial performance in 1990 and again nominated as one 
>t the Best Marragers for the year 13S1 . He performed (he Holy Hajj In the year 2003. Mi. Hague was born in 1st September 1952 in a 
espectable Muslim family of Noahaia in the nei^borhood of RajdiaN Oivi^nai City. 

Source • htip:/A«>vw.isiamjbankbd.com/management.Fhp 

Mustafa Atwar, Vice Chairman 


ksource: htip;//www,isla mibankbd.com/mana gemerrt_d(s.php?MID=16> 



\ML Discussion • 03/29/201 1 

-ISBC attendees - Saad Ahmed 

2lient Attendees • Atigur Rahman l^adem 


)et3iled Description 
ExistHig /Mtachments 

since we conducted an FEDD visit to Islam! Bank Bangladesh Ltd. along with Mr. Paul M Kennedy, Managing Director, GB RG and 
Mien C H Chang, SVP, GB FIG on 01 Marti, we completed the customer due ditigence over phone. During the meeting, the [blowing 
ssues have been discussed and details are given b^ow; 
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Know Your Custoner: l^ami Bank Ban^adesh Limited 


ntroduction of Naw Business and Branch expansion; 

Ihere has been orrfy horizontal expansion of branch network. Tol^ 55 branches induding SME branches have been opened since 
'008. 

Ownership Changes: 

ihere has not been any major change m the Baiks owrrerst^. ARK conffnned (hat Mr. Abdullah Abdul Aziz AJ-Rajhi is holding more 
han 5% of the Bartk s total shareholding as an individual. 

Change in AML policy: 

3oth the Money Laur^eting Prevention Ordinance, 2008 and Anii-Terrorisn Act 2008 have been apisoved by the Government as 
^oney Laundering Prevention Act and the Anti- Terrorism Act in 2009. However, there has been no change from the ordinances. There 
tas been no change in the AML policy from last cjuestionercomptelion. They have not sent any reporiirtg to the Centra Bank regarding 
\ML transaction issue. They have an internal querterty tiainngan AML, ranging from the olficer level to Managers. 

'tent on-boarding process: 

slami Bank Ltd advised that tftey follow very strict KYC policy prescribed by the c^tral bank. For individual clients, photo ID of the 
xistraners fike passport, driving license etc. are obtained. In receitt days, copy of National Idemificalion Card is preferred. Two copies . 
ifcustixners photographs duly attested by the introducer, who is an existing cuslomer/acceptable person to the Bank is obtained, 
iame procedures are followed while on-boarding tocal corporate eitlities for each of the Directors/Sponsors. In case of CKiss-bofder 
diems, all the related documents must be vended by ttte Banglade^ Embassy in the country of domicile of the dient. For aoss-border 
tntities other that indi\riduais, reports are obtained thiou(^ crerfrt agencies ike Durr & Bradsireet and others. In addition to the above. 

0 meet Money laundering Prevention Act requirertwtt. possiUe Iransaciian profile of the dient is also recorded. 

’oiicy and sQtus regarding Money Business & other high risk customers: 

>eayng with any shell is not permissible in Bangladesh. Islarrti Bank Bangladesh Ltd does not accommodate any shell bank. According 
o ARK. they maintain relationships with some exchange houses to facilitate haivUing of inward remittance business. These exchange 
louses are maintaining account with ihem. But the accounts are opened only after me endorsement of Central Bank. Banglade^ 
iank, Central Bank considers transacting vi^ money exchange h^ses as l^h risk and presaibed specific gisdeiines to deal with titis. 
t requires the Money Services license issued by the Cenfr^ Bank or other appropriate authority of its country of domidle . Credit report 
romany int^nationaily reported ag^cy, audited rmandel of last three years, profile of all the directors etc. Also a certificate of 
clearance from the Ban^desh Const^ar Office in the country of domidle of the Moc«y Sewice is required before commencing the 
elationship with them. ARK confirmed titai Islami Bank does not deal with any predous metal or gem traders. 

LML Pdicy & screening process of restricted dients while on-boarding aird transactions: 

Bangladesh is a member of APG, an FATF style body on prevention of money laundering. All APG members commit to effective 
mplement the FATF's international standards iof anti-money laundering and combaiirtg the financing of terrorism, islami Bank advised 
hat as per their AML policy and gutdelirtes, the Branch and Head Office AML Compliartce Ofliceis are regularly monitoring the 
ransactions against a list of persons and entities suspected forteiTOrism which tsprowdedby the Ceniral Bank. Central Bank, 
Bangladesh Bank in Ks AML Circular No. 02 dated 17Jul2002 specificaDy identified the requirements of KYC and provided formats for 
egular reporting of abnormal/suspicious transactions. The Branch Managers of l^ami Bank Ltd are Branch Anti Money Laundering 
JompSance Officer (BAMLCO) who require to submit this report to Chief Anti Money Laundering Compliance Officer (CAM LCO) in the 
•lead Office. CAMLCO deddas whether to report the transaction to Central Banker rtot. CAMLCOis required to submit a quarterly 
eport to Central Bank on abnormal/suspidous trartsactions. 

Correspondent banking and payable through accovmts: 

slami Bartit Bavglade^ Ltd is not allowing any of their cusiomefs to provide correspondent banking services through their account 
naintained wHh HSBC Bank USA, N.A PeyaUe through account is also not pernfissible wititin the Banking guideline of the country. 


:sem site VWt ; 10n9l2010 

'iSBC Atierdees: Shefquat Hossain, Sadioue Reza • Mgr IB/HS5. Razi S Fakih - Acting CEO Ajnanah. Amhad Rabiul Hasan 
:ieitn Ait^ees: CGent Attendees: Aiigur Rahman Khadem • Principal Officer 
ritie: Visit Head Office 

The primary purpose of the visit was for Mr. Fakih to ascertain a greater understaraSng of the Islamic banking martiei in Bangladesh 
and to have an insight into the performance of Islami bartic in terms of ntarket penetration, market demographics, growth prospective 
and product assortment. 

Mr. Nurul Islam, DMD gave a power point presentatkm id the HSBC visiting teem. The presentation contained an over all finandal 
petformence history of the bank. With spedfic deliberation on an overview of their business growth (average growth 21% over the last 
decaite). asset (USD 3 biilian as at 31 Dec2009) growth (over 20% in last five years, liabikty (USD 3.5 billion as at 31Dec2010) ^owth 
[over 20% in the last five years), liquid'rty position and capital growth, also their wallet share position in the Islamic banking market of 
Bangladesh was explamedinihe said presentation along with the Islamic product propositions in offer by them. Mr. Islam also 
eluddated on the future of the Islamic banking market in Ban^tiadesh and Hs growth prospective in the coming years. With a market 
size of 136 ntilion (85% of 1 60 milfion) people growth potentials are tremendous for any sort of Islamic banking products in 
Bangladesh. Mr. Islam mentioned that they were aware of the Shariah council of HSBC and they were very appreciative of the 
coundl’s composition and the quality. 

Mr Fakih expired to the attendees to the preseriation about the Amanah proposition of HSBC and its overall gamete and scope in 
terms of operations and business objectives. Mr. F^h also motioned that he was very hopeful about the prospective of the Amanah 
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Know Your Cuslcfner: Istami Bank Bangladesh Lirr^ed 


initiative of HSBC in Bangladesh both in terms of growth and maitei penetration He advised the Islami bank's representatives that in 
future if they require any support or darifications on arty issues or product krrow how (Islamic banking prodidiis} they ate more than 
welcome to approach him for assistance and amdliary dialogue on the quarries at hand. 

Mr. Sadique Rsza advised that IB DAK has already presented the Automated Mi«abate Servise product of HSBC (overnight swir^) to 
Islami Bank Bangladesh Umiled. And the subject prodma is in discussion aitdconsiderBlkin (or availing by the said. 

Upon the complaiion of the presentation the HSBC team was directed to meet die managing director (Mr. Md Abdul Mannan} Islami 
Bank. Mr. Mannan cordially received the visiting team and advised that he was aware and welcomed the HSBC's Islamic banking 
Initiatives in Bangladesh and reiterated the positive prospects of such inttaiives. Mr. Fakih thanked Mr. Marman (br his insightful advice 
and infonrred Chat his (Mr. F^h} visits to the country wilt mcreasa in the coming days and years as the Am anah preposition develops 
ft^er to its growth to the pinnade of ihe country's islainc banking maiket/segment 


bnsite Visitation 1/20/2010 


Dimng the meeting Mr. Khadem confirmed that no incfivvlu^ shareholdar of ihe bank is holding over 10% of total shares of the Bank. 
The latest shareholding position has been requested. i‘dami BarA confitined that they do rrot have any off shore banking ectivities . 
They do not entertain any anonymous customer. There was one change in their senior management in last one year. 

Jit. Khadem advised that Islami Bank got its own AML poficies & guidetines in line with counOy's Money Laurrdering Prevention Act. 
’009. In the Act, all responsibilities have been entrusted with Bangladesh Bank to investigate and monitor ML cases in the Banks, 
slami Bank has got a Compiiarvce Department headedbya senior executive who is responsible for enforcing the AMLpdicies ailover 
he Bank, including the Branches. AML training has been included in the induction training for all staff. Workshops, Seminars and 
rainings on AML are conducted by the Compliance Departmentin regular imeivals. AML training programs with is induded in the 
oundation course for new incumbertts. 

Dnsite Visrlaiior 10/29/2009 

’fomising branch for large value DCs. Branch is veiy much wtiEng to gel confirmatians (ran HSBC with competitive pricing. They are 
istisfied wih HSBC's service. 


OoM the dent have KYC and Aiifl •Money Laundering (AM.) 

poUctoa and procedure* doouiMittod ? 

Yes O No 

If yes, haaacopybaenSadtndndMitne? 
(Required If dent M In a Rbk Counay ): 

• vesONo 

DoettheCSenfeKYCendAMLPoBclMendProcedues requfa* 
kleivfflcaiiori documentation »>d veritication when opetting an 
account? 

0Yes ONo 

Doae the Cient have a soneerwig prooets raganfino tti* 
procedures for the est^ishmeflt of new accounts (Mwflng 
obtaMno Information on the aourcei^hinde )? 

• Yes O No 

Does the dent offer accouna or service* to anonymous 
?.:< ' CUStMIMn? 

0 Yes # No 

Doe* the dent have an ongoing sysMm in piBoe to monitor and 
' ; report suspicious acM^ 7 

• Ye* 0 No 

What are the Brecedaeawhsnunususlsensacllons are 
detoOed os a result of toe CBent *« ongoing monRoring process 7 

When crtusual tf ansaction.s are delected, the transactions are 
report to the Branch Control Unit and Ihey would isport it to the 
Head Oflire. If oansactions is idemined as suspicious. Head 

Office would report il to the Caniral Bank. 

How are toe Cilsntfi KtSMMliiMcies end Piooedum 
communicaiad end ariNCsd of dbmeefc 

andfCrsignafflcee^t 

■ 5k • * >• 

Client's KYC and AML policies and procedures are commtmicated 
md enforced via their Ceriira! Control UnK and each Branch 
ConuotUnit. The Genual Conuoi Unit is reponsible Inr 
foimulatirtg the pctiides end procedures and monitor each Biairch 
Contri^ Unit. 

Dos* to* dam haw alDrihgi':/ Mdspudant Ani4ilarMy 

• Yes 0 No 

ifyasi doss toe dent provida AW’liliBhsytjtowd^^ Tndntog 
'■ te empfeyesf? 

#YesONo 

• - tfyaa.liowoftotitototoMA'l(rinlngiiiotfldedandtoiii^^ 

Continous uaintng is provided at least annually to each staff 
member. 

CenanMonto* Ciient'sKVCfnd AMLpndcM 
(pastipnegntandforMtie}: 

CTieni has provided a copy of their comprehensive AML 
guide&res. which covers areas such as identiricalion procedures 
fot new customers, record keeping, recognition ad reporting of 
su^ktious transactions, training and awareness etc. A copy of 
tttis document is in the cHenfs file. 
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Knew Your Custaner: Islami Bank Bangladesh Limited 


Does the Countiy tie CHent is kx:^ed in hsv8 iCiti and AM. 

laws and n^aiwit7| 


> Yes O No 


Kyae. comment on the counayHsKYC and AML pnacdcas {pa^ 
p((»«m«id/Qr1iitin}ra6aRfifl8preMnticmofnich^i»ii^^ 

andt er rortstfin an cInB: 


Bangladesh is utt a regional or offshore financial center. Ur^der 
areiater govemm^i that declared a state of emergency 
I it came to power on January 11, 2007, evidence of funds 
laundered through the official banking system escalated. The new 
gov e rnment instituted a stringent antienrruption campaign that 
nettedmore than SISO million in proceeds-a fiaclion of the 
estimated lual amount of corrupt furtds located both domesticsily 
and abroad. F^himg corruption is a keystorre of die caretaker 
govemrrantimder the state of emergency. Money transfers 
outside the formal banking and foreign exchange licensing system 
sie iUegai and therefore not regulated. The prindpai money 
HsuiKleting vulnerability remains the widespread use of die 
jimderground hawala or Tiundi' system to transfer money and 
value outside the formal banking netvrotk. The vast majority of 
hunefi transacdons in Bangladesh are used to repatnate wages 
fiom expatriate Sanj^adeshi workers, 
tn April and June 2009 the government promuigaled the Money 
Laundering FVevendon Ordinance {MLPO 2008} and the 
AnIi'Tenorism Ocfeiarce (ATO 2008). The laws facilHaie 
internaijonal cor^eration in recovering money illegally transferred 
to foreign enuniries and mutual legal assistance in terms of 
crkninal invesiigalion. trial proceedings, and extradition matters. 
The GOB has fomied a national level commitiee headed by the 
LawAdvfserand an kiiei -agency Task Force headed by the 
I Governor d' the CB to retrieve iHegatly transferred money. 

For die past twenty years, corrupt practices became so common 
|diai, between 2001 and 2005, Transparency IntemadDnal ranked 
Bangladesh in its Corruption Perception Index as the country with 
jihe highest level rrf percehed corruption in the world, in 2008, 
Bangladesh was ranked 147 out of 180 countries surveyed. 
Bangladeshis are not allowed to carry ca^ outside of the country 
excess erf the equivalent of $3,000 to South Asian Association 
for Reginnal Cooperation (SAARC) countries and the equivatent 
of SS.OOO to other countries. Proper documents are required by 
authorised foreign exchange barks and dealers. The GOB does 
not place a Kmit on how much currency can be brought into the 
csiuntry, but arrkounis over $5,000 must he declared within 30 
days. The Customs Bureau is primBrily s revenue collection 
agency, accounting for 40'50 penxnt of Bangladesh's annual 
government income. 

Although posiiK-e legislation has been passed and progress has 
been made, the Government of Bangladesh should continue to 
strengthen its anti-money found eringderrorist finance regime sa 
that it adheres to world standards. The GOB should support 
technology enhancements to reporting channels from outlying 
dislricis (o the Cental Bank. While the FlU fo grmving steadily, tiie 
FlU analysis and investigators need to enhance their abiAty to 
conduct analysis, investigations, understand money foundering 
terror (itmnce methodoingies and guide the ROs, Bangladesh 
law enfeveement and customs should examine forms of 
trade-based money laundering and initials money laundering and 
iinanciai crimes investigations at the 'street level* instead of 
waiting for a STR to be filed wKh the FlU. A mdreJown on 
pervasive customs fraud vrould add new revenue streams fw the 
GOB. Continued efforts .should be made to fight corruption, which 
is intertwined with money foundering, smuggling, customs fraud, 
and tax evasion. The GOB should ratify the UN Convention 
against Transnational Organized Crime. 

Source • 

htipyAvww. state 9Ov/p/inl.'rls/nrt:Tpt/201Q/datsba5e/l41512.him 


SourcMtsadfbrCoiffltryKYC.aupwvIsoiyrvgdmeandAlilLfofomaSonHveeiButlnttieHBUSAMLCQuniryn^Llat . Pleasa 
refbr tp Klf^ User Qutde . 


r 


T 
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Know Your Cusfcmer: Islami Bank Bangladesh LirTWted 


Has tha dent been BudSad 7 

^YcsOno 

tfyee.date: 

03/2a'2&10 

: -V, #yM,t>ywhoin{AudtFinm): 

Aziz Chowrihry (Chartered Accountants) 

& Howtedar Yuus & Co., (Chartered Accountants). Aucfitor's 
tepon iwas fovorabie 

Does the dent haw* e crstSl ralirto 7 

9Y8s O No 

r]W.«lajlMu«l>l (UP. Hooc^aolha): 

Credit R^g Information & Services (CRISL) 

i '■r;,-;:,:.-., ; ,r ■ , tfyes. <Me tssuecJ: 

06/21/2010 

If yee.aadit rating: 

LT; /\A; ST: ST-1 


Emptoylng reasonably avafcibte Mownallon , has due iMpeiioe 

# Yes O No 

been conduded on the dent ^ AML raawd? 

Has negative Intormatton been Uentfled 7 

O Yes # No 


Has Enhanced Due Diligence been conducted for this ti|^ RWt 
C8entA3ourilry,wMchincfcidesCorMtaice (lCRO}ctiBCkirig 
dAC S pubGc detabeses for flw names of the customer . 
principals/baneAdsI OHlnars, and exMitfve ofncefs7 

• ycsOno 

If yes, has CompSance confitmed foat foere is no direct adverse 
iiifoimiadcin fopreduifo busfoeas wttt thle client 7 

.• Yea O no 

ff yea. date: 

09/29/2009 

Data of moet recent KYC rovtoe: 

CI6/3a'20l0 

DepwrbnafAaftheAocoureMsnager / Attninishator' (AM) who 
prsparadBtlSDiOVe: 

dobal Payments & Cash Mgmt 


Signature Section 


, Account Martagar /AdminMtanr (AM) Approval 


dent Servlaea f Manager (CS) Approval 


Funcdonal Head of Budnecs / Exscudve (IS) Approvei 


RetadanbtpMMgar (FM4}ApptDvM 


Inatitulianal Bsnkfog /Team Leader (IB) Approval 


Ragioral Money Laundering Control Oflioar (CO) Approval: 



Created: 05/20^001 10:22:26 AM Converted from Epic 


05'23-2001 15:26 PM Creaiad by; <EP1C to KYC Corwerskm Pfoc8SS> 


^ddress>: 

Heed Office 

71 , DHkusha Commercial Ares 
Ohaka-IOOO Bangladesh 
BANO LADES H 


<Sl3tiJS> 

<caert Nanie> 

<Acct_oftf_cade> 

<Accl_offf> 

<Approval_acd_off(cer> 

<UnTl_offr_code> 

<Urui_mgri‘ 

«:Approva!_unit_ingr> 


:N - Needs Approval 

;1SLAM! BANK BANGLADESH UMITED 

:3431W 


:***Grsham, Russel *** 1(V19AJ0 10:43:20;61 
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Kno# Your Customer Islami Bank Bangladesh LimHed 


<Exec_dept> 

<Apptaval_exec_depl> 

<LegaLdepf> 

<Appt ovalJega!_de pt> 
<Legai dep commenls> 


AM Approved: (C4d Status in Process), 07/18/2001 12J8 PM: Ravi R Polu 
No Comments 


RM Denied; (OW Status AM Approved), 10/04/2001 05:15 PM; Beih Fisher 

1. Pis check shareholders. Pis add list of sharehcdders in Summary section. Refer to list in Almartac. 

2. Is shareholders' equity more or less than LISD25M? 

Tks. 


AM Approved; (Old Status RM Denied), 1Q/Q5/2001 12:27 PM: Ravi R Polu 
OWNERSHIP: 

AL RAJHi COMPANY FOR INDUSTRY AND TRADE. RiYADU 14.453% 

ISLAMIC DEVELOPMENT BANK, JEDDAH 7.55% 

KUWAIT FINANCE HOUSE KSC, SAFAT 5.286% 

THE PUBLIC INSTITUTiON FOR SOCIAL SECURITY. KUWAIT 8.503% 

HE ABDYLLAH ABDULLAH AL -RAJHI 7.223% 

HE MOHAMMAD ABDUL AZIZ 7.223% 

REST OF THE SHAREHOLDERS ARE PUBUC SPONSORS. GENER/V- PUBLIC AND GOVERNMENT OF BANGLADESH 


Approved; {Old Status AM Approved). 10/1 1/2001 08:49 AM: Beth Fisher 
Existing USD account with H0US. 


In Process; {Old Status Approved). 07/31/2003 01:09 PM. Rhonda Lee-Thomas 
Customer is sent back for re-approval 


AM /approved: {Old Status In Process). 0701/2003 04:45 PM: Rhonda Lee-Thomas 
Updated aS info. 


improved: {Old Status AM Approved), 07/31/2003 04:47 PM: Manwei Huang 
No Comments 


In Process: {Old Status Approved). 12/15/2004 10:07 PM: Rhonda Lee-Thomas 
Cuslomar is sent back for re-approval 


AM Approved: (Old Status in Process). 09/28/2005 11 :40 AM: Shannon M Jones 
KYC profile match supporting doc's on fUe 


CS Approved: (Old Status AM Approved). 09/26/2005 12:05 PM: SharynM^one 
No Commertis 


IS Denied: (OU Status CS i^ioved), 09/30/2005 03:01 PM: Boh Shetty 

Please review and recondte martagement /owrtersNp information with details appearing EDD 


AM Approved; (Old Status IS Denied). 06/22/2007 03:26 PM: Angela CasseB-Bush 
No Comments. 


CS Denied: (Old Status AM Approved). 06/29/2007 02:39 PM: Gillian E Bachsiein 

Pis update section VIII explaining the purpose of account and also update aciivity monharing details. Under general comments, 
define Islamic Sharia banking. 


AM Approved: {Old Status CS Denied), 07/02/2007 11:45 AM: Ang^ Cassefl-Bush 
ALL CS concerns ruted on 06/29/07 have been sddressed. 


CS Denied; (Ok) Status AM Approved), 07/11/2007 02 18 PM: Gillian E Baiistein 
Pis update %age ownership and variance report. 


AM /Approved: (Old Status CS Denied). 07/11/2007 02:45 PM; Angela Cassell-8u^ 
ALL CS concerns above have been addressed 
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Knoiv Your Custcmer: Islami Bank Bangladesh Limited 


CS Approved: (Old Status AM Approved), 07/1 1/2007 02:44 PM: <^lian E Bachstan 
NoCommenls 


IS Denied: (Old Status CS Approved). 08/30/2007 06:45 PM; Bob Sheity 
Please datify the ovinefship posifion of AJ 


AM Approved: (Old Status IS Denied). 09/06/2007 09:23 AM: Angda CasseO-Bush 

Profile previously IS denied due no response from the GRM regarding IS Approver request for a comment on the ovunership of the Al 
Rajhi family within this bsnkl. GRM has provided Ira comment which is docwnented ai Section 1 : General Comments Section. 


CS Approved: (Old Status AM Apprm'ed). 09/10/2007 10:40 AM: GiBian E Badrst^n 
No Comments 


IS Aj^rnved: (Old Status CS Approved). 09/120007 05:06 PM: Bob Sheny 
Based on GRM support and ciarificatian re ownerstap by A1 Ra^ Orgarezation. 


IB Denied: (Old Status IS Approved), 10/10/2007 02:04 PM: Lawrence Karp 
Subject bank not known to CIB. 


CS Approved: (Old Status AM /Approved), 12/0612007 1 1:26 /\M; GiGan E Bachstein 
No Comments 


IS Approved; (Old Status CS Approved). 12/11/2007 03:43 PM: Bob Sheny 
See my e^lier comments 


IB Approved: (Old Status IS Approved), 12/12/2007 09:02 AM: Christopher Lek 
NoCommenls 


Approved: (Old Status IB Approved). 03/10/2008 05:40 PM; /Van P WiOiamson 

Please provide explanation ofaciivily variances iNs account within 30 days. Also please note that visitation is due within a month. 


In Process: (Old Status Approved), 03/02/2010 05:04 PM: Jon K Jones 

Name of principals diarged from; [Arabsas Travel & Tourist Agency, Janab Yousif Abdullah Al-Rajhi.AI-Rajhi Co. for Industry & 
Trade, AhduRah Abdul Aziz AJ-Rajhi,lslamic Development Bank.The PutAc Instifution for Social Security, Kuwait Finance 
House, Others, none with 5% or more shares] to; [Arabsas Travel & Tourrsi Agency .Janab Yousif Abdullah AI-n^iAI-Rqhi Co. for 
Industry &Trade.AbduIlah Abdul Aziz Al-Ra^i.lslamic Development Bank.The PubKclnstitulionfor Sodal Security, Kuwait Finance 
House, Others, none with 5% or Greater] 

SankNoies Activity changed from: [See Banknotes Activity Section] to: (1 


AM Approved: (Old Status In Process). ^02/2010 05:05 PM: Jon K Jones 
NoCommenls 


CS Approved: (Old Status AM Approved). 03/31/2010 1 1:45 PM: Gillian E Bachstem 
No Comments 


IS Approved: (Old Status CS Approved), 06/07/2010 06:29 PM: Bob Sheny 
No Comments 


IB Approved: (Old Status IS Approved). QB/29/2010 it :48 AM: Wen Lu WU 
No Commanie 


Approved: (Old Status 16 Approved), 06/30/2010 1 1:39 /VM: Joanna S Flarragan 
No Comments 


In Process: (Old Status Approved), 06/03/201 1 02:14 AM: Atyeel NEOGI 

Name of principals changed from; (Arabsas Travel & Tourist Agency. Janab Yousif Abdullah ALR8)hi.AJ-RQjhi Co. for Industry & 
Trade.AbduUah Abdul Aziz /^-Rajhi.lskamic Development Bank.The PuWc Institution lor Social Securrty.Kuwart Finance 
House.Others, none with S% or Greater] to: [Arabsas Travel & Tourist Agettcy K.S.A,AJ Rajhi Company fnr Industry & Trade. Riyadh 
Al-JOiobaraSaudi /traUa.tsiamic Development Bank, JeddahSaudi /Yatra.The Public Institution for Sodal Security, Kuwait 
ChyKuwait, Kuwait Finance House KSC. Kuwait CciyKuwait.Abduiiah Abdul Aziz Al'R^i, KSA, Others, none whh 5% or Greater] 
Ownership percanlage changed from: [9.99, 9-94:9-.94.7.58.7,5, 6.46-, 5.25,43.34] lo;{9.99.9.94.7rS,e.46.5,2S;7.58,43.-?-3] 


f^jgon History 

Editor Date Reasoir for Update 


03/09/2012 04:37:44 PM 
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Know Your Qjstcoier: Islarr# Bank Bangladesh Limited 


Arijeel NEOGi 
Frashiah X Miiruri 
Frashiah X Muiruri 
Karyn X Scarfo 
DarieHe X Fawra 
Danielle X Fawra 
Danielle X Fawra 
Shannon M Jones 
Shannon M Jones 
Jon K Jones 


06/03/2011 D2:14-.58AM 
04/06/2011 1058:57 AM 
02/09/2011 10:03:00 AM 
02/02/2011 09:03:44 AM 
08/18/201002:19:19 PM 
08/17/2010 03:57:22 PM 
08/17/2010 03:36:33 PM 
08/10/2010 03:29:32 PM 
07/28/2010 01:24:55 PM 
06/30/201004:22:36 PM 


Amu^ Review. General Comments 
Update to US Pa) Cert date 
For BAU Proposes 
Updated viaftafion 

updated new RM— -prev memo incoired 
prev memo error — ^u!d be updated new RM 
update for potential exit of this relabanship 
Updated certilicalion date 
updated certificalion date 
Update Review Date for Fully approved 


CRR Re^5iQC.H)SlQfv. 


Last Updated By/ On 

Update TypetRctrVGcneral) 

Oid Value 

New Value 

AnjMt NEOGI - 6/3/201 1 2:15fi9 AM 

rpt epic a(Me5s2 

Ohaka - 1000 Bangladesh 

Dhaka, Bangladesh 1000 


Dhaia 


Status 

Approved 

n Process 


ipi_epie_nan>eOtCorpOflcers3 

tj^~ep«e_nameO(CorpOficers4 

rpt~^~nameOCorpOtl«fs5 

M. Faiiduddin Ahmad 

AbdtA Mannan 

ShatnsU Hague 

MudaM Anwar 


rpt epic nameOlPrincipalst 

Aiabsas Travel & Tourist Agency 

4rabsas Travel & Twrist Agency 


r^ ej^ nameOIPrincipaIs2 

Janab Yousif Abdullah AI-R^M 

Al Ra^l Comt»nyft>r Indushy & 1 


rpt epic nameOlPriocipals3 

Al-Rajhi Co. for Industry &Trade 

AFKhflbaraSaueS Arabia 


rpt epic nameOtPrinc^aisi 

Abdullah Abdul Adz M-Ra^i 

Islamic Devdopmeiit Bank, Jeddr 


rpt epic nameOfPrincxMiisS 

islarnc Oevdopment Bank 

Arabia 


rpt e|:4e nameOfPrindpais6 

The Public Institution tor Soelat Secunly 

The Public In^Uon for Social Si 


rpt epic nameOfPrincpab? 

KuwbX Ftnarrce House 

Kuwait CityKuweit 


rpt_epic_nameOtPnneipalsa 

Others, (tone Mih S% or Qealer 

Kuvart Ffoance House KSC, l^w 
CityKuwalt 

Abdullah Abcfol Aziz Al-Rajhi. KS/ 
Others, none with 5% wGreaier 


03/09/2012 04:37:44 PM 
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To: 


Cc: 

Subject: 

Date: 

Attach ments: 


Bean, Elise WSGAO 
RobEilsarL Mar\L[H5SAQ 


FW: Senate Inquiry 

Thursday, July 05, 2012 5:04:05 PM 

AML Policy of IBBLDdf 


From: Md. NumI Islam [mailtQ:mnislam<S>idamibankbd.cofn1 
Sent: Wednesday, July 04, 2012 08:52 AM 
To: Schram, Zachary (HSGAC) 

Subject: Senate Inquiry 

Dear Sir, 

Greetings! 

Please find below the responses of your queries; 

1. What is Islam! Bank's relationship with HSBC, including HSBC Bank USA (HBUS)? 

Islam! Bank Bangladesh Limited (IBBL) is the largest private sector commercial 
bank in Bangladesh which has got around 600 hundred correspondent banking 
network including almost all globally reputed banks in different locations. HSBC is 
one of such correspondent banks of Islami Bank Bangladesh Limited. In this process, 
Relationship between Islami Bank Bangladesh Ltd. and HSBC began in early 2000 by 
arranging RMA (Relationship Management Application) with different HSBC Group 
offices. Later, an USD account In HSBC Bank USA N.A. was opened on 1 1 October 
2000. The USD ACU (Asian Clearing Union) accounts with HSBC India and Pakistan 
were opened on 28 April 2006 and 23 July 2006 respectively. So far, we have got 
RMA arrangement with HSBC in 24 locations of the world which includes Australia, 
Brazil, Canada, China, Dhaka, Hong Kong, India, Indonesia, Italy, Japan, South 
Korea, Malaysia, Mexico, Pakistan, Peru, Singapore, Spain, Switzerland, Taiwan, 
Thailand, Turkey, UAE, UK and USA. The purpose of this relationship is to facilitate 
our foreign trade related transactions i.e. LC advising, trade confirmation, trade 

I pprinancnt Subcommittee on Investigations 

EXHIBIT #87a 


PSI-IBBL-01-0001 


VerDate Nov 24 2008 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 Frm 01012 


Fmt 6601 


Sfmt 6601 


P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




999 


VerDate Nov 24 2008 


payments, trade receipts, customer receipts and treasury coverage. 

2. What is Isiami Bank's relationship with the Ai Rajhi group and the A1 Rajhi family? 

At the outset. Central Bank took initiatives for establishment of Islamic Banking in 
Bangladesh, fslami Bank Bangladesh Limited was incorporated in 1983 with the initiatives 
of Government of Bangladesh including renowned local and foreign sponsors. Among the 
foreign sponsors, Islamic Development Bank, Kuwait Finance House, Kuwait, Dubai 
Isiami Bank, UAE, Bahrain Islami Bank, Bahrain, Ministry of Awqaf and Islamic Affairs, 
Kuwait (Present Name; Kuwait Awqaf Public Foundation, Kuwait), The Public Institution 
for Social Security, Kuwait, Al-Rajhi Company for Currency Exchange and Commerce 
KSA (Present Name: Al-Rajhi Company for Industry and Trade, KSA) and Ministry of 
Justice, Department of Minors Affairs Kuwait (Present Name: The Fhiblic Authority for 
Minors Affairs, Kuwait), Jordan Islamic Bank, Islamic Banking System International 
Hondlings S.A., Luxembourg were prominent. Government of Bangladesh joined with 5 
percent shares and continued until government decided to offload its shares from all private 
commercial banks. These entities edong with Al-Rajhi Company for Industry and Trade, 
KSA have been elected Director of our bank from time to time. At present Mr. Abdullah 
Abdul Aziz Al-Rajhi from Al-Rajhi family is also a shareholder and director of the Bank. 

3. What are Isiami Bank's KYC and AML practices? 

We have adopted our AML policy in line with Central Bank regulation and relevant acts of 
the government and follow the same strictly and meticulously. For details, please find 
attached our AML Policy. 

4. Did Abdur Rahman, chief of the JamaatuI Mujahidden of Bangladesh have any accounts 
at Isiami Bank? Please describe those accounts, including relevant dates. 

We have had no account in the name of either Abdur Rahman or the organization under 
question. 

5. What were the findings of any Central Back of Bangladesh investigation into Isiami 
Bank since 2005? 

Central Bank as a regulator of this Banking Industry conducts their regular and 
routine inspection & investigations from time to time since establishment of the Bank 
in 1983. Till today we do not have any mentionable outstanding issue with the 
Central Bank regarding the aforesaid investigations other than routine matters. 
However, an incident took place in 2006 in connection with some transactions 
originated from our Gazipur and Savar Branches through eight telegraphic transfers 
for an amount ranging from BDT 10,000(USD 144) to BDT 79,000 (USD1,137) of 
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altogether sum BDT 4,17,000 equivalent to approximately USD 6,000(United States 
Dollar six thousand). The transfers were destined to an account in the name of one 
Mr. Saidur Rahman who had opened account with our Laldighirpar Branch, Sylhet in 
February 1999 complying all usual norms. Initially, the concerned officials did not 
find anything suspicious in good faith. Upon inspection from Head Office, it was 
revealed that the transactions were made in an inoperative account and thereby 
suspicious in nature and then we made STR to Central Bank. Instantly, Bank also 
suspended the concerned officials. As the reporting was not done in time. Central 
Bank fined BDT one hundred thousand (equivalent to USD 1,439) and IBBL paid the 
amount. Later on, IBBL carried a thorough investigation on the matter and terminated 
the delinquent officials from the service of the bank. Mentionable that several banks 
including some foreign bank were also fined by Central Bank at that time due to 
failure of timely STR. 


6. Did the Internationa] Islamic Relief Organization have any accounts at Istami Bank? 
Please describe those accounts, including relevant dates. 

International Islamic Relief Organization (IIRO) had accounts bearing number 
^d tmBHHI^HBwith our bank. These accounts were opened 
on 17.04.1993 and 06.06.1994 respectively as a regular and approved NGO and maintained 
with our bank till 03.08.2010 along with other 2(two) Banks. As the entity was a UN 
sanction listed organization informed by Central Bank in 2006, we instantly freezed the 
accounts and confirmed our actions to the Central Bank and there was no transaction from 
that date to 03.08.2010 i.e till transfer, in 2010, we received instruction from Central Bank 
at the direction of Ministry of Finance, Government of Bangladesh to defreeze the accounts 
in the name of IIRO maintained with three banks including IBBL and transfer the accounts 
with IBBL to BASIC Bank, a Government owned bank and accordingly we confirmed our 
actions to Central Bank. 


We feel our reply will satisfy your query and please feel free to contact us if you have got any query 
further. 

Thanking You, 

Md. Nurui Islam 
Deputy Managing Director & 

Head of International Banking Wing 
tsiami Bank Bangladesh Limited 


* Perffctrii by the Permanent 
Subcommittee on Investigations 
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Original Message 

From; AMM FARHAD/Sociai islami Bank Limited. . 

To: Schram. Zachary (HSGAO 

Cc: ‘Golam Kihria. SiBL. ID' ; mds(aisib{-bd.com ; 'MR. MUHAMMAD AU ; 
KARIM- 

Sent: Tuesday. July 10, 2012 7:57 PM 
Subject: Re; Senate inquiry 



Dated: July 10, 2012 


Mr. Zachary Schram 
Senior Counsel 

Permanent Subcommittee on investigations 

United States Senate 

202-224-9379. 


Dear Sir, 

This has reference to your email dated June 30, 2012 and our subsequent reply dated July 5, 
2012 on your questionnaire, pursuantto your investigations on HSBC. 

In this regard, we furnish below our response to all your queries chronologically. 

1. What is Social fslami Bank's relationship with HSBC, including HSBC Bank USA (HBUS)? 
How has the relationship changed over time? 

Ans: Social Islami Bank Ltd. had account relationship with HSBC Bank USA for the purpose of 
reimbursement of import Payments against letters of credit opened by our different 
branches; receive export proceeds and also inwards remittance. 

Effective from May 2012 we DO NOT have any kind of relationship with HSBC, inciudlng HSBC 
Bank USA. 

2. What are Social Islami Bank's KYC and AML practices? 

Ans: Social Islami Bank Ltd. has its own AML Policy and separate AML Compliance Cell for 
fighting money laundering, terrorist financing and ensuring "know your customer" KYC. 


Permanent Subcommittc* on Investigationsl 
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The Bank's Management strictly ensures the compliance with all statutory and regulatory 
requirements, including designating AML Officer for this specific purpose and conducting 
training for staff at ati levels. 

Bank's compliance with Anti-Money-Laundering requirements and procedures is monitored 
by the Central Bank of Bangladesh (Bangladesh Bank) and also by Bank's internal and 
external auditors. 

Each and every account of the bank and any transaction in any account are fully complied 
with our KYC procedures. 

3. Piease describe the relationship of Social Istami Bank with the Al Rajhi group? 

Ans: Social Isiaml Bank DOES NOT have any kind of relationship with At Rajhi group. 

4. Was Abdul Majid of Singapore a director of Social Islami bank? Was the same Abdul 
Majid arrested by the Singapore government for terrorism-related activities? What 
was the result of any legal action against Mr Majid? 

Ans: SIBL Board had never a Director named Mr. Abdul Majid and as such the answer is that 
Mr. Abdul Majid of Singapore WAS NEVER a director of Social Islami bank. 


5. Piease describe the relationship of Social Islami Bank with the International Islamic Relief 
Organization (lIRO)? Is (or was) the lIRO a shareholder of Social Islami Bank? 

Ans: International Islamic Relief Organization (llRO) is a foreign shareholder of Social Islami 
Bank who currently holds 1,61% share of the bank. It is of mention that the bank doesn't 
have any transactions with this organization except that this organization purchased some 
primary shares of the bank when it was floated in 1995, during the year of bank's inception. 
In 2006 we came to know that the United Nations Security Council enlisted International 
Islamic Relief Organization (lIRO) under "Individuals and Entities Associated with Al Qaida" as 
one of the Directors of liRO was accused of having association with Al Qaida. 

The matter was viewed with due concern by the management and the Board of the bank. 
The management of the bank placed the issue before the Shareholders of the bank in the 
11th Annual General Meeting (AGM) held on 06.11.2006 and adopted a resolution 
unanimously that the whole shares held by International Islamic Relief Organization wilt be 
disposed off by way of sale/transfer in accordance with the law of Securities and Exchange 
Commission (SEC), Bangladesh Bank and in line with the law of the land. 

The matter was also taken to the notice of Bangladesh Bank and Securities Exchange 
Commission. The Centra! Bank issued instruction on 10.12.2006 not to disburse any bonus 
shares, issue of right shares or pay any cash dividend to iIRO until further instructions of 
Bangladesh Bank. 
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In compliance with the instructions of Bangladesh Bank, the bank immediately stopped 
issuing bonus shares, right shares and paying any cash dividend to IIRO. 

To overcome the situation the bank communicated vt/ith IIRO several times and requested 
them to dispose off their entire share held with the bank by way of sale/transfer but they did 
not respond to the bank’s request to offload their shares. 

A Board Memo was then placed before the Board of Directors of the bank on 30.06.2009 and 
the Board unanimously agreed to dispose off the whole shares held by Internationa! Islamic 
Relief Organization (IIRO). The Board of Directors also agreed to seek permission from the 
High Court praying for Court's intervention to sell the entire shareholding of IIRO in the 
capital market and the proceeds may be deposited in any government account/screw 
account or as would be determined by the Hon'bfe court of justice to save the Bank from any 
unwanted trouble and for smooth operation of the foreign exchange business of the Bank. 

But in 2010 Ministry of Finance, Government of the Peoples Republic of Bangladesh has 
issued a circular dated 31/05/2010 providing HRO permission to run their business/ activities 
legally in Bangladesh. 

The Central Bank has also endorsed the circular issued by the Ministry of Finance, 
Government of the Peoples Republic of Bangladesh vide their Letter No. AMLD-432010-2797 
dated 30.06.2010 and instructed us to comply with the Circular issued by the Ministry of 
Finance. 

Under the above circumstance, the bank is under definite obligation in paying dividend/ 
issuing bonus shares/ right shares to IIRO as per the instructions of the Central Bank and 
Ministry of Finance which were not paid/ issued in their favour til! 31/05/2010. 

06. Does (or did) IIRO have any accounts at Social Islam! Bank? Please describe those 
accounts, including relevant dates. 

Ans: IIRO has only one Foreign Currency Account with the bank which they opened in 1995 at 
the time of buying primary shares of the bank. Present balance of the account is zero. Other 
than that the bank does not have any sort of transaction in that account of IIRO . 

07. Please describe the relationship of Social islami Bank with the Islamic Charitable 
Society Lajnat al-Birr Al Islam (Lajnat ai*Birr)? Is (or was) the Lajnat al-Birr a 
shareholder of Social Islam! Bank? 

Ans: The Islamic Charitable Society Lajnat al-Birr Al Islam (Lajnat al-Birr) is a foreign 
shareholder of Social Islami Bank who currently holds 0.22% share of the bank. It is of 
mention that the bank doesn't have any transactions with this organization except that this 
organization purchased some primary shares of the bank when it was floated in 1995, during 
the year of bank's inception. 
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08. Does (or did) Lajnat al-Birr have any accounts at Social isiami Bank? Please describe 
those accounts, including relevant dates. 


Ans: Lajnat al-Birr DOES NOT have any account with the bank. 


Should you have any query or require further clarification please feel free to contact us. 


With thanks & Kinds regards. 
Sincerely Yours, 



A.M.M. Farhad 


Deputy Managing Director, 
Social Isiami Bank Ltd, 

Head Office, 


City Center, Level (18-21) 

103, Motijheel C/A, Dhaka, Bangladesh. 
Tel; + 88 Q9612001122 /S00O6 
Fax: + 88 02 9S64944 
E mail: 


Web: 

Skype: farhadamm 


Redacted by the Purmanent 
Subcommittee on lnvMtt{ 
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From: anne liddy/hbus/hsbc 

sent: 9/9/2008 7:25:51 AM 

To: DENISE A REILLY/HBUS/HSBC(aHSBC02 

cc: 

Subject: Fw: Hokuriku Bank Ltd- Compliance query 

Denise, do you know when Denis was planning on providing the overall summary 
document on this overall topic? I am anxious to review, including together 
with the below info, to determine if we need to file any further reports. 
Thanks. 

Anne Liddy 

SVP, AML compliance 1 HSBC Bank USA, N.A. 

452 5th Avenue, Tower 7, New York, NY 10018 


Phone 212-525-5906 

Fax 212 525 5769 

Ernai 1 anne . 1 i ddySus . hsbc . com 


Forwarded by Anne Li ddy/HBUS/HSBC on 09/09/2008 08:20 AM 

Dudy P Stoldt/HBUS/HSBC@HSBC02 
09/09/2008 07:25 AM 


Anne Liddy/HBUS/HSBC@HSBC, Oenise a Reilly/HBUS/HSBCSHSBC, Mary a 
C askin/HBUS/HSBC@HSBC 
cc 

Jonathan Dean/HBUS/HSBC@HSBC 
Subject 

Fw: Hokuriku Bank Ltd- Compliance query 


Information from Hokuriku Bank regarding some of the car dealerships thev do 
business with that we questioned. Its very limited information that took us 
over a month to get. 

3udy p stoldt 

vice President, AML Compliance I HSBC Bank USA, National Association 
One HSBC Center 
Buffalo, New York 14203 


Phone (716> 841- 6425 

Fax (212) 382 - 7586 

Email judy.p.stoldt@us.hsbc.com 


Forwarded by Judy p Stoldt/HBUS/HSBC on 09/09/2008 07:17 AM 

Ako kobayashi/tky/hbap/hsbc@hsbc 
09/09/2008 03:52 AM 

To 

Judy P Sto1dt/HBUS/HSBC@HSBC02 
CC 

Anthony Julian/HBU5/HSBC@HSBC02, Garie S K HO/PCM ASP/HBAP/H5BC@HSBC, 

Jennifer 

E Kelleher/HBUS/HSBC@HSBC02, Stephanie L 

BPfrmanent Subcommittee on Investie8t»ons B 
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Napier/HBUS/HSBC(aHSBC02, Saeka TAKEBAYASHI/TKY/HBAP/HSBC@HSBC 
subject 

Re: Fw: Hokunku Bank Ltd- Compliance query 


Judy, 


Thank you for waiting. Please find attached the original copy prepared by 
Hokuriku Bank and the one translated by myself. 


Hope it helps. 

Regarding the other batch, I shall forward the information as soon as details 
are received. 

Best regards, 

Ako Kobayashi 
PCM Client Services 
HSBC, Tokyo 


Dudy P Stoldt/HBUS/HSBC@HSBC02 
08 Sep 2008 21:35 Mail Size: 49719 

To 

Ako KOBAYASHl/TKY/HBAP/HSBC@HSBC 
CC 

Subject 

Re: Fw: Hokuriku Bank Ltd- Compliance query 


our Ref 
Your Ref 


Ako, 

Thank you for your assistance in getting us the information. 

Regards, 

Judy P Stoldt 

Vice President, AML compliance j HSBC Bank USA, National Association 
one HSBC Center 
Buffalo, New York 14203 


page 2 


14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm01020 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



1007 


Occ-Psi -00409214 

Phone (716) 841- 6425 

Fax (212) 382 - 7586 

Email judy.p.stoldt@us.hsbc.com 


Ako KOBAYASHl/TKY/HBAP/HSBC@HSBC 

09/08/2008 05:58 AM 


:udy P Stoldt/HBUS/HSBC@HSBC02 

Anthony Julian/HBUS/HSBC@HSBC02, Garie s K HO/pCM asp/hbap/hsbc@hsbc, 

E^Kelldher/HBUS/HSBC@HSBC02, Jennifer fong/tky/h8ap/hsbc@hsbc, Stephanie L 
Napi er/HBUS/HSBC@HSBC02 
Subject 

Fw: Hokuriku Bank Ltd- compliance query 


Judy, 

I have called Hokuriku Bank and received the required information. However as 
the information is provided in Japanese, I shall foward it as soon as 
translation is ready. It won't take long. 

Appreciate your understanding. 

Best regards, 


Ako Kobayashi 
PCM Client services 
HSBC, Tokyo 

Forwarded by Ako KOBAYASHI/tky/hbap/hsbc on 2008/09/08 18:54 

Ako kobayashi/tky/hbap/hsbc 
06 Sep 2008 12:14 Mail Size: 42762 
Phone NO. 813 5203 3161 


•Stephanie L Napier/HBUS/HSBC@HSBC02 

Anthony Julian/HBUS/HSBC@HSBC02, Garie S K HO/pcm asp/HBAP/HSBC@HSBC, 

E^Kelleher/HBus/HSBC@HSBC02, Jennifer fong/tky/hbap/hsbc@hsbc, Judy P 
Sto1dt/HBUS/HSBC@HSBC02 
Subject 

Re: Fw: Hokuriku Bank Ltd- compliance query 


our Ref 
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Your Ref 


Stephanie, 

Noted. I shall call Hokuriku Bank again first thing Monday morning and give 
Judy the update. 

Best regards, 

Ako Kobayashi 
PCM client Services 
HSBC, Tokyo 


Stephanie L Napier/HBUS/HSBC@H5BC02 
06 Sep 2008 00:12 Mail Size: 36347 

To 

Ako KOBAYASHI/TKY/HBAP/HSBCOHSBC 
CC 

Garie 5 K HO/PCM ASP/HBAP/hsbc®HSBC, Jennifer FONG/TKY/hbap/HSBC@HSBC, Judy 
P 

5toldt/HBU5/HSBC(aHSBC02, Anthony Julian/HBU5/H5BC@HSBC02, Jennifer E 
Kel 1 eher/HBUS/HSBC(&H5BC02 
Subject 

Re: Fw: Hokuriku Bank Ltd- Compliance query 


Our Ref 
Your Ref 


Ako, this has been a long outstanding request, it is imperative that 
Compliance receive the response to our inquiry. Please urgently follow-up 
with client. 


Best regards, 

Stephanie L Napier 

AVP AML compliance 1 HSBC Bank usA 
90 Christiana Road, New castle, DE 19720 


Phone. 302 327 2161 

Fax. 302-3272250 

Email . Stephanie. 1 .napier@us.hsbc. com 


Ako K0BAYA5HI/TKY/HBAP/HSBC@HSBC 
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09/03/2008 04:33 AM 
To 

Stephanie L Napier/HBUS/HSBC@HSBC02 
cc 

Jennifer fong/tky/hbap/hsbc@hsbc, Garie s K HO/PCM asp/hbap/hsbcOhsbc 
subject 

Re: Fw: Hokuriku Bank Ltd- compliance query 


Stephanie, 

Regarding the information requested, I have contacted Hokuriku Bank and was 
advised that the report has already been prepared, i shall forward it to you as 
soon as the copy has been received. 

Best regards, 

Ako Kobayashi 
PCM Client Services 
HSBC, Tokyo 


Stephanie L Napier/HBUS/HSBC@HSBC02 
02 Sep 2008 23:28 Mail Size: 28276 

TO 

Ako KOBAYASHl/TKY/HBAP/HSBC@HSBC 
cc 

Subject 

Fw; Hokuriku Bank Ltd- compliance query 


Our Ref 
Your Ref 


Ako, I understand you have replaced Yumi . Please follow-up on the promised 
information. 

Best regards, 

.Stephanie L Napier 
AVP AML compliance | HSBC Bank USA 
90 Christiana Road, New castle, DE 19720 


Phone. 
Fax. 
Emai 1 . 


302 327 2161 
302-3272250 

Stephanie . 1 . napi er@us . hsbc . com 
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Forwarded by Stephanie L Napier/HBUS/HSBC on 09/02/2008 10:26 AM 

Kyoko okazaki/tky/hbap/hsbc@hsbc 
08/07/2008 10:54 PM 

TO 

Stephanie L Napi er/HBUS/HSBC@HSBC02 
cc 

Judy P Stoldt/HBUS/HSBC@HSBC02, Nanayo Ryan/HBUS/HSBC©HSBC02 , Yumi 
S ETO/TKY/H BA P/H S BC@HS BC 
Subject 

Re: Hokuriku Bank Ltd- compliance query 


Dear Stephanie, 

They are still preparing the report and will provide us within 4th week of 
AUG08. 

Kind regards, 

Kyoko Okazaki 
PCM Client Services 
HSBC Tokyo 


Stephanie L Napier/H8Us/HSBC@HSBC02 
06 Aug 2008 00:27 Mail size: 21975 

TO 

Yumi SETO/TKY/HBAP/HSBC@HSBC 
CC 

Judy p Stoldt/HBUS/HSBC@HSBC02, Kyoko okazaki/tky/hbap/hsbc©hsbc, Nanayo 
Ryan/HBUS/HSeC®HSec02 
subject 

Re: Hokuriku Bank Ltd- Compliance query 


Our Ref 
Your Ref 

Yumi, please advise status of information required. 
Thanks 

Best regards, 
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Stephanie L Napier 

AVP AML compliance | HSBC Bank usA 
90 Christiana Road, New Castle, DE 19720 


Phone. 302 327 2161 
Fax. 302-3272250 

Email . Stephanie. 1 .napier@us.hsbc.com 


Yumi SETO/TKY/HBAP/HSBC@HSBC 
07/28/2008 04:43 AM 

TO 

Stephanie L Napier/HBUS/HSBC@HSBC02 
cc 

ludy P Stoldt/HBUS/HSBC@HSBC02, Kyoko OKAZAKI/TKY/HBAP/HS8C0HSBC, Nanayo 

Ryan/HBUS/HSBC@HS8C02 

Subject 

Re: Hokuriku Bank Ltd- compliance query 


Stephanie 

They are preparing the report. 

Yumi Seto 

PCM Client service 

HSBC Tokyo 


Stephanie L Napier/HBUS/HSBC@HSBC02 
26 :ul 2008 04:23 Mail Size; 14298 

TO 

Yumi SETO/TKY/HBAP/HSBC@HSBC 
CC 

Judy P Stoldt/H8US/HSBC@HSBC02, Kyoko OKAZAKI/TKY/HBAP/HSBC@HSBC, Nanayo 
Ryan/HBUS/HSBC@HSBC02 
Subject 

Re: Hokuriku Bank Ltd- Compliance query 


our Ref 
Your Ref 

Yumi, just a quick follow-up. Any update? 
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Best regards, 

Stephanie L Napier 

Avp AML Compliance 1 HSBC Bank USA 
90 Christiana Road, New Castle, DE 19720 


Phone. 302 327 2161 
Fax. 302-3272250 

Email . stephanie.l , napier@us.hsbc.com 


Yumi SETO/TKY/HBAP/HSBC@HSBC 
07/15/2008 02:46 AM 

TO 

Stephanie l Napier/HBUS/HSBC@Hsac02 
cc 

ludy P Stoldt/HBUS/HSBC@HSBC02, Kyoko OKAZAKl/TKY/HBAP/HSBC@HSBC, Nanayo 
Ryan/HBUS/HSBC@HSBC02 
Subject 

Re: Hokuriku Bank Ltd- Compliance query 


Stephanie 

we have today contacted Hokuriku Bank Ltd. 

On receipt of their reply, we will advise you. 

Thanks and regards, 

Yumi seto 

PCM client service 

HSBC Tokyo 


Stephanie L Napier/HBUS/HSBC®HSBC02 
15 :ul 2008 01:13 Mail Size: 173608 

TO 

Yumi SETO/TKY/HBAP/HSBCOHSBC 
cc 

Kyoko OKAZAKI/TKY/HBAP/HSBCOHSBC, Nanayo Ryan/HBUS/HSBC@HSBC02 , 3udy P 
stol dt/HBUS/HSBC@HSac02 
Subject 

Hokuriku Bank Ltd- compliance query 


our Ref 
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= Redacted by the Permanent 
Subcommittee on Investigations 


Yum1 , hope all is well. As you know I moved on to Compliance. I am tasked with 
^rge^Momtoring. We have undertaken a review of Hokuriku Bank acct 
tHtBBHIl We've noticed a pattern of payments which we seek information for 
the Beneficiary & Originator (if known), our inquiry is based on either 
insufficient details within the payment or lack of internet information to 
adequately research BEN or ORG. 

We'd appreciate your reaching out to the client to obtain requested 
information. Thank you in advance. 

Parties in question: 

Name #Trans Period Stotal 

De Araujo Roseli Aparecida 6 4/08-5/08 $24,480 

Aksys Corporation, Japan 3 all 5/7/08 $60,000 

R 5 Corporation 3 5/08 $54,000 

Sanhu Corporation Imizi-shi Shitim 15 4/08-6/08 $810,800 

I have attached a sample payment for each. 

[attachment "rl495569.tif" deleted by Stephanie L Napi er/HBU5/HSBC] 


Below Information being sought 


Individual Address & dob or Customer LocationC whichever is applicable): 
place of incorporation ( if applicable): 

Nature of business: 

Beneficial owners (if applicable): 

How long a client: 

Reason for the transfer(s): 

Does the bank's due diligence on this customer and transact! on (s) appear 
satisfactory. 

Relationship between the originator / beneficiary if known 


Best regards, 

Stephanie L Napier 

AVP AML Compliance i HSBC Bank USA 
90 Christiana Road, New Castle, DE 19720 


Phone. 302 327 2161 
Fax. 302-3272250 

Email . Stephanie. 1 .napier@us.hsbc.com 
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Oe Araujo Roseli Aparecida 

Aksys Con>orat)on 

R S Corporation 

Sanhu Corp Imizi-shi Shitim 

Address 

1-3-20, Shoseimachi, Imizu-shi. 
Toyama Pref, Japan 

200 Shichimi Nakano, imizu-shi, 
Toyama Pref. Japan 

608-1 Kosugishiraishi. imizu-shi, 
Toyama Pref, Japan 

34 Shichimi, Imizu-shi 

Toyama Pref, Japan 

Postal Code 

934-0001 

933-0253 

939-0304 

933-0252 

Date of Establishment 

04Feb1958 

08Jun2007 

12Mar2002 

020ct2001 

Place of Incorporation 

- 



Imizu-shi, Toyama Pref 

Nature of Business 

Business man 

Sales of Used Cars 

Sales of Used Cars 

Sales of Used Cars 

Beneficial Owners 



- 

Raheel Akutal (???) 

* not sure about the spelling 
(date of birth; 01Oct1961) 

Reason for Transfer(s) 

TC is required in order to identify 
the reason for transfer 

Sales of Used Cars 

Sales of Used Cars 

Sales of Used Cars 

Bank's Due Diligence 

N/A (They maintain a savings account only.) 1 

Relationship between 
Oriqinator 

Satisfactory (no issues) 

Purchase of TC 

(• Visit made by Hokuriku staff.) 

Purchase of TC 

(• Visit made by Hokuriku staff.) 

Purchase of TC 

(* Visit made by Hokuriku staff.) 

AOB 

The owner works with a company 
called SuQimoio. 

Public company 

Company with limited liability 

Company with limitdd liability 


76061.442 
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From: ANTHONY JULIAN/HBUS/HSBC 
sent: 11/13/2008 8:39:04 AM 

To: DENIS E O'BRIEN/HBUS/HSBC@HSBC02;3UDY P STOLDT/HBUS/HSBC@HSBC02 

cc: 

subject: Fw: Hokuriku Bank 

Machiko M YAMASHITA/TKY/HBAP/HSBC(3HSBC 
09/12/2008 06:52 AM 

To 

Anthony 3ulian/HBUS/HSBG@HSBC02 
cc 

Ako KOBAYASHl/TKY/HBAP/HSBC@HSBC, Alan P Will iamson/HBUS/HSBC@HSBC02 , Cam 
ADAMS/PCM ASP/HBAP/HSBC@HSBC, Hideki matsumoto/tky/hbap/hsbc@hsbc, Michael B 
Ganagher/HBUS/HSBC(3HSBC02, Navin gupta/txy/HBAp/hsbc@hsbc, Richard iaggard/pcm 
ASP/HBAP/HSBC@HSBC, Takahiko KANECHIKUAKy/HBAP/HSBC@HSBC, Thomas W 
Hal pi n/HBUS/HSBCi3HSBC02 
Subject 

FW: Hokuriku Bank 


Anthony 

My apologies. I sent mistakenly to Julian Anthony. 

sorry and Regards 

Yamashita 

Forwarded by Machiko M YAMASHITA/TKY/HBAP/HSBC on 2008/09/12 19:49 

Machiko M yamashita/tky/hbap/hsbc 
12 sep 2008 19:01 Mail Size: 35523 
Phone NO. 813 5203 3328 

TO 

Julian H anthony/pfs pun/hbap/hsbc@hsbc 
cc 

Ako kobayashi/tky/hbap/hsbc@hsbc, Alan p winiamson/HBUS/HSBC©HSBC02, cam 
ADAMS/PCM ASP/HBAP/HSBCSHSBC, Hideki MATSUMOTO/TKY/HBAP/HSBC@HSBC, Michael B 
Ganagher/HBUS/HSBC@HSBC02, Navin gupta/tky/hbap/hsbc@H 5BC, Richard jaggard/pcm 
ASP/HBAP/HSBC@HSBC, Takahiko kanechiku/tky/hbap/hsbcOhsbc, Thomas w 
Hal pi n/HBUS/fHSBC@HSBC02 
Subject 

fw: Hokuriku Bank 


Our Ref 
Your Ref 


Anthony 

we informed them that due to regulatory burden, HBUS decided to cease 

Page 1 
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processing bulk TCs used for business purpose but continue processing other 
ordinary TCs. Also informed that this decision is not made only for the deals 
with Holcuriku Bank but also for any other banks. 

Their response is as follows. 

They wish you to allow respite until they will fix time frame to meet with your 
decision given the following internal situation at their end. 

- First of all , they should consider whether or not they will continue dealing 
this business. 

- If they continue the business; 1) they have to select alternative provider. 

As you mentioned, it is true that there are several candidates in Japan but it 
may not be easy for them to select the most appropriate provider as they should 
consider pricing, procedure and etc through selecting process; and 2) they need 
to change their internal system and procedure. (As mentioned in my [previous 
LN, their systems including accounting system are arranged to deal with hbus. 

They also have to change their procedure manual etc. to meet with the 
alternative provider’s processing manner. ) 

- As you may be aware, September is the month for their interim fiscal period 
and due to this, it is one of the busiest months for Hokuriku Bank (not only 
for them but also for Japanese banks). 

As to sort out TCs which HBUS can continuously deal with, they wish to know the 
clear definition of bulk TCs 

We suggest that we should withdraw very carefully given the fact that Japanese 
regional banks' world is very small. If we will gush Hokuriku drastically, 

HSBC may likely have bad reputation on our PCM business in this marketplace. 

Your feedback would be appreciated. 

Regards 

Yamashita 

— — Forwarded by Machiko M YAMASHITA/TKY/HBAP/HSBC on 2008/09/12 18:55 

Anthony Julian/HBUS/HSBC@HSBC02 
12 Sep 2008 06:48 Mail Size: 30103 

To 

Machiko M yamashitaAky/hbap/hsbcqhsbc 
cc 

Ako kobayashi/tky/hbap/hsbc@hsbc, Alan p winiamson/HBUS/H5BC@HSBC02, cam 
ADAMS/PCM ASP/H8AP/HSBC@HSBC, Hideki matsumoto/tky/hbap/hsbc@hsbc, Michael B 
Ganagher/HBUS/HSBC@HSBC02. Navin gupta/tky/hbap/hsbc@hsbc, Richard jaggard/pcm 
ASP/HBAP/HSBC 0HSBC, Takahiko KANECHIKU/TKY/HBAP/HSBC@HSBC, ThoiTOS W 
Hal pi n/HBUs/HSBC@Hsec02 
subject 

Re: Fw: Hokuriku Bank 


Our Ref 
Your Ref 


Please note that HBUS senior management has reviewed this service extensively 
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and determined that we can not continue to support this business. Thiis is not 
an issue for negotiation with Hokuriku. HBUS has decided to withdraw from 
processing bulk quantities of TCs, as the regulatory burden is costly and the 
operational / regulatory risk is not acceptable. 

we respect Hokuriku's perspectivcj and 30 days notification should be 
acceptable for withdrawal of services (as stated in our cash letter 
documentation) . 

As Cash Letter is a manual process, there should' be no significant systemic 
issues with them shi-fting this business to another proyider. Hokuriku 
maintains accounts with all of the major USD service providers (citi. Chase, 
Bony, Wachovia, Deutsche, Amex, etc), each of whom offer competitive Cash 
Letter services. They can shift this business relatively easily, and we would 
appreciate their cooperation in ceasing bulk TC deposit as soon as possible, 
we will return bulk TC deposits received by HBUS after October 12. 

Thanks and best regards 


Anthony Julian 
First Vice President 
HSBC Bank USA, N.A. 

Global Transaction Banking 
office: (302) 327-2665 
Mobile (BB): 


~ “ Redacted by the Pemianenl 

Subcommittee on Investigations 


Machiko M yamashita/tky/hbap/hsbc@hsbc 
09/11/2008 05:07 AM 

To 

Alan P Williamson/HBUS/HSBC@HSBC02 
cc 

Ako KqBAYASHI/TKY/HBAP/HSBC0HSBC, Anthony lulian/HBUS/HSBC(aHSBC02, Cam 
ADAMS/PCM ASP/hbap/HSBC@hsbc, Michael B Ganagher/HBUS/HSBC@HSBC02, Richard 
JAGGARD/PCM ASP/HEAP/HSBC@HSBC, Takahiko kanechiku/tky/hbap/hsbcShsbc, Thomas w 
Halpin/HBUS/HSBC@HS8C02,. Navin gupta/tky/hbap/hsbc@hsbc, Hideki 
MATSUM0T0/TKY/HBAP/HSBC@HS8C 
subject 

Fw: Hokuriku Bank 


Dear Alan 

Matsumoto-san and myself visited Mr. Takahashi, gm and Mr. Takarada, Deputy MGR 
of International operations center to advise o-f your decision. 

we conveyed the message that we understand that AML process is appropriately 
taken by Hokuriku Bank as Anthony commented and the point we intended to 
discuss is how we enhance process to avoid unnecessary internal process on our 
side. 

During the discussion, we confirmed again the background of relevant 
transactions. 
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- Most of their customers related to this issue are used-car dealers for 
Russian buyers who are cash account holders of Hokuriku Bank through 
appropriate AML process. 

- The dealers are doing cash on delivery type of deals with buyers, in this 
market therefore cash or TCs are normally used to accommodate those deals. As 
such Hokuriku Bank considers it is difficult for its customers to shift their 
payment method to wire transfers or commercial check from TCs. 

- HBUS is currently the sole cash Letter provider for Hokuriku Bank and if we 
stop providing this service to Hokuriku Bank, it needs reasonable grace period 
to find out alternative service provider and re-adjust its system which is 
currently arranged/designed to meet hbus's requirement and also make sure the 
new internal process with all relevant branches/offices. 

- Since relevant customers are limited around 20 - 25 names and they are all 

cash account holders of Hokuriku Bank, Hokuriku Bank is well prepared to 
cooperate with HBUS by providing necessary information / arranging operational 
process in order to help HBUS to streamline the process. as such if there 

are any measures to reduce your processing burden, they are open to discuss on 
that. For that, they wish to understand what is exactly the issue in your 
processing of the TCs Tn problem. They have already been following your 
requirement on high value deposit (exceeding USD20k per deposit), under which 
they have been providing their customers’ information including name, address 
and business as well as amount and number of TCs. if HBUS requires further 
more information and/or different process, Hokuriku Bank is ready to discuss on 
that . 

Your feedback would be appreciated. 

Regards 

Machiko Yamashita, FIG TKY 

Forwarded by Machiko M YAMASHITa/tky/hbap/hsbc on 2008/09/11 17:34 

Alan P Winiamson/HBUS/HSBC(aHSBC02 
11 Sep 2008 01:22 Mail Size; 18427 

TO 

Hideki matsumoto/tky/hbap/hsbc@hsbc, Navin gupta/tky/hbap/hsbc@hsbc, Machiko 
M 

YAMASHITA/TKY/HBAP/HSBC@HSBC 

CC 

Ako KOBAYA5Hl/TKY/HeAP/HSeC@HSBC, Anthony 3ulian/HBUS/HSBC@HSBC02, Cam • 
ADAMS/PCM asp/hbap/hsbCShsbC, Michael B Gallagher/HBUS/HSBC@HSBC02, Richard . 
JAGGARD/PCM ASP/HBAP/HSBC@HSBC, Takahiko KANECHIKU/TKY/HBAP/HSBC@HSBC, ThomaS 
Hal pi n/HByS/HSBC@HSBC02 
Subject 

Re: Hokuriku Bank 


Our Ref 
Your Ref 


Gentl emen 
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Can I ask for the status on this matter? 

Thank you all for your help. 

Alan 

original Message 

From: Hideki matsumoto 
sent: 09/05/2008 09:35 AM 2E9 
To: Navin GUPTA; Machiko M YAMASHUA 
Cc: Ako KOBAYASHI; Alan p Williamson; Anthony 
Julian/HBUS/HSBC@HSBCAMERICAS; Cam ADAMS; Michael Gallagher; Richard 3AGGARD; 
Takahiko KANECHIKU; Thomas w Hal pin 
subject: Re: Hokuriku Bank 

Navi n 

RM is Yamashita san for Hokuriku Bk. 

Yamashita san 

it seems internal due date is tight for them to change structure involving 
their own clients, shall we move quickly to discuss on this with Hokuriku Bk. 

rgds, hideki 


Navin GUPTA/TKY/HBAP/HSBC 

05 Sep 2008 08:29 Mail Size: 14141 

Phone NO. 813 5203 4252 

To . 

Takahiko kanechiku/tky/hbap/hsbcOhsbc, Hideki matsumoto/tky/hbap/hsbc@hsbc 
A lan P Wllliamson/HBUS/HSBC@HSBC02, Anthony 3ulian/HBUS/HSBC@H5BCAMERICAS, 

Cam 

ADAMS/PCM asp/hbap/hsbcShsbc, Michael B Gallagher/HBUS/HSBC@HSBC02, Richard 
3AGGARD/PCM ASP/HBAP/HSBC0HSBC , Thomas W Halpin/HBUS/H5BC®H5BC02, Ako 

kobayashi/tky/hbap/hsbc@hsbc 

Subject , 

Re; Hokuriku Bank 


Our Ref 
Your Ref 

Kanechiku san, 

Request your support in commuincation to Hokuriku bank as below. 
Warm Rgs, Navin 
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Fred SHYUR/PCM ASP/HBAP/HSBC 
09/05/2008 07:40 AM 
Mall Size: 3916 

To 

cam ADAMS/PCM ASP/HBAP/HSBC@HSBC, Navin GUPTA/TKY/HBAP/HSBC(aHSBC„ Anthony 
lul 1 an/HBUS/HSBC@HSBCAMERICAS<aREPUBLIC 
cc 

Thomas w Halp1n/HBUS/HSBC@HSBC02, Michael B Gallagher/HBUS/HSBC^HSBCOZ, 

Richard 

lAGGARD/PCM ASP/HBAP/HSBC@HSBC , Alan P Winiamson/HBUS/HSBC(a.HSBC02 
Subject 

Re: Hokun’ku Bank 
our Ref 

Your Ref 


Cam and Navin , 


FYi. Please kindly work with Anthony and Alan on the AML issue below. 
Regards, 

Fred shyur 


******i'1t**'b********1i****ieit**itir***ie****±1t****ii**1:*1r*ift;**mr*** 

The Hongkong and Shanghai Banking corporation Limite 
whose registered address is 1 Queen's Road Central, 

i*******************'*--^-*--^-^-^-^-^'-*--*-^-'-^-^--*---'---- 


** *************** ******* 


Original Message 


From: Alan P Williamson 

sent: 09/04/2008 11:05 AM £DT 

to: Anthony lulian/HBUS/HSBC@HSBC02; Fred shyur 

Cc: Thomas w Halpin/HBUS/HSBC@HSBC02; Michael B Gallagher/HBUS/HSBCOHSBCOZ 
Subject: Hokuriku Bank 

Anthony, Fred 

As you may know, compliance meets monthly with senior management in the 
Payments and cash Management aml Management Review Committee. Recently we 
discussed the fact that Hokuriku has been sending a large number of sequential 
traveller's checks from a number of similar businesses through cash letter here 
in the US. This use of cash letter is inappropriate and the Committee has 
concluded that P.cm should no longer allow Hokuriku to send traveler's checks 
through cash letter. Hokuriku should therefore cease the activity and make 
alternative arrangements, such as to make the deposits by wire, by September 
30. Can I ask you to contact the appropriate rm's to convey this message to 
Hokuriku and confirm back that they nave done so? 
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Thanks tor your help. Please let me know if you have any questions. 

Alan Williamson 
PCM Compliance 
212 525 8043 
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From: DENIS E o' BRIEN/HBUS/HSBC 

sent: 12/19/2008 11:16:25 AM 

To: AKO KOBAYASHI/TKY/HBAP/HSBC@HSBC03 

CC: ANTHONY 1ULIAN/HBUS/HSBC@HSBC02 J DENISE A REILLY/HBUS/HSBC(&HSBC02 ;HIDEKI 

matsumoto/tky/hbap/hsbc@hsbc03 ; 

JONATHAN DEAN/HBUS/HSBC@HSBC02;JUDY P 5TOLDT/H8US/HSBC@HSBC02 ; MACHIKO M 
YAMASHITA/TKY/HBAP/HSBC@HSBC03 ; 

SAEKA TAKEBAYASHI/TKY/HBAP/HSBC@HSBC03 ; SHINJI 

KAWAMURA/TKY/HBAP/HSBC@HSBC03; STEPHANIE K brown/hbus/hsbc@hsbc02 ; 

TAKAO TAKENAKA/TKY/HBAP/HSBC@HSBC03;WILLIAM WEHMEYER/HBUS/H5BC(aH5BC02 
subject: Re: fw: Hokuriku Bank - information needed 

We are appreciative of your assistance and thank you for your diligence in this 
regard, we have closed our investigation as it relates to this issue. 

Thanks and regards, 

Denis E O'Brien 


vice President, Head of Global Transaction Banking Compliance, 1 hsbc 
S ecurities CUSA) inc. 

452 Fifth Avenue, New York, NY 10018 


Phone. 
Fax. 
Mobil e 
Emai 1 . 


_ = Redacted by the Permanent 

Subcommittee on investigations 


Ako KOBAYASHI/TKY/HBAP/HSBC@HSBC03 
12/19/2008 02:00 AM 

TO 

Denis E O'brien/HBUS/HSBC(9HSBC02 

CC 

Denise A Reiny/HBUS/HSBC@HSBC02, Hideki MATSUMOTO/TKY/HBAP/HSBC©H58C03 , 
Jonathan Dean/HBUS/HSBC@HSBC02, Judy p Stoldt/HBUS/HSBC@HSBC02, Machiko M 
YAMASHITA/TKY/HBAP/HS8C®HS8C03 , Saeka TAKEBAYASHI/TKY/HBAP/HSBC®HSBC03 , 
Stephanie K 8rown/HBUS/HSBC@HSBC02, William Wehmey€r/HBUS/HSBC©HSBC02, Anthony 
Julian/HBUS/HSBC@HSBC02, Takao TAKENAKA/TKY/HBAP/HSBC@HSBC03, shinji 
KAWAMURA/TKY/H8AP/HSBC0HSBCO3 
subject 

fw: Hokuriku Bank - information needed 


Denis, 

Hokuriku Bank has provided the information at their risk and confirmed that the 
purchasers of the travelers checks Alexander Tokarenko, Andrey Davydov, 

Yuriy Zimchuk, Leonid Efimovich Egorov, Kopychev Valery or Bulgarov Maxim; are 
not signers or are NOT connected in any way to the previously requested named 
relationships at Hokuriku Bank. This should be the last favour and we cannot 
expect further or next assistance from them. 
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Best- regards, 

Ako KOBAYASHI 

Assistant Vice President j Global Payments and Cash Management, Asia pacific 
HSBC Building, B-ll-l Mihonbashi, chuo-ku, Tokyo 103-0027, Japan 


Phone. 813 5203 3161 

Fax. 813 5203 4236 

Email. ako.kobayashi@hsbc.co.jp 

-----Forwarded by Ako kobayashi/tky/hbap/hsbc on 2008/12/19 15:58 

Shi n j i KAWAMURA/TKY/HBAP/HSBC@HSBC03 
17 Dec 2008 17:11 Mail Size: 59442 

To 

Oenis E 0'brien/HBUS/HSBC@HSBC02 

cc 

Denise a Reilly/HBUS/HSBC@HSBC02, Hideki matsumoto/tky/hbap/hsbc@hsbco 3 , 
Jonathan Dean/HBUS/HSBC@HSBC02, Judy P Stoldt/HBUS/HSSC@HSBC02 , Machiko M 
YAMASHITA/TKY/HBAP/HSBC@HSBC03 , Saeka TAKEBAYASHI/TKY/HBAP/HSBC@HSBC03 , 
Stephanie K 8rown/HBUS/HSBC@HSBC02, william Wehmeyer/HBUS/HSBC@HSBC02 , Ako 
KOBAYASHI/TKY/HBAP/HSBC@HSBC03@HSBC, Anthony. Julian/HBUS/HSBC@HSBC02, Takao 
TAKENAKA/TKY/H8AP/HSBC@HSBC03 
subject 

Fw: Hokuriku Bank - information needed 


Our Ref 
Your Ref 


Deni.s, 

I am shinji Kawamura, MLCO in Japan. 

They have been good enough to provide information so far but as you may 
understand from bank secrecy view point, they should not or cannot disclose 
customer information, so they will no longer provide information. If you need 
my suggestion to clear those backlogs, I will tell you that you should file 
suspicious transaction report to your authority. 

Regards, 
shinji Kawamura 

Money Laundering Control Officer 

The Hongkong and Shanghai Banking corporation, Tokyo 

TEL : 813-5203-3364 

FAX : 815-5203-3794 

* Forwarded by shinji kawamura/tky/hbap/hsbc on 2008/12/17 16:49 

Takao takenaka/tky/hbap/hsbc 
17 Dec 2008 08:31 Mail size: 54754 

To 

Shi n j 1 KAWAMURA/TKY/HBAP/HSBC@HSBC03 
cc 
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Subject 

Fw: Hokuriku Bank - information needed 


Our Ref 
Your Ref 


Forwarded by Takao TAKENAkA/TKY/HBAP/HSBC on 12/17/2008 08:30 AM 

Denis E O'brien/HBUS/HSBC9HSBC02 
17 Dec 2008 03:03 Mail size: 54194 


Takao TAKENAKA/TKY/HBAP/HSBC0HSBCO3 

Denise A Reilly/HBUS/HSBC@HSBC02, Hideki MATSUMOTO/TKY/HBAP/HSBC@HSBC03 , 
Jonathan Dean/HBUS/HSBC^SBC02, Judy p Stoldt/HBU5/HSBC@HSBC02, Machiko M 
YAMASHITA/TKY/H8AP/HSBC@HSBC03, Saeka TAKEBAYASHI/TKY/HBAP/HSBC@HSBC03 , 

Stephanie K Brown/HBUS/HSBC@HSBC02, William Wehmeyer/H8US/HSBC@HSBC02. Ako 
K0BAYASHI/TKY/HBAP/HSBC@HSBC03@HSBC, Anthony Juiian/HBUS/HSBC@HSBC02 
Subject 

Re; Fw: Hokuriku Bank - information needed 


our Ref 
Your Ref 


Takao, 

By way of introduction, I am responsible for Global Transaction Banking 
Compliance in the u.s. 

Ako Kobayashi has been very helpful thus far in assisting us in obtaining 
addiponal information as it relates to Hokuriku Bank customers that were 
utilizing our Cash Letter (Pouch) services, in response to the additional 
questions Hokunku Bank has requested for our specific request; 

reason you are reviewing transaction from first and second quarter of 
2008 at this time of the year, 
internal backlogs 

2. where did you get the name of the 30 companies? 

From Hokuriku Bank bulk deposits 

3. Are you only asking HokuHku Bank to provide such information’ 

Yes, as it relates to Hokuriku Bank transactions 

4. what would be the course of action you would take if any of the Russians are 
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related in any way with the named relationships? 

(repeat of previous response) 

We are required to understand and vet transactions processed that are alerted 
in our systems because of patterns or trends. To the best of our 
knowledge, we are unaware of any pending criminal act and would appreciate any 
information that can be shared with us regarding any law enforcement actions 
The Russian names were identified during our due diligence as purchasers of 
travelers checks on behalf of third parties that 
used the items to purchase goods from your clients. Our request for 
information directly relates to transactions processed and alerted in our 
systems 

because of the large volumes, this processing is normal as we review in 
arrears and currently are backlogged reviewing transactions from first arid 
second quarter of 2008. These investigations are time consuming as in most 
instances, like this one, we need to rely on our cu”' 
additional information. 


customers to provide 


5. What is the reason for the request when there is no more outstanding 
travelers checks with Hokurku Bank 

To clear the pending HBUS system generated alerts on previous activity. 


We understand from the previous e-mails that Hokuriku Bank has requested some 
time to gather information for us, which we greatly appreciate and understand 
that we cannot expect cpmpletion by year-end. Again, we cannot stress enough, 
that all we are asking is confirmation that the purchasers of the travelers 
checks - Alexander Tokarenko, Andrey Davydov, Yuriy zimchuk, Leonid Efimovich 
Egorov, Kopychev Valery or Bulgarov Maxim; are not signers or are connected in 
any way to the previously requested named relationships at Hokuriku Bank 


Thanks and regards, 

Denis E O'Brien 

Vice President, Head of Global Transaction Banking Compliance. ! hsbc 
S ecurities (USA) Inc. 

452 Fifth Avenue, New York, NY 10018 


Phone. 
Fax. 
Mobile 
Emai 1 , 


212 525 1147 
17-229»5257 


deni s . e . 0 ' bri en@us.hsbc.com 


Redacted by the Permanent 
Subcommittee on Investigations 


Ako KOBAYASHI/TKY/HBAP/HSBC@HSBC03 
12/15/2008 01:43 AM 

To 

Denis £ O'brien/HBUS/HSBC(3HSBC02@HSBC 

cc 

c - , A Reilly/HBUS/HSBC0HSBCO2, lonathan Dean/HBUS/HSBC@HSBC02, ludy p 

Stoldt/HBUyHSBC@HSBC02, Saeka TaKEBaYASHI/TKY/hbap/hsbC@HSBC 03, Stephanie K ^ 
Brown/HBuyHSBC@HSBC02, William Wehmeyer/HBUS/HSBC@HSBC02, Machiko M 
YAMASHITA/TKY/HBAP/HSBC@HSBC03, Hideki MATSUMOTO/TKY/HBAP/HSBC@HSBC03 
Subject 

Fw; Hokuriku Bank - information needed 
Page 4 


VerDate Nov 24 2008 


14:41 Nov 19, 2012 Jkt 076061 PO 00000 


Frm 01041 


Fmt 6601 


Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




1028 


Occ-Psi -00811358 


Denis, 

Please be advised that, other contact of Hokuriku Bank called us today and he 
has requested for further background for your specific request. 

The reason you are reviewing transaction from first and second quarter of 2008 
at this time of the year. 

where did you get the name of the 30 companies? 

Are you only asking Hokuriku Bank to provide such information? 

what would be the course of action you would take if any of the Russians are 

related in any way with the named relationships? 

what is the reason for the request when there is no more outstanding travelers 
checks with Hokurku Bank 


Please be advised that apparently they are not very happy with your request as 
they have other matters to attend toward the end of the year. Besides they are 
only given a very short timeframe. 

Hokuriku Bank is not saying that they will not assist you to provide the 
required information however they are upset with the nature of the request 
without being given sufficient background. Given the nature of the queries, 
please understand it is time consuming and consider to allow them more time. 
They might not be able to supply the information by the end of the year. 

Appreciate your understanding on the above. 

Best regards, 

Ako KOBAYASHI 

Assistant Vice President j Global Payments and Cash Management, Asia Pacific 
HSBC Building, 3-11-1 Nihonbashi, Chuo-ku, Tokyo 103-0027, Japan 


Phone. 813 5203 3161 

Fax, 813 5203 4236 

Emai T . ako . kobayashi @hsbc .co.jp 

Forwarded by Ako kobayashi/tky/hbap/hsbc on 2008/12/15 14:55 

Ako KOBAYASHI/TKY/HBAP/HSBC 
11 Dec 2008 14:24 Mail size: 40837 
Phone No. 813 5203 3161 


Denis E 0'brien/HBOS/HSBC(aHSBC02@HSBC 
cc 

Denise A Reilly/HBUS/HSBCOHSBCO?, Jonathan Dean/HBUS/HSBC@HSBC02, Judy P 
stoldt/HBus/HSBC@HSBC02, Saeka takebayashi/tky/hbap/hsbc@hsbc 03, Stephanie k 
B rown/HBUS/HSBC(9HSBC02, William wehmeyer/HBUS/HSBC@HSBC02 
Subject 

Re: Fw: Hokuriku Bank - information needed 


our Ref 
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Your Ref 


Dem's, 

I have had dialogues with the Hokuriku Bank and they do not appear to retain 
ownership information. According to the client, they have identitied the name 
of the branches where those named entities maintain an account with and shall 
shorlty make a request to each branch to supply them with the required 
information. 

Please bear with us some time for the Hokuriku Bank to complete the whole 
process . 

Best regards, 

Ako KOBAYASHI 

Assistant vice President 1 Global Payments and cash Management, Asia Pacific 
HSBC Building, 3-11-1 Nihonbashi, Chuo-ku, Tokyo 103-0027, lapan 


Phone. 813 5203 3161 

Fax. 813 5203 4236 

Email . ako.kobayashi@hsbc.co.jp 


Denis E D'brien/HBUS/HSBC@HSBC02 
11 oec 2008 14:12 Mail Size: 35895 

TO 

Ako KOBAYASHr/TKY/HBAP/HSBC@HSBC03@HSBC, Stephanie K Brown/HBUS/HSBC0HSBCO2 
cc 

Denise A Reilly/HBUS/HSBC@HSBC02, Jonathan Dean/HBUS/HSBC@HSBC02, Judy P 
Stoldt/HBUS/HSBC@HSBC02, saeka takebayashi/tky/hbap/hsbc@hsbc 03, William 
wehmeyer/HBUS/HSBC@HSBC02 
Subj ect 

Re: Fw: Hokuriku Bank - information needed 


Dur Ref 
Your Ref 


Thanks Ako, 

I may be missing something here, all we are asking is if any of the named 
individuals are owners or account signers in the named entities. Doesn't 
Hokuriku Bank retain ownership information & signature cards on there 
customers. 

Please advise as we would appreciate closing this investigation out before year 
end. 
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Thanks, 

Denis O'Brien 
vice President 


Head of GTB Compliance 
Tel mZV 525-1147 
cell 
Cell 


Occ-psi -00811358 


= Redacted by the Permanent 
Subcommittee on Investigations 


— -- Original Message — 

From: Ako KOBAYASHI 

Sent: 12/11/2008 01:54 pm ZE9 

To: Stephanie Brown 

Cc: Denis o'brien; Denise Reilly; Jonathan Dean; Judy stoldt; Saeka 
TAKEBAYAShi/tky/hbap/hsbc@hsbc 03; william wehmeyer 

Subject: Re: Fw: Hokuriku Bank - information needed 
Stepham e , 

I have called Hokuriku Bank and was advised to allow some time. As they do not 
know how those Russian names are pronounced, Hokuriku Bank needs to visit the 
companies listed below one by one and it would certainly require certain amount 
of time. Please consider to wait till the end of this year. 

Appreciate your understanding. 

Best regards, 

Ako KOBAYASHI ' ' - 

Assistant vice President 1 Global Payments and cash Management, Asia Pacific 
HSBC Building, 3-11-1 Nihonbashi, Chuo-ku, Tokyo 103-0027, Japan 


Phone. 813 5203 3161 

Fax. 813 5203 4236 

Email. ako.kobayashi@hsbc.co.jp 


Stephanie K Brown/HBUS/HSBC@HSBC02 
11 Dec 2008 05:41 Mail Size: 31533 

To 

Ako K0BAYASHI/TKY/HBAP/HSBC@HSBC03 
cc 

saeka TAKEBAYASHI/TKY/HBAP/HSBC@HSBC03, Judy P Stoldt/HBUS/HSBC@HSBC02@HSBC, 

Denise A Reilly/HBUS/HSBC@HSBC, Jonathan Dean/HBUS/HSBC@HSBC, william 
Wehmeyer/HBUS/HSBC@HSBC, Denis E 0'brien/HBUS/HSBC@HSBC 
subject 

Re: Fw: Hokuriku Bank - information needed 


Our Ref 
Your Ref 
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Hello Ako, 

Do you have any information concerning the below matter? 

Please note it is imperative that we received an answer as soon as possible. 
Thanks and regards. 


Stephanie K Brown 

HSBC Bank usa, National Association 
Account Manager 1 gpcm client Services 
90 Christiana Road, New Castle, De. 19720 


Phone 0302 327 2291 
Fax 212 642 4065 

Emai 1 Stephanie . k . brown@us . hsbc. com 


Hello Ako, 

Here is additional information concerning our questions related to Hokuriku 
Bank: 

The background of our queries stem from our requirement to understand and vet 
transactions processed that are alerted in our systems because of patterns or 
trends. To the best of our knowledge, we are unaware of any pending criminal 
act and would appreciate any information that can be shared with us regarding 
any law enforcement actions. The Russian names were identified during our due 
diligence as purchasers of travelers checks on behalf of third parties that 
used the items to purchase goods from your clients. Our request for information 
directly relates to transactions processed and alerted in our systems because 
of the large volumes, this processing is normal as we review in arrears and 
currently are backlogged reviewing transactions from first and second quarter 
of 2008. These investigations are time consuming, as in most instances, like 
this one, we need to rely on our customers to provide additional information. 

Your immediate attention would be greatly appreciated in advising us if 
Alexander Tokarenko, Andrey Davydov, Yuriy Zimchuk, Leonid Efimovich Egorov, 
Kopychev Valery or Bulgarov Maxim are signers or are connected in any way to 
the previously requested named relationships at Hokuriku Bank. 

Thanks in advance your assistance in this regard. 


Thanks and regards, 

Stephanie K Brown 

HSBC Bank USA, National Association 
Account Manager | gpcm client services 
90 Christiana Road, New castle, De. 19720 


Phone 0302 327 2291 
Fax 212 642 4065 

Email Stephanie. k.brown(3u5 .hsbc. com 


Ako KOBAYASHI/TKY/HBAP/HSBC@HSBC03 
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12/03/2008 08:56 PM 


Occ-Psi -00811358 


To 

gpcmcli entservi ces/HBUS/HSBC@HSBC02 
cc 

saeka TAKEBayashi/tky/hbap/hsbc@hsbc 03, Stephanie K Brown/HBUS/HSBC(SHSBC02 
subject 

Fw: Hokuriku Bank - information needed 


Stephanie, 

Hokuriku Bank has raised the following questions: 

what is the background for your queries? Does it relate to your compliance 
reason or does it relate to criminal act and the police asks such information? 
where did you get those Russian names? 

since no cheques has been presented to you since Nov08, why such information is 
required now? 

Appreciate your feedback on the above. 

Thanks and best regards, 

Ako KOBAYASHI 

Assistant vice president j Global Payments and cash Management, Asia Pacific 
HSBC Building, 3-11-1 Nihonbashi, Chuo-ku, Tokyo 103-0027, Japan 


Phone. 813 5203 3161 

Fax. 813 5203 4236 

Email. ako.kobayashiShsbc.co. jp 

Forwarded by Ako kobayashi/tky/hbap/hsbc on 2008/12/04 10:50—— 

Ako KOBAYASHI/TKY/HBAP/HSBC 
01 Dec 2008 11:21 Mail. size: 20181 
Phone NO. 813 5203 3161 

TO I 

gpcmcl i entservi ces/HBUS/HSBC@HSBC02 
cc 

saeka takebayashi/tky/hbap/hsbc@hsbc 03,- Stephanie k Brown/HBUS/HSBC®HSBC02 
subject 

- Re: Hokuriku Bank - information needed 


Our Ref 
Your Ref 


Stephanie, 
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I have forwarded your message to Hokuriku Bank, upon receipt of their reply, I 
shall revert to you. 

Best regards, 

AkoKOBAYASHI 

Assistant vice President | Global Payments and cash Management, Asia Pacific 
HSBC Building, 3-11-1 Nihonbashi, chuo-ku, Tokyo 103-0027, Japan 


Phone. 813 5203 3161 

Fax. 813 5203 4236 

Email. ako.kobayashitahsbc. co.jp 


gpcmcl i entservi ces/HBUS/HSBC@HSBc02 
sent by; Stephanie k Brown(aHSBC02 
29 NOV 2008 04:31 Mail size: 16116 

TO 

Ako kobayashi/tky/hbap/hsbc@hsbc 03 
cc 

Saeka TAKEBAYASHl/TKY/HBAP/HSBCeHSBC03 
Subject 

Hokuriku Bank - information needed 


our Ref 
Your Ref 


Hello Ako, 

Can you please contact Hokuriku Bank and request they provide us vrith the 
following information: 

Please advise within a week if Alexander Tokarenko, Andrey Davydov, Yuriy 
zimchuk, Leonid Efimovich Egorov, Kopychev Valery or Bulgarov Maxim are signers 
or are connected in any way to the following relationships at Hokuriku Bank; 

MARIC TRADING CORPORATION 

I.K. AUTO LTD 

S.K. TRADING CO. , LTD. 

DEAN CORPORATION CO LTD 
GONDAL CORPORATION 
SHIN KYOWA INTERNATIONAL 
3AMSOU TRADERS CO. LTD. 

CHOWDHURY TRADE INTL CO. LTD 
AWAN INTERNATIONAL K.K. 

5HIWA SANGYO CO. LTD 
GARLAND HOKURIKU CO. 

MALIK SEKINE BOEKI COMPANY 
SHAKI CORPORATION 
M.A AWAN CORPORATION 
AUTO SAM CO. 
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A.S.U. CORPORATION 
P 3 ENTERPRISE 
SUNRISE TRADING CO LTD 
FRIENDSHIP MOTDR CAR K.K. 

SANDO CORPORATION 
GRCmKOV BORIS 
AUTD STAGE LTD. 

CHACHA ENTERPRISE CO., LTD. 

COSMOS CORPORATION 
JAPAN TREK INC 
KABIR AUTO EXPORT CO., LTD 
KG COMPANY CO., LTD 
SEIIN YONEDA 
SEKIZAWASYOUJI CO LTD 
ZHELOMKO RUSLAN 

Feel free to contact me directly, if further information is needed. 

Thanks and kind regards, 

Stephanie Brown 
GPCM client services 
HSBC Bank usa, n.a. 

90 Christiana Rd., New castle, DE 19720 
Telephone: 302 327 2171 
Facsimile: 212 642 4008 


T- 3 inquiry. 


Nanayo Ryan 

PCM client services | hsbc Bank USA NA 
90 Christiana Road, New Castle, de 19720 U.S.A, 


■Phone. 302-327-2256 

Fax.. 212-642-4065 

Emai 1 . nanayo . ryan(9.us . hsbc . com 


— Forwarded by Nanayo Ryan/HBUS/HSBC on 11/26/2008 01:12 PM 

Judy P Stoldt/HBUS/HSBC 
11/26/2008.10:14 am 

TO 

Nanayo. Ryan/HBUS/HSBC@HSBC02 
cc 

william wehmeyer/HBUS/HSBC@HSBC, Denis E o’brien/HBUS/HSBC@HSBC 
Subject 

Fw: Hokuriku Bank 


Nan, 
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We do need the information so can you send the request to Hokuriku Bank? Keep 
us posted. 

Judy P Stoldt 

Vice President, AML Compliance \ HSBC Bank USA, National Association 
One HSBC center 
Buffalo, New York 14203 


Phone (716) 841- 6425 

Fax (212) 382 - 7586 

Email judy.p.stoldt@us.hsbc.com 


Forwarded by Judy P Stoldt/HBUS/HSBC on 11/26/2008 10:14 AM 

Judy P Stoldt/HBUS/HSBC 
11/24/2008 04:30 PM 

To 

Nanayo Ryan/HBUS/HSBC 
cc 

Denis E o’brien/HBUS/HSBC(aHSBC, william Wehmeyer/HBUS/HSBC@HSBC 
subject 

Fw: Hokuriku Bank 


Nan, 

We talked this over and can you hold this request until tomorrow. I'll let you 
if we need you to send it. 

Judy P Stoldt 

vice President, AML compliance } HSBC Bank USA, National Association 
One riSBC center 
Buffalo, New York 14203 


Phone (716) 841- 6425 

Fax (212) 382 - 7586 

Emai 1. j udy . p . stol dt@us . hsbc . com 

Forwarded by Judy P Stoldt/HBUS/HSBC on 11/24/2008 04:29 pm 

William Wehmeyer/HBUS/HSBC 
11/24/2008 04:15 PM 

TO 

Nanayo Ryan/HBUS/HSBC@HSBC 
cc 

Judy P Stoldt/HBUS/HSBC, Denis E o’brien/HBUS/HSBC, Jonathan 
Dean/HBUS/HSBCOHSBC 
Subject 
Hokuriku Bank 
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Nan, 
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Please reach out to Hokun'ku Bank and reguest that they advise within a week if 
Alexander Tokarenko, Andrey Davydov, Yuny zimchuk, Leonid Efimovich Egorov, 
Kopychev Valery or Bulgarov Maxim are signers or are connected in any way to 
the following relationships at Hokuriku Bank: 

MARIC TRADING, CORPORATION 

I.K. AUTO LTD 

5.K. TRADING CO. , LTD. 

DEAN CORPORATION CO LTD 
GONDAL CORPORATION 
SHIN KYOWA INTERNATIONAL 
3AM50U TRADERS CO. LTD. 

CHOWDHURY TRADE INTL CO. LTD 
AWAN INTERNATIONAL K.K. 

SHIWA SANGYO CO. LTD 
GARLAND HOKURIKU CO. 

MALIK SEKINE BOEKI COMPANY 
SHAKI CORPORATION 
M. A AWAN, CORPORATION 
AUTO SAM CO. 

A.S.U. CORPORATION 
P J ENTERPRISE 
SUNRISE TRADING CO LTD 
FRIENDSHIP MOTOR CAR K.K. 

SANDO CORPORATION 
GROMAKOV BORIS 
AUTO STAGE LTD. 

CHACHA ENTERPRISE CO., LTD. 

COSMOS CORPORATION 

JAPAN TREK INC 

KABIR AUTO EXPORT CO., LTD 

KG COMPANY CO. , LTD 

SEIIN YONEDA 

SEKI2AWASY0UJI CO LTD 

ZHELOMKO RUSLAN 

Please confirm to me when the message is sent and notify me on the response. 
Thank you for your assistance in this matter. 

Regards, 

William Wehmeyer • 

AVp AML Compliance officer | HSBC Bank uSA na 
90 Christiana Road, New Castle, Delaware 19720 


Phone. 302 327 2052 

Fax. 212-642-4013 

Emai 1 . william. wehmeyerOus . hsbc , com. 
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From: 

To: 

cc: 

Subject: 

Date: 


Boss. Joseph 
DiLorenzD. Anthony: 

I Boss. Joseph: 


SK Trading 

Monday, December 01, 2008 10:48:54 AM 


= Redacted by the Permanent 
Subcommittee on Investigations 


Tony, HSBC Compliance management provided me with an update on the 
situation involving SK Trading. 


If you recall, we uncovered huge amounts of J|^^travelers' checks (daily 
averages of $500M to $700M per day) being processed by HSBC for their 
corespondent Hokuriku Bank in Japan. The travelers' checks were being 
processed in bulk and all checks were payable to SK T rading, with each bundle 
(average size of S250M) signed by the same individual and in $1000 
denominations and sequentially numbered. We were informed that the 
aforementioned amounts we Identified during our sampling was the peak amount 
sent in for processing for SK Trading. 

We were inform ed that o nce J^Jreceived a 314 request from HSBC regarding 
the matter, they JBj^dispfflSiea investigators to Russia to conduct 
suiveiliiance at tn^ank in which the travelers' checks were being purchased. 
The result was that J^^dentified five individuals who were purchasing. the 
checks with cash at the Russian Savings Bank and signing the checks. In turn, 
the five individuals were providing the checks to Mr. Alexander Tokarenko who is 
the owner of SKTrading. Mr. Tokarenko then stamped the checks payable to 
SKTrading. HSBC identified all accounts, includi ng SKTrading, at Hokuriku 
Bank that were forwarding bulk deposits ofJU|travelers' checks to HSBC for 
clearing. There were 30 accounts at Hokuriku Bank that were sending bulk 
deposits of travelers' checks. HSBC Is attempting to discern if Mr. Alexander 
T okarehko has ownership interest in the other 29 entities. HSBC advised that 
the total dollar amount of bulk travelers' checks processed by HSBC for the 30 
entities during the period of November 2007 to October 2008 was over $61 
million. 


Recently, HSBC informed Hokuriku Bank that HSBC could no longer process 
travelers' checks for them. Once HSBC management ascertains if Mr. Alexan der 
Tokarenko has ownership in any of the other entities, management willf||||M 


Please let me know if you require any further infonnation. 
Thanks, Joe 


Ipermancnt Subcommittee on Investigations ■ 
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ATTORNEYS AND COUNSELLORS 
AT LAW 


Fox Horan & Camerini llp 

SZ5 THIRD AVEMUC 
NEW YORK. NEW YORK lOOZZ 


June 26, 2012 


TELEPHONE: 1212! ^00-4600 
TELECOPIERS: 1212! 2S9-23S3 
12121 70»-O24a 


Rv Email and FedEx 

Zachary Schram, Esq. 

Senior Counsel 

Permanent Subcommittee on Investigations 
United States Senate 
Washington, D.C. 

Re: Questions Posed to the New York Representative Office 

Of The Hokuriku Bank, Ltd. 


Dear Mr. Schram; 

Our client, the Hokuriku Bank, Ltd. (“Hokuriku Bank”) has asked us to respond 
to the questions you posed to it in your email of May 21, 2012. The information 
conveyed here came from our client. 

Question 1 

What is Hokuriku’s reiatjonship with HSBC, incinding HSBC Bank USA (HBUS) ? 

Hokuriku Bonk’s relationship began with HBUS’s predecessor in interest, Marine 
Midland Bank, in May of 1973. In September of 1985, Hokuriku Bank and Marine 
Midland entered into an IntemaUonal Cash Letter Service Agreement, pursuant to which 
the two banks cleared travelers’ checks for each other. In October of 2008, the bank, by 
then named HBUS, stopped clearing travelers’ checks for Hokuriku Bank, and on May 
21, 2012, HBUS terminated its relationship with Hokuriku Bank entirely. 

Hokuriku Bank also has a correspondent relationship with Hong Kong and 
Shanghai Banking Corporation, Ltd. However, this relationship will be terminated by 
mutual consent on July 4, 2012. 

Hokuriku Bank currently has a correspondent relationship with the four branches 
of HSBC Banking (China) Company, Ltd. pursuant to a Relationship Management 
Application (“RAM”). Hokuriku Bank also has a RAM arrangement with the Taiwan 
branch of HSBC (Taiwan) Ltd. 

Hokuriku Bank also maintains correspondent relationships with HSBC Banking 
Middle East, Ltd. and HSBC Bank PLC (now known as HSBC PLC) pursuant to an 
agency agreement. 


I Permanent Sufacoromittee on Investigations 

EXHIBIT #92 
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Zachary Schram, Esq. 
United States Senate 
June 26, 2012 
Page 2 of 4 


Until May 29, 2012, Hokuriku Bank had a correspondent relationship with HSBC 
Malaysia Berhad, pursuant to a RAM. 

Questions 2 and 3 

What is Hokuriku’s experience with submitting U.S. dollar travelers* checks to 
TTRirS for clearance from 2005 to the present, including the volume of checks 
submitted each year, why HBUS stopped processing the travelers’ checks in 2008, 
and when and why HBUS restarted processing them. 

Hokuriku^s understanding of the travelers* checks cashed bv clients in Russia 
involved in the used car business. HBUS^s 2008 inquiry into those travelers’ checks, 
and whether Hokuriku is still processing those checks. 


Due to the geographic proximity of Russia across the Sea of Japan, many 
Japanese dealers of pre-owned automobiles are located along the coast, including the 
Hokuriku region. (Hokuriku means ‘'North Land” in Jjqjanese). Hokuriku Bank is 
headquartered in this area and has several branches in the surrounding areas. Some of 
such dealers have accounts at Hokuriku Bank. 

In a typical transaction, a customer of Hokuriku Bank (that is to say an account 
holder) sells a used car (or cars) to a Russian buyer who is a passenger or crew member 
of a sHp at a nearby port. The buyer pays with travelers’ checks. The seller/account 
holder brings the travelers’ checks to its bank (Hokuriku) and deposits them into its 
account. Hokuriku Bank accepts the travelers’ checks, credits the customer’s account, 
and sends the checks to clearing banks. About 90% of the travelers’ checks which were 
cleared by HSBC were in denominationsof $1,000 or $500. AH the travelers’ checks 
were issued by American Express. 

Until October of 2008, HBUS was the clearing bank for Hokuriku Bank in the 
U.S. HBUS would clear the checks and credit Hokuriku’s correspondent account at 
HBUS. In or about October of 2008, HBUS notified Hokuriku Bank that it would no 
longer clear travelers’ checks for Hokuriku Bank. The reason offered by HBUS was that 
the cost of processing the travelers’ checks, especially the ones submitted by used car 
dealers, had become too high, 

Hokuriku Bank then turned to Bank of New York Mellon which has been clearing 
the travelers’ checks ever since. HBUS has not restarted clearing traveler’s checks for 
Hokuriku Bank. 


PS(-Hokur1kuBank-01-0002 
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Hokuriku Bank does not have “clients in Russia” who bring in travelers checks. 
The traveler’s checks are brought in by Hokuriku’s account holders which are companies 
incorporated under Japanese law. Hokuriku does not accept travelers’ checks unless 
deposited by customers into existing accounts (other than travelers’ checks total of which 
is less than $1,000 brought in by individual tourists). Please refer to the attached 
document which is an excerpt of the compliance manual of Hokuriku Bank. The pages 
attached list identification and other documentation required the Hokuriku Bank in order 
for them to engage in var ious transactions, including processing traveler’s checks, 

Hokuriku Bank still accepts traveler’s checks brought in by its customers, which 
are now sent to Bank of New York Mellon for clearance. 

Hokuriku Bank does not have any knowledge regarding “HBUS’s 2008 inquiiy 
into those traveler’s checks.” 

Please see the attachment for the volume of travelers’ checks sent to HBUS for 
clearance each year. 


Question 4 

Whether Hokuriku clears its U.S. dollar travelers’ checks with any bank other than 
HSBC 

As stated above. The Bank of New York Mellon has been clearing Hokuriku’s 
U,S. dollar travelers’ checks since November 1. 2008. 

Question 5 

What is Hokuriku’s KYC and AML practices? 

Hokuriku Bank has established comprehensive Compliance Regulations to assure 
compliance with all applicable laws and regulations including, without limitation, the 
Laws Preventing Transfer of Profits Generated by Criminal Activities and the Foreign 
Exchange and Foreign Trade Control Law. Hokuriku Bank reviews and updates the 
Compliance Regulations annually and as required by law. 

The legal section which is created within the Compliance Office is responsible for 
overseeing the bank compliance matters. 

All branches perform internal inspection on a monthly basis to ensure their 
compliance pursuant to certain procedures set up by the bank. In addition, the Internal 
Auditing Department conducts thorough investigations of all bank activities including, 
without limitation, compliance with AML matters. 


PSi'Hokuril5uBank-01-0003 
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Hokuriku Bank accepts U.S. dollar travdex’s checks only on the following 
conditions; 


• No more than $ 1 ,000 per person per day. 

Two exceptions may e^jply: 

(1) If a regular customer brings in a travelers’ check in excess of 
$1,000 and if by Hokuriku’s judgment, it is deemed that the funds 
will be collected from the customer should it turn out that the 
travelers’ cheek was not duly issued; or 

(2) If the travelers’ checks were issued by Hokuriku Bank. 

• In either case, Hokuriku Bank requires an ID to clear travelers’ checks in the 
excess of ¥2,000,000. (approximately $25,000 at the exchange rate of $1 = 
¥80) 

• Whenever someone who does not have an account at Hokuriku (such as a 
tourist or sailor) whose address is not verified brings in travelers’ checks in 
denominations of $500 or $1,000 or more, Hokuriku would check if a lost or 
stolen report has been filed regarding them. 


• Whenever a non-Japanese customer opens a new account, Hokuriku will 
confirm, if the customer (as well as the person in charge in case of a corporate 
account) is subject to economic sanctions or their assets are frozen. The 
Hokuriku Bank has a database for such confirmations and performs searches 
based on the surname, given name, middle name and corporate name. 



ly,.yo\irs. 


Villiam M. Brodsky 
Chizuko S. Ueno 


WMB;kg 

w/Encls. 

cc: Mr. Shigeo Hikage (w/o Ends.) 


PSl-HokurikuBank-01-0D04 
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To; 

Cc: 

Subject: 

Date: 


Schram. Zachary fHSGAC^ 
Robertson. Maiv (HSGAC) 


FW; Hokuflku Bank 

Friday, June 29, 20J2 11:50:51 AM 


From: William M. Brodsky [mailto:wmtH-odsky@fCDdex.com] 

Sent: Friday, June 29, 2012 11:07 AM 
To: Schram, Zachary (HSGAC) 

Cc: Chizuko S. Ueno 
Subject: Hokuriku Bank 

Zach, 

Here is our client's response to your queries: 

! Vi/hen did the limits on the use of travelers checks mentioned in your answer to question Stake 
effect? 


The current policy has been in effect since 1984 or around that time, 


2. \A/hv do so many purchasers of used cars use travelers checks at Hokuriku?. 


The bank does not know why travelers checks were the primary method of payment 
in the past. Currently, most payment are being made by wire transfer. 


3. How does Hokuriku receive travelers checks from its customers? 

The customers (account holders) would bring them to the branch offices and 
give them to the tellers. 

Bill Brodsky 
Fox Horan & Camerini 
825 Third Avenue 
New York. NY 10022 
212-480-4800 


P5l-HokurikuBank-02-0001 
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OCC-PSI -00318438 

From: ALAN P WILLIAMSON/HBUS/HSBC 

sent: 8/27/2007 12:09:51 PM 

To: TERRY WESTREN/HBUS/HSBCOHSBC 

CC: CAROLYN M WIND/HBUS/HSBC@HSBC;CLARA HURTAD0/HBUS/HSBC@HSBC; JEFF 
CLOUS/HBUS/HSBC@HSBC; 

LOUIS MARINO/HBUS/HSBC(aHSBC;MANUEL DIAZ/HBUS/HSBCOHSBC; MARTIN H0LY/HBUS/HSBC<&HSBC; 
STEFAN HARDY/HBUS/HSBC@HSBC;TERESA GARCIA/HBUS/HSBC@HSBC 
Subject: Re: Bearer Share Companies 

Stefan 

Note from Terry: 


Al an , 

As requested, below is the list of New York Bearer share accounts. It also 
gives the status of the documentation for these accounts and other information. 
The total is at the bottom of the spreadsheet. 


Thanks and regards, 

Terry westren 

SVP, Head of International Operations, HSBC Private Bank 
452 Fifth Ave. 6th Floor, New York, N.Y. 10018 


Phone. 212-525-5325 

Fax. 212-525-1680 

Email. terry.westren@hsbcpb.com 


Terry Westren/HBUS/HSBC 

08/27/2007 01:00 pm 

To 

Stefan hardy/hbus/hsbc@hsbc 
cc 

Alan p williamson/HBUS/HSBC@HSBC, Carolyn M wind/HBUS/HSBC@HSBC, Clara 
HUrtado/HBUS/HSBC@HSBC, Jeff Cl0us/HBUS/HSBC@HSBC, Louis Marino/HBUS/HSBC®HSBC, 
Manuel Diaz/HBUS/HSBCOHSBC, Martin Holy/HBUS/HSBC@H5BC, Teresa 
Garci a/HBUS/HSBC@HSBC 
subject 

Re: Bearer Share Companies 


Stefan, 

OK. I have already provided the information on Bearer shares you requested to 
Alan. Do you need it as well? 

Thanks and regards, 

Terry westren 

I Permanent Subcommittee on Investigations ! 
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SVP, Head of International Operations, HSBC Private Bank 
452 Fifth Ave. 6th Floor, New York, n.y. 10018 


Phone. 212-525-5325 

Fax. 212-525-1680 

Email. terry.westren@hsbcpb.com 


Stefan hardy/hbus/hsbc 
08/27/2007 12:49 PM 

To 

Alan P williamson/HBUS/HSBC@HSBC, Jeff c1ous/hbus/hsbc@hsbc, Terry 
westren/HBUS/HSBC@HSBC 
cc 

Carolyn M Wind/HBUS/HSBC@HSBC, Clara Hurtado/HBUS/HSBC@HSBC, Martin 
Holy/HBUS/HSBC@HSBC, Teresa Garcia/HBUS/HSBceHSBC, Manuel Diaz/HBUS/H5BC@HSBC, 
Louis Marino/HBUS/HSBC@HSBC 
Subject 

Re: Bearer share Companies 


Thank you Alan. 

Jeff - do you have a similar policy for new and existing a/cs? 

Terry - i will call you to bring you up to speed with the meeting we had this 
mormng. Can you provide a summary ana^sis of bearer share accounts for NY and 
the status for bols, shares in custody etc for new and existing a/cs as 
required by the policy listed below please? 

Stefan Hardy 

SVP, PB US Risk Management 
New York 


Phone. 212-525-0392 


Alan P williamson/HBUS/HSBC 
08/27/2007 12:30 PM 

TO 

Stefan hardy/hbus/hsbc@hsbc 
cc 

Carolyn m wind/HBUS/HSBC@HSBC, Teresa Garcia/HBUS/HSBC@HSBC, Clara 
Hurtado/HBUS/HSBC@HSBC, Martin H 0 ly/HBUS/HSBC@HSBC 
subject 

Bearer Share Companies 
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The following is our current policy for Bearer Share corporations in NY: 

New clients: For this purpose, new clients are considered to be new 
relationships to HSBC. 

Bearer share corporations will only be accepted if: 

■ CEO - NY IPB and AML LCO approval is received; and, 

• Client commits to registering the shares or the shares are held in custody 
with an approved non-US resident third party custodian, who is authorized to 
advise HSBC of any changes in ownership 

Existing clients: 

If an existing client opens an account vrith a Bearer share Corporation, then 
the Existing Clients section noted below applies: 

For Bearer Share corporations classified as “high-risk" (see below), the client 
either must commit to converting the corporation to a registered share 
corporation or the bearer shares are held in custody with HSBC or an approved 
non-US resident third party custodian, who is authorized to advise HSBC of any 
changes in ownership. For all other Bearer share corporations, the Beneficial 
Ownership letter must be completed and renewed every three years. 

Each of the factors noted below will be considered in determining if the Bearer 
share account should be classified high-risk: 

• Risk classification of ultimate beneficial owner/decision maker 

• Involvement of HSBC in the creation of the Bearer share corporation Cif HSBC 
created the corporation, the Relationship Manager will already have significant 
knowledge of the client) 

• Number of accounts the Bearer share client maintains (if the only account 
with HSBC is the PIC (Bearer share corporation), then the client may be 
considered high risk) 

• Length of time the Beneficial Owner of the Bearer share corporation has been 
a client 

• Level and nature of activity in the Bearer Share corporate accbunt(s) 


Exceptions; 

Exceptions to this policy must be approved by any two of the following, one of 
whom must be the AML Officer: the CEO - ny ipb or designate, coo and chief aml 
officer, pb Americas. 


Attachment: Bearer shares Account Total.xls.zip 
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Occ-Psi -00226652 

From: jeff clous/hbus/hsbc 

Sent: 12/11/2007 4:13:08 PM 

To: PAUL J 0'SULLIVAN/HBUS/HSBC@HSBC02 

CC: ALAN P WILLIAMSON/HBUS/HS0C@HSBC;MANUEL diaz/hbus/hsbc@hsbc;terry westren;louis 
MARINO/HBUS/HSBC 

Subject: Re: Fw; Bearer share Corporation Policy 

Paul, attached are my comments on the draft Bearer Share Policy that I had 
previously sent to Alan in September. 

AS you know, ipb Miami has ceased accepting Bearer share company accounts so 
draft requirements for establishing new bearer share accounts are not relevant. 

IPB Miami maintains existing accounts for 1,679 Bearer Share Corporations of 
which 126 are considered High Risk. (See attached report.) These companies 
hold $2.6 billion in PUM and generate an estimated revenue of $26 million per 
year. 

# Bearer Share pUM Bearer Share Est. Margin Estimated Rev 

1679 2,626,134,512 1.00% 26,261,345 


I believe there would be a significant impact to the IPB business if we enacted 
the draft policy of requiring all existing bearer shares to be held in custody 
by the end of next year. 

I would question why the draft policy would require BOTH holding bearer shares 
in custody and re-certifying the beneficial ownership letter every three 
years. That seems to go beyond the expectation of the regulators. As I 
pointed out below, the interagency examination manual has clearly stated that 
periodic re-certification of the beneficial ownership of bearer share accounts 
is acceptable for well known established customers. (The average age of the 
Miami bearer share relationships is 13 years.) 

I would also question the timing of the draft policy, which requires existing 
Bearer Share companies to convert to registered shares or be held in custody by 
the end of 2008, a year ahead of the BVI regulations requiring the same steps 
at the end of 2009. This would take a major effort on our part to accomplish 
and would disadvantage long standing HSBC clients many of which HSBC has 
assisted in establishing their company. 

Is there any room to revise this policy or obtain a dispensation for IPB? 
Regards , 

Jeff clous, SVP 
IPB operations 

1441 Brickell Avenue, 16th floor, Miami, Florida 33131 
(305) 539-4810 (Phone) (305) 374 6466 (Fax) 


Alan with respect to existing bearer share accounts the BSA/aml EXAMINATION 
manual has changed their comment on the mitigation of risk of bearer share 
accounts, in 2005 - custody was the only option. This changed in 2006/7 and 
re-certification is acceptable. 


EXAMINERS MANUAL 2005 - BEARER SHARE 

if ownership is held in bearer share form, the bank should maintain the 
physical control of the bearer shares either inhouse or with a trusted third 
party to ensure that the ownership of the corporate entity does not change 
without the bank’s knowledge. 


I PermaneiU Subcommittee on Invcstigattons l 

EXHIBIT #94 I 


14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm01073 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 




1060 


VerDate Nov 24 2008 


Occ-Psi -00226652 

EXAMINERS MANUAL 2006/7 - BEARER SHARE 

If ownership is held in bearer share form, banks should assess the risks these 
relationships pose and determine the appropriate controls. For example, banks 
may choose to maintain (or have an independent third party maintain; bearer 
shares for new clients, or those without well established relationships with 
the institution. 

For well-known, established customers, banks may find that periodically 
recertifying beneficial ownership is effective. 


Regards , 

Jeff clous, SVP 
IPB Operations 

1441 Brickell Avenue, 16th floor, Miami, Florida 33131 
(3051 539-4810 (Phone) (716) 626 6922 (Fax) 


Paul 3 O'Sullivan/HBUS/HSBC(aHSBC02 
12/10/2007 06:36 PM 

To 

Terry westren/HBUS/HSBC@HSBC, Mason C salit/HBUS/HSBC(aHSBc02, Teresa 
Garcia/HBUS/HSBC@HSBC02, Antonio Suare2-0bregon/HBUS/HSBC@HSBC, Jeff 
Clous/HBUS/HSBCdHSBC, Manuel Diaz/HBUS/HSBC^HSBC, Clara Hurtado/HBUS/HSBC@HSBC, 
Patrick M campion/HBUS/HSBC@HSBC, Steven 3 Rockefeller/HBUS/HSBC@HSBC, Dennis J 
Duggan /HBUS/HSBC(aHSBC 

cc 

Marlon Young/HBUS/HSBC@HSBC, Louis Marino/HBUS/HSBC@HSBC, Alan P 
wi 1 1 i amson/HBUS/HSBC@HSBC 

Subject 

Fw: Bearer Share Corporation policy 


All, 

Attached is the final draft of proposed policy covering Bearer share Company 
clients. There is a little more flexibility than was originally planned and we 
will be able to maintain bearer share company accounts once the requirements of 
the policy are met. 

I will follow up with each group individually (DPB, IPB NY, and IPB Miami) to 
discuss implementation steps. 

regards , 

Paul 

Forwarded by Paul 2 o'Sullivan/HBUS/HSBC on 12/10/2007 06:21 PM 

All S Kazmy/HBUS/HSSC^HSBC 
12/10/2007 04:38 PM 

TO 

Paul J O'Sullivan/HBUS/HSBC(aHSBC02 
cC 

Subject 

Bearer Share corporation Policy 
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Attached is the aforementioned document for implementation purposes. Please 
note that we will be announcing the policy by the end of the week. 

[attachment "Bearer Share Corporation Account Policy Guidance (Final Draft 
082907) .doc. zip" deleted by 3eff Clous/HBUS/HSBC] 

In case of any questions, please let me know. 

Regards , 


Attachment: All Bearer share Accounts.pdf.zip 
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C. Mandel 04/25/2007 11:32:53 AM (43452433_C. Mandel 4_15_07 to 5_5_07 XV_2DD.wav^p) Page 1 of 4 

Mr. Cohen; Hello 

Claude: Y es, Coheb, you’re sure that Gregoire told you that? 

Mr. Cohen: Why? Yes. 

Claude: He told you that he’ll set up a Panamanian company for you [again]? 

Mr. Cohen: A Panamanian, he gave me names and evaything. 

Claude; He gave you names too? 

Mr, Cohen: Yes, Panamanian companies. 

Claude: Because it’s. . . sooner or later you are going to register Mr. Cohen, it’s 

better to have registered shares. 

Mr. Cohen: I don’t want registered shares. If I place relatives as assignees, I don’t 

want these assignees one day saying that the money is theirs. 

Claude: [sighs] 

Mr. Cohen: Eh yes, do you understand? 

Qaude: Yea, I see, hut because sooner or latCT, it’s going to be registered, do you 

understand Mr. Cohen? Thai’s why, why you will pay money, now you will pay money 
all over again. 

Mr. Cohen: So what do you want? TTiat I close the account with you and that I go to 
Gregoire? 

Claude: I didn’t say that, but I didn’t say that you should close the account. . . 

Mr. Cohen: I can’t do that. 

Claude: ...close the account 

Mr. Cohen: Neither Safra nor Gregoire told me tlat It’s just you telling me that. 
Claude: That what? 

Mr. Cohen: Maybe in Geneva it can’t oust... 

Claude: . . .but Mr. Cohen, I am honestly telling you that if it isn’t today, its 

tomorrow, or the day after, it’s going to be. . . 
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Mr. Cohen: Maybe in the United States, hat not New Yoric. .. in Geneva. 

Claude: Alright, do you want to speak with Eveljne and have her betta estplain it 

to you? 

Mr. Cohen: No, I do not want to speak wifli her Why? 

Claude: OK, listen, I will verify wifli compKance and compKance will verify with 

Geneva if it’s OK to opKi Panamanians and that’s it 

Mr. Cohen: Check, and check if flie laws in Switzaland are different than American 
laws. 

Claude: The laws in' Switzerland are different than those in the United States, we 

are going to verify that Mr. Cohen. Believe me, I’m doing the best for you, fliat s why I 
am going to ask. 

Mr. Cohen: And older companies, no. 

Claude: Older companies what 

Mr. Cohen: They don’t need to re^er. 

Claude: No, no, no, older con^wnies no, but now new companies are asked to, all 

of daem are going to be registered, all. 

Mr. Cohen: But older companies, no. 

Claude: No. 

Mr. Cohen: So, I still have the old ones. 

Claude; Yes, but this has nothing to do with the old ones. Now you want to open 
for...- 

Mr. Cohen: . . .no I can give you an old one. 

Claude: Panamanian? 

Mr. Cohoi: Yes, there are old Panamanians. 

Claude: I’ll ask . . . 

Mr. Cohen: I have old ones that are ten and fifteen years old- 
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Claude: Ten and fifteen years old, but there always needs to be a new tarificator, 

good standing, a new this, a new that, a new tins, what do we. . .If it’s ten years old, there 
is a new certificate of good standing. 

Mr. Cohen: Yes. 

Claude: ■ TheTeisanew...somenew,flie...MWsecretaries. (Inaudible) you know 
that the directors, bosses, have changed? Of ti»e . . .of fiiat company. 

Mr. Cohen; Yeah, so? 

Claude: And so it would need a new director, file list of new directors, the list of 

new ones. . .so it’s the same thing. You need to open a new one. . .there needs to be a new 
one. 

Mr. Cohen: There needs to be shardioldere. 

Claude: Yes. 

Mr. Cohen: I’ll gjve ycm the benefidal owner, but I do not want the shares to be in tiie 
name of the beneficial owner. 

Claude: No, you can. . . you can diversify the shares. 

Mr. Cohen: And so? 

Claude: That means (hat the hundred, [inaudible] you can give all of the names, 

fliat one, that one, that one, thatone. 

Mr. Cohen: And so? 

Claude: It’s easier tiian giving it to just one. 

Mr. Cohen: Wait, wait a minute, but the shares, you have to, you want shares? 

Claude: No, you will have the miginals, but you can put for example X - M. Leon 

-40; Sonia- 50... 


Mr. Cohen: But I can’t put that, otherwise I have to declare feem in the United States? 
I can’t do that, I don’t want to declare. ..othwwise, 1 have to close the accounts with you 
and go to Geneva. 

Gaude: Yes, I see, I seewhatyouwant... 

Mr. Cohrai: I can’t do that because we, I’m a resident here. 
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Claude: Yes. 

Mr. Cohen:, Why do you think I put Habib... 

Claude: Yes, rigjit, right 

Ntr. Cohen: .. .my brother-in-law, he’s... he agre^ with me. It’s not like I’m doing it 
without... 

Claude: OK, OK, alright, I understand, I undatstand. 

Mr. Cohra: He gives me his passport, he gives me everything. 

Claude: OK so you. . . you absolutely want to change to Panamanian. OK, I’ll ask, 

rU ask compliance and we’ll sec, alri^t and I will call j^u bade, 

Mr. Cohen: Keep me posted because [inaudible]... Geneva is free. 

Claude: OK, I will keep you posted. He gave you names too? 

Mr. Cohen: He gave me names; he’s going to make them companies, 

Claude: Aliighti OK, I will ask and I will call you back. 

Mr. Cohen: OK. 

Claude: Bye bye. 

Mr. Cohen: Talk to you soon. 
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SINGAPORE 
STOCKHOLM 
STLITTGART 
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WASHINGTON, DC 


City of Now York, State of New York, County of New York 


I, Anne Lutz, hereby certify that the document “C. Mandel 04/25/2007 IT :32:53 AM 
(43452433_C. Mondel 4_15^07 to 5_5_07 XV^aDD-wav-ap)” is, to the best of my 
knowledge and belief a and accurate transladon from Freixch to English. 



Sworn to before me this 
November 23,2009 




li^ture. Notary Piilic 


KRISTIN MitoRO 

Notary PubBc - State of New York 
1 _ No. p1Mi62t2799 
QuaWed in New York County 
; Commieaton Explrea Oct 1 9 . 


Stamp, Notary Pxiblic 


THREE P/RRK AVENUE, 39TH FLOOR, NEW YORK, NY 10016 T112.689.5555 F rireSMOSO WWW.TRANSPERFECT,COM 
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From: TERESA GARCIA/HBUS/HSBC 
sent: 6/20/2007 4:05:47 PM 
To: ALAN P WILLIAMSON/HBU5/H5BC@HSBC 
CC: 

subject: Re; Waiver Request 
Alan, 

That's where my problem comes in. 

The policy reads: 

For new Relationships: Bearer Share corporations will only be accepted if: 

CEO - NY IPB and AML LCO approval is received; and, 
client commits to registering the shares or the shares are held in 
custody with an approved non-us resident third party custodian, who is 
authorized to advise HSBC of any changes in ownership, (see Procedures) 

In this case, the client does not want to commit to either option. That's why 
Manuel suggested if we can give them a waiver to the above. We are t^dna 
about a potential client with an estimated net worth is in excess of^BIBl 
million in liquid assets. 

Would having a conference call with Manuel, the RM and the two of us help? 

We always try to work with the business, but sometimes we just can't. 

Thanks 

Teresa Garcia 

senior Manager specialized Compliance 
HSBC Private Bank New York 
452 Fifth Ave., t6, NY, NY 10018 
(PH)212-525-6014 (F) 212-525-8255 


a Redacted by the Permanent 

Subcommittee on Investigations 


Alan p Williamson/HBUS/HSBC 
06/20/2007 04:43 PM 

TO 

Teresa Garcia/HBUS/HSBC@HSBC 
CC 

subject 

Re: Waiver Request 


Teresa 

Thanks, is there a procedure for waiving bearer shares - i.e. do Manuel & I 
have the authority? 

Alan 


Teresa Garcia/HBUS/HSBC 
06/20/2007 01:44 PM 

I Permanent Subcommittee on investigations 
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To 

Alan P williamson/HBUS/HSBC@HSBC 
cc 

Subject 

Re: Waiver Request 


Following are the RM responses: 

The name of the accounts are; 

- Urigeler International S.A. - Holding Company 

- Birmingham Merchant S.A. - Holding Company 

These two are companies that were established several years ago in Panama, 
which establishes companies- with bearer shares. 

Thanks 


Teresa Garcia 

Senior Manager specialized Compliance 
HSBC Private Bank New York 
452 Fifth Ave., T6, NY, NY 10018 
CPH)212-525-6014 (F) 212-525-8255 


Alan p Williamson/HBUS/HSBC 
06/20/2007 11:15 AM 

TO 

Teresa Garcia/HBUS/HSBC@HSBC 
cc 

subject 

Re; waiver Request 


Teresa 

Thanks for the info, what are the bs companies and why are they bs? 
a 1 an 


From: Teresa Garcia 
sent: 06/20/2007 09:58 AM EOT 
To: Alan P Williamson 
Subject: fw: waiver Request 

Al an , 

I would like to discuss with you. The RM is anxious for an answer since he is 
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traveling to meet the client next week. 

Thanks. 

Teresa Garcia 

Senior Manager specialized compliance 
HSBC Private Bank New York 
452 Fifth Ave., T6, NY, NY 10018 
(PH)212-525-6014 (F) 212-525-8255 

Forwarded by Teresa Garcia/HBUS/HSBC on 06/20/2007 09:57 am 

Teresa Garcia/HBUS/HSBC 
06/14/2007 03:14 PM 

To 

Susan Hoggarth/HBUS/HSBC 
cc 

Subject 

Waiver Request 


Sue , 

Jai me carvallo is looking to open a relationship for 
The two accounts are bearer shares. Tl 

ne^ner^^register nor custodize the shares, and they do not want to sign the 
BOL. 


le client does not want 


Jaime and I have discussed this issue with Manuel Diaz, Manuel is willing to 
sign a waiver in order to open the two accounts, as he is very familiar with 


the family and interested in establishin g a rel 
the family very well since I worked_^Qji 


.hip w ith them. I also know 
‘or 19 ye ys . I have 
brief summary off 


» Redacted by the Permanent 
Subcommittee on Investigations 
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Please let me know what your thoughts are. 
Thank you. 


Teresa Garcia 

Senior Manager specialized Compliance 
HSBC Private Bank New York 
452 Fifth Ave., T6, NY, NY 10018 
(PH)212-525-6014 (F) 212-525-8255 


== Redacted by the Permanent 
Subcommittee on investigations 
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From: alan p williamson/hbus/hsbc 
S ent: 6/20/2007 5:48:38 PM 
To: MANUEL DIAZ/HBUS/HSBC@HSBC 

cc: 

subject: Re: Fw: waiver Request 

I thought so. i would do it without going to Geneva but audit wrote up dpb on 
a similar situation. 

a 1 an 


Manuel Diaz/HBUS/HSBC 
06/20/2007 06:32 PM 

To 

Alan p williamson/HBUS/HSBC@HSBC 
cc 

Subject 

Re: Fw: Waiver Request 


I FULLY SUPPORT THIS WAIVER 


Manuel L. Diaz 

President & Managing Director 
HSBC Private Bank international 
1441 Brickell Ave. 17th Floor 
Miami, FL 33131 
(305) 539-4747 Telephone 


Alan p wni1amson/HBUS/HSBC 
06/20/2007 06:28 PM 

TO 

Manuel Diaz/H6US/HSBC@HSBC, Marlon Young/HBU5/H5BC@HSBC 
cc 

Teresa Garcia/HBUS/HSBC®HSBC, Susan Hoggarth/HBUS/HSBCSHSBC 
Subject 

Fw; waiver Request 


Manuel, Marlon 

I have no objection to this request, however l believe the requirement to 
register bearer shares is a group mandate. I understand the process to be that 
if you want an exception we will have to go to Geneva. I am willing to pass on 

Permanent Subcommitttc on Investigations I 
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the request if that is what you want. 

Thanks 
Al an 

----- Forwarded by Alan P Williamson/HBUS/HSBC on 06/20/2007 06:24 pm 

Teresa Garcia/HBUS/HSBC 
06/20/2007 05:29 PM 

TO 

Alan P winiamson/HBUS/HSBC(?HSBC 
cc 


Subject 

Re: waiver Request 


Redacted by the Permanent 

Subcommittee on Investigations 


Alan, 

Because they wish to maintain confidentiality, and the y have never be en asked 
by our competitors with whom they b ank to do this. The s the 

most visible and influential familyl^HHlB 


Teresa 


Alan p williamson/HBUS/HSBC 
06/20/2007 05:21 PM 

To 

Teresa Garcia/HBU5/HSBC®HSBC 
cc 

Subject 

Re: Waiver Request- 


Teresa 

why do they not want to register or deposit the shares? 
Al an 


Teresa Garcia/HBUS/HSBC 
06/20/2007 01:44 PM 

To 

Alan P williamson/HBUS/HSBC®HSBC 
cc 
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From; ALAN P WILLIAMSON/HBUS/HSBC 
sent: 6/26/2007 4:24:22 PM 

to: JAIME CARVALLO/HBUS/HSBC(aHSBC; MARLON Y0UNG/HBUS/HSBC@HSBC ; "MANUEL DIAZ" 
<MANUEL . DIAZ@HSBCPB . COM> ; 

"TERESA GARCIA" <TERESA. GARCIA(aHSBCPB.COM> ; "SUSAN HOGGARTH" 

<SUSAN . HOGGA RTHiaUS. HSBC . COM> 

Subject: Re:^|iB Family 

Marlon, Manuel, Jaime 

I spoke to Susan wright. Group Head of AML. she is reluctant to grant the 
exception but will consider it. 

Jaime 

could I ask you to prepare a summary of the proposed relationship again, 
including details of the family and their businesses. Please specifically 
address whether there are any undisclosed ownership interests or political 
connections with these accounts. Circulate it to this group for review. 

I know you already did something of this - no reason you can't re-use most of 
it. 


Alan 


From: Jaime carvallo 

sent: 06/26/2007 02:23 PM EOT 

To: Marlon Young 

Cc: Alan P W illiamso n 

subject: Re: Family 

Marlon, 

I forgot to mention again that this family’s l iquid net worth is estimated in 

excess of H■|||||■and total net worth in the|BHHi$ area. 

I hope this can be done. 

Thank you again for your help. 

Waem regards 

J ai me 


From: Marlon Young 

Sent; 06/25/2007 06:33 PM EOT 

To: Jaime Carvallo 

Cc: Teresa Ga rcia; T homas Flory; Ana Oa Silva; Alan p Williamson 
subject: Re: Family 

I have discussed w Terry and Alan Williamson and will give my support to this 
exception. Sorry, I was in a rush to leave friday, I forgot to send my 
approval . 

Regards , 

Marlon 


From; Jaime Carvallo 

sent: 06/25/2007 01:48 PM EOT 

to: Marlon Young 

Cc: Teresa Garcia; Thomas Flory; Ana Da Silva 
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' “ by the Permanent 

Subcommittee on Investigations 


Marlon , 

Teresa Garcia must have given you heads up on the the issue 

regarding their holding companies having bearer shares and the fact that they 
will not sign the BOL. 

I will see one of the family members tomorrow morning and this still seems to 
have no resolution. This is too important a family in Peru for us not to want 
to do business with, and one that has taken a lot of my time and effort to 
convince to start a relationship with us. Joao Luiz has met members of the 
family as well. I would appreciate your involvement at this point, as this has 
become extremely sensitive. 


Thank you and regards, 
Jaime 
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From: TERESA GARCIA/HBUS/HSBC 
Sent: 7/5/2007 11:33:35 am 
T o: ALAN P WILLIAMSON/HBUS/HSBC@HSBC 
CC: SUSAN HOGGARTH/HBUS/ H5BCQHSB C 
Subject: Re: Fw: Fw: Fw: ■■■■■Farnily 

Alan, 

Not quite resolved yet, but there is nothing else for us to do. The RM and the 
Group Head are not seeing eye to eye on this one. Therefore, it is now between 
them. 

I'll keep you posted. 


iionsj 


^ Redacted by the Permanent 
Subcommittee on Investigations 


Teresa Garcia 

Senior Manager specialized Compliance 
HSBC Private Bank New York 
452 Fifth Ave., T6, NY, NY 10018 
(PH)212-525-6014 (f) 212-525-8255 


Alan P williamson/HBUS/HSBC 
07/03/2007 04:30 PM 

To 

Marlon Young/HBU5/HSBC(aHSBC, laime Carvallo/HBUS/HSBC@HSBC, Manuel 
Diaz/HBUS/HSBC@HSBC, Thomas Flory/HBUS/HSBC@HSBC 
CC 

Teresa Garcia/HBU5/HSBC(aHSBC, Susan Hoggarth/HBUS/HSBC@HSBC 
Subject 

Re : Fw : Fw : Fw : Fami 1 y 


All 

Just checking to see if this is going well or if there is anything more you 
need us to do. 

Have a good holiday 

Alan 


Marlon Young/HBUS/HSBC 
06/29/2007 05:33 AM 


Jaime Carvallo/HBUS/HSBCOHSBC, Teresa Garcia/HBUS/HSBC@HSBC 
CC 

Manuel Diaz/HBUS/HSBC, Alan p williamson/HBUS/HSBC@HSBC, Thomas 
Fl ory/HBUS/HSBC0HSBC 

Subject . 

Fw : Fw : Fw : Fami 1 y 
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- Redacted by the Permanent 
Subcommittee on investigations 


Jaime and Terry, 

See if you can work within the MLPP policy on bearer shares. 

Regards, 

Marl on 


From: David Ford 

sent: 06/29/2007 10:17 AM CEDT 

To: Alan P Williamson 

Cc: Marlon Young; Ma nuel Dia z 

subject: Re: Fw; Fw: ■■^■Family 


Al an, 

Attached is the relevant MLPP policy which allows either bo declaration or 
holding the shares by HSBC or third party banks. Hie MLPP provides significant 
flexibility since the shares can also be held by other banks acceptable to 
HSBC. As long as US requirements are not more stringent than our gpb KYC 
policy, suggest that USPB offer the client the choice of the various options 
under the policy. 

Regards , 

Davi d 

[attachment "MLPP-Bearer share, doc" deleted by Alan p williamson/HBUS/HSBC] 


F. David Ford 

Global Money Laundering control officer 
HSBC Private Banking Holdings (Suisse) SA 
Rue de Lausanne 18-20 
Geneva, Switzerland 1211 
Tel ; 41-58-705-5284 


Alan P Williamson/HBUS/HSBC 
28.06.2007 19:18 

TO 

"David Ford" <david.ford@hsbcpb.coni> 
cc 

Subject 

Fw: Fw; ■■■■Family 


David 


Does the suggestion referred to in Jaime's email below seem viable? sorry to 
keep bothering you, I didn't realise we might have so many issues. 


Alan 
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= Redacted by the Permanent 
Subcommittee on Investigations 


From: Manuel Diaz 

sent: 06/28/2007 11:49 AM EDT 

To: Marlon Young 

Cc: Alan p Willi amson; J aime Carvallo 
subject: Re: Fw: ■■■Family 

THANK YOU MARLON FOR YOUR INTEREST ENJOY YOUR VACATION ! ! ! ! ! 


Manuel L. Diaz 

President & Managing Director 
HSBC Private Bank International 
1441 Brickell Ave. 17th Floor 
Miami, fl 33131 
(305) 539-4747 Telephone 


Marlon Young/HBUS/HSBC 
06/28/2007 09:58 AM 

To 

Jaime Carvallo/HBUS/H5BC@HSBC 
cc 

Manuel Diaz/HBUS/HSBC@HSBC, Alan P williamson/HBUS/HSBC@HSBC 
Subject 

Re: Fw: ■^■■Family 


Jaime, 

This could be a good compromise and could resolve our problem. 
Marlon 


From: Jaime Carvallo 
Sent: 06/28/2007 09:47 AM EDT 
To: Marlon Young 
Cc: Manuel Diaz 

subject: Re: Fw: ■■■ Family 
Marlon, 

I have asked Teresa for a draft of a letter that client could sign in lieu of 
the BOL, as have few clients in the past, while the letter states similar 
information to that in the BOL is kept separately from account opening docs and 
may be a viable option. I am just waiting for her draft before trying anything 
else. 

Thank you for your follow up! 

Jaime 


From: Marlon Young 
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sent: 06/28/2007 03:39 AM EOT 
To: Jaime carvallo 

Cc: Manuel Diaz 

Subject: Fw: Fw: Family 


I = Redacted by the Permanent 

Subcommittee on Investigations 


Jaime - 

Below is a response I receive from Mike Finnamore who works for me in dpb. He 
used to be a senior aml specialist at Citigroup Private Bank, He is very 
familiar w KYC policies there and the policy on bearer shares. 

Would any of the options suggested below work for the client? would client 
alow us to keep bearer shares in safekeeping or execute a confidentiality 
agreement as suggested by Mike? 

Regards, 

Marlon 


From: Michael G Finamore 
sent: 06/27/2007 10:38 PM EDT 
To: Marlon Young 
Subject: Re: Fw: ^^mparnily 

Hi Marlon, 

In this day, it is not likely that any US based private Bank would allow an 
account to be opened without knowing all the owners unless an 
exception/dispensation was granted. citi Private Bank would open an account 
for an entity whose shares were issued in bearer form for a client with an 
existing 2+ year relationship, but I never saw an exception requested because 
the client did not want to sign the Beneficial Ownership Letter. 

Would this client feel more comfortable if we open the account for his bearer 
share entity without a aoL but he would allow us to hold the certificates in 
safekeeping? In that situation, we could make a very reasonable argument for 
dispensation. 

Or would the client provide the BOL if we provide him a confidentiality 
agreement? There is an 'approved version* that we have used in the USPB, but 
I am certain Legal can tweak it to make the client feel more comfortable. 

Hope this helps. 

Thanks and regards, 

Michael Finamore, VP, CAMS 
Business Risk officer 
HSBC PBUS 
Tower / 26th fl . 

NYC, NY. USA 
tel: 212-525-8451 


Marlon Young/HBUS/HSBC 
06/27/2007 08:19 PM 

TO 

Michael G Finamore/HBUS/HSBCOHSBC 
cc 

Subj ect 

Fw: Family 
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Here are more info regarding why the family will only provide bearer shares. 
Marlon 


From: Jaime Carvallo 

sent: 06/26/2007 01:47 PM EOT 

To: Marlon Young 

Cc: Teresa Garci^: Thomas Flory; Ana Da silva; Alan p Williamson 
Subject: Re: BHH Family 

Marlon, 

I met with the prospect today. While they understand our policy, he reiterated 
the family is extremely concerned about confidentiality and they are afraid 
this kind of information could put them at risk. He added that neither Citi 
nor jPMorgan (banks they have relationships with) have asked for them to sign a 
BOL. He does understand that eventually they will have to register the shares, 
but will only do it when absolutely necessary. 

I wanted to add that another piece of business that is on the table, for which 
we only have one other bank competing, and which we have a good chance of 
winning since we were the first to approach them on, is to help them reorganize 
the family businesses, and facilitate the succession not only of their 
financial assets but also their opeating companies. This could be a very 
significant piece of bussiness. Not opening accounts will eliminate us from 
this business that is very strategic for the family and a way to deepen a 
relationship with them over time, and needless to say, very profitable. 

Thank you for your help with this! 

Regards, 

Jaime 


From: Alan p Williamson 

sent; 06/25/2007 06:54 pm edt 

To: Marlon Young; Jaime Carvallo 

cc: Teresa G arcia; Thomas Flory; Ana Da silva 

subject: Family 

Marlon 

I apologise but i thought I forwarded you David Ford’s response last week - I 
will again. Basically he wants us to get an exception from group. Since I 
happen to be with the head of group ami i will ask her tom'w. 

Alan 


From: Marlon Young 

sent: 06/25/2007 06:33 PM EDT 

To: Jaime carvallo 

Cc: Teresa G arcia; T homas Flory; Ana Da Silva; Alan P Williamson 
Subject: Re: miilPI 

I have discussed w Terry and Alan Williamson and will give my support to this 
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exception, sorry, i was in a rush to leave friday, I forgot to send my 
approval . 

Regards, 

Marlon 


From: Jaime Carvallo 

sent: 06/25/2007 01:48 PM EDT 

To: Marlon Young 

Cc: Teres a Garci a; Thomas Flory; Ana Da Silva 
Subject: mHK Family 

Marl on, 

Teresa Garcia must have given you heads up on the family and the issue 
regarding their holding companies having bearer shares and the fact that they 
will not sign the BOL. 

I will see one of the family members tomorrow morning and this still seems to 
have no resolution. This is too important a family in Peru for us not to want 
to do business with, and one that has taken a lot of my time and effort to 
convince to start a relationship with us. Joao Luiz has met members of the 
family as well. I would appreciate your involvement at this point, as this has 
become extremely sensitive. 

Thank you and regards, 

Jaime 
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From: janet l burak/hbus/hsbc 
sent: 2/24/2010 9:52:24 PM 

to: BRENDAN MCDONAGH/HSUS/HSBC0H5BCO2j IRENE M DORNER/HBUS/HSBC@HSBC02 
subject: Re: occ Meeting 

The backlog issue is an indisputable problem, and resulted from a number of 
factors—increase in transaction volumes, increase in alerts due to system 
changes, law changes and protocol changes (sucfi as mt202cov, which effectively 
eliminated cover payments) and a failure to increase resources early enough to 
deal with this, some of the volume and alert activity should have been 
anticipated, some could not. The biggest issue for me is that our KRis did 
not result in escalation of the problem at an early enough stage so that 
management could address the issues — the kris are being revised, and i do not 
expect this problem to occur again, but it is taking an enormous effort to 
eliminate the backlog. You may recall that in December you authorized the 
hiring of significant temporary staff to work the backlog, and hiring and work 
began in January. 


original Message 

From: Brendan McDonagh 
Sent: 02/24/2010 08:22 PM CST 
To: Janet Burak; Irene H DORMER 
subject: Re: OCC Meeting 

Let's discuss Monday in NYC when you are back from overseas, i will be in DC on 
the 16/17/18 March and can see the OCC then. 

One fair question is how did the alert backlog buildup? 


original Message 

From: Janet L Burak 

Sent; 02/24/2010 08:39 PM EST 

To: Brendan McDonagh; Irene M dorner 

Subject: occ Meeting 

I met with the occ today, in light of the extent of our alert backlogs, sally 
indicated that they will shortly be issuing a supervisory Letter finding 
violations of the requirements to file a SAR in certain defined 
circumstances, and generally mthin 30 days of detection of facts that may 
constitute a basis for filing a SAR. we make a determination of whether or 
not to file a SAR after an alert is reviewed, and, as you are aware, there 
are a significant number of aged alerts, while the OCC is unable to point to 
specific situations where they believe that SARs should have been filed, but 
were not, they have concluded that, in light of the size of the backlogs, these 
situations must exist. The letter will reflect the fact that we 
sel”F-identified the backlog issue, and that are taking actions to address it. 

Sally also indicated that they are considering dovmgrading their assessment of 
Compliance Risk Management to "weak" from "satisfactory”, although Sally 
indicated that if they make that decision it will not Impact the Bank's 
composite camels rating, which would remain a "2” (satisfactory), and would not 
likely impact the Management rating component (also a "2”). For Irene's 
benefH, national banks are rated on a number of component categories— capital , 
Asset Quality, Management, Earnings, Liquidity, and sensitivity to Market 
Risk— and those components determine the composite rating of the institution. 
This is a quite surprising development, since Compliance as a function was 
deemed effective in the OCC's July 2009 report of examination, and the OCC's 
July 2009 separate Compliance Management examination also concluded that 
Compliance management was satisfactory, while •tine latter report indicated that 
compliance leadership needed to be strengthened in the bsa/aml area, and 
recorranended the hiring of a dedicated ana qualified bsa/aml officer, it also 
noted that a search was then underway at the time to fill this position. 

Sally indicated that the reason for their reconsidering their assessment 
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relates to the issues they have identified ojising out of the "expanded 
banknotes examination" as well as the fact that there is an ongoing third party 
investigation of our BSA/AML compliance Cl assume a reference to the DO]), 
while we are finalizing our review of tile examples they provided us 10 days 
ago, wyn has to7d me that we are not finding anything vmich points to a 
systemic problem rather than one-offs (if that), as such, I am inclined to 
believe this may be more about an occ concern that if the DO] investigation 
actually results in a negative finding, the OCC will be criticized for not 
having identified and acted on those issues earlier- We intend to provide the 
occ with a response next week to the issues they identified, and I am hopeful 
that the response will positively influence their view on compliance Risk 
Management. If that appears to not be the case, i think that we will need to 
take this to DC CGrace Dailey), as this is becoming an untenable situation. 

Please let me know if you have any questions. 


Janet L. Burak 

SEvp and General counsel 

HSBC North America Holdings inc. 

HSBC USA Inc. 

HSBC Bank USA, N.A. 

452 Fifth Avenue, 7th Floor 
New York, NY 10018 
CT) 212-525-6533 
Cf) 212-525-8447 

email: janet.l .burak0us.hsbc.com 
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From: Dsvfd W J BAGLEY 
Sent: Tue Jun 09 14«7:42 aJ09 
To; EmBson ALONSO 

Cc: CaSwnne 5USSERY; MaWiew J WKtN(% Michael F (^OGHEGAN 
Subject: Re: GMO Business reviews • LATAM 
:ca: NsiWa! 




EmiBon. 

I fully Bcknowlecfes the level of priocfty and focus that you and the team have given n these Issues and . 
the progress Hiat has been mode peiiicuiarly In Mexico and have taken of Sits info account. Csfoerine 
has kept us &i9y updated and I am else aware of the fact that CNBV has ei^fressed their saiisfoctlai wHh 
thapicgress made. It Is Important to note (hat this rattnodoea nols^rti^ thet we taka the view that ttwe 
has been an inadequtf e respoMe. For exampla Ud has been rated red on some eeUgoriM of risk in the 
GAC map because of Inhorenf risk. 

The oasis for the rating B however: 

The inherent AML risk In Mexico Is stiS very hi^ and I foara am rxtt many other parts of the Groi^ that 
have w.hal Is affocdveiy a drugs war beirtg conducted on me streets and also have the rM posed by 
potenUal sting and other operettons by the US authortllee. VV» have of course remedlafod our Ngh risk 
accounts, but the historic weak account apenlcv processes mean that we have owecal lower levels of 
KYC across the customer base es a whota. 

Tfrara are other countries within CA v^are we have ongofog rems^Sen pri^ects ir»iudirtg Panare end 
Costa Rica where sgatri there b a raised AML rbk where it is not yet clear to me (hat we have corr^ted 
^ remediation of high risk accounts. 


Happy to diacuBs forther. 


Regards 



4 Permanent SMbcommitlee on Investigations I 
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Comptroller of the Currency 
Administrator of National Banks 


Washington, DC 20219 

September 20, 2012 

The Honorable Carl Levin 
Chairman 

Permanent Subcommittee on Investigations 
United States Senate 
Washington D.C. 20510 

Dear ChaimiM Levin: 

Th^ you for your letter of August 2, 2012, following up on the Permanent Subcommittee on 
Investigations* July 17, 2012, hearing on U.S. Vulnerabilities to Money Laundering. Drugs and 
Terrorist Financing: HSBC Case Sfuify. 

At the hearing, I confirmed the OCC’s support of file recommendations contained within the 
Subcommittee’s staff report to strengthen our BSA/AML supervision. This letter provides you a 
brief update on the actions we have taken since that hearing to implement the report’s 
recommaidations. 

On July 1 8, 2012, 1 notified all OCC staff of my commitment to adopt and implement the 
recommendations, and I described other changes we are making to enhance our supervisory 
process. As I stated at the hearing, it is my objective to promote an environment within the OCC 
that will empower our examiners to conduct effective BSA/AML examinations and escalate any 
findings of deficiencies to appropriate agency departments for action- A copy of my message to 
our staff is enclosed. 

On August 1,2012, we issued Supervisory Memorandum SM 2012-3, “Consideration of Bank 
Secrecy Act/Anti-Money Laundering (BSA/AML) Examination Findings in the Uniform 
Interagency Rating Systems and OCC’s Risk Assessment Systwn’' to all examining personnel 
(copy enclosed). This memoranduni provides that, effective July 18, 2012, the results ofa 
BSA/AML examination are no longer considered under the Federal Financial Institutions 
Examination Council’s (FFIEC) Uniform Interagoicy Consumer Compliance Rating System. 
Consistent with the Subcommittee’s recommendation, OCC examiners are now required to 
incorporate BSA/AML examinations findings as part of Ihe Management component rating when 
determining bank ratings in accordance with the FFIEC Umform Financial Institutions Rating 
System (CAMELS ratings). This guidance also clearly states our policy that a presumirtion 
exists that serious deficiencies in a bank’s BSA/AML compliance area could adversely affect a 
bank’s Management component rating. 
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I also committed to revising and clarifying the operation of our cross-functional Large Bank 
Review Team. Pursuant to tills commitment, we issued Siqjervisory Memorandum SM 2012-5, 
“Bank. Secrecy Act Large Bank Review Team Structure and Operation” that more clearly defines 
the mission, membership, organizationsil structure and functions of the Large Bank Review 
Team. This guidance implements our polir^ designed to ensure that appropriate steps are taken 
in a timely fashion to address BSA/AML deficiencies identified in national banks federal 
savings associations and includes provisions to oisure that 1 and the OCC’s Executive 
Committee are briefed on the Review Team’s activities on a regular basis. 

Furthermore, 1 directed the OCC’s Committee on Bank Supervision and Ombudsman Office to 
develop a process that will provide examiners with a mechanism to appeal a supervisory issue 
directly to me. I have reviewed their recommendations and the internal ^peals. process will 
commence on October 1, 2012. 

Finally, we are in the process of drafting policies and procedures for citation of violations in 
components of a bank’s BSA compliance program. We agree with the Subcommitlee’s 
recommendation that this flexibility will provide our examiners another mechanism to address 
weaknesses and violations related to compliance program components. 

Compliance with BSA/AML is a safety and soundness issue and a matter of national security. 
Under my leadership, the OCC will continue to implement the needed changes to ensure the 
safety and soundness and integrity of the U.S. financial system. 

We would be happy to provide additional information about our continued progress in 
implementing the Subcommittee’s recommendations, should that be helpful. Please feel free to 
have your staff contact Carrie Moore, Director for Congressional Liaison, at 202-874-4 844, to 
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OCC News 

Posted on July 16, 2012 


To: All OCC Employees 
From: Thomas J. Curry 
Date: July 18, 2012 

Subject: Lessons From Our Experience With HSBC 

On July 17, Deputy Chief Counsel Dan Stipano and Grace Dailey from 
Large Bank Supervision joined me In testifying before the Senate's 
Permanent Subcommittee on Investigations regarding our supervision of 
HSBC Bank USA, N.A., and its BSA/AML program. The hearing followed a 
year-long investigation by the subcommittee into BSA/AML failures at 
HSBC. I want to thank the dozens of OCC team members who 
participated In Interviews during the investigation and helped prepare 
Grace, Dan, and me for the hearing. 

There are important lessons from this experience that we must use to 
Improve our supervision of BSA/AML issues. BSA/AML Is more than just a 
compliance Issue. It is an issue of safety and soundness and a matter of 
national security. As the investigation showed, we could have and should 
have acted sooner. We must be vigilant in banks and savings associations 
of every size. 

To enhance our supervision of BSA/AML across all of the banks we 
supervise, we embrace the three recommendations from the 
subcommittee's report . Interim guidance on implementing these 
recommendations will be provided shortly, to be followed by revisions to 
our examination policies and procedures. 

First, effective immediately we will no longer reflect BSA/AML findings in 
the "compliance" rating, rather we will fully consider BSA/AML findings in 
a safety and soundness context as part of the "management" component 
of a bank's CAMELS rating. Examiners should presume that serious 
deficiencies In a bank's BSA/AML compliance area adversely affect a 
bank's management component rating. 

Second, we are clarifying the operation of our Large Bank B5A Review 
Team to ensure we bring different perspectives to bear and react more 
quickly when a bank has multiple matters requiring attention, or apparent 
violations of its BSA/AML program. We will also explore how we track and 
review relevant information and whether additional initiatives are 
appropriate. 


http://domino02.occ/apps/pa/cx:cnews.nsf7f439d4ef036891b2852570ab00725cf4/l3db54e24„. 9/6/2012 
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Third, we will provide more flexibility for citing BSA/AML violations for 
individual "plilar" violations, and we will identify what steps we can take 
in our examinations to obtain a holistic view of a bank's BSA/AML 
compliance more promptly. In Implementing these changes, we must 
take care not to create disincentives to making the tough calls. That Is 
fundamentally ourjob. 

More generally, we will also review training, staffing, recruitment, 
policies, and Interagency coordination to make improvements in our 
BSA/AML supervision program. 

Finally, we must foster a culture that encourages people to speak up 
about weakness at the banks we supervise and to escalate those views 
for action. 

Ours is a difRcult and important mission. I am proud to be part of this 
team of dedicated professionals, and I appreciate the extraordinary effort 
of everyone working to ensure that the hnanciai institutions we supervise 
operate in a safe, sound, and fair manner. 

My oral statement and testimony are available on OCC.gov. 


Date i rrtle I Seauancfl Nunbct 
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SUPERVISORY MEMORANDUM 


Comptroller of the Currency 
Administrator of National Banks 


Washington, DC 20219 


SM 2012-3 


To; All Ex^ining Personnel 
From; Committee on Bank Supervision 
Date: August 1,2012 

Subject; Consideration of Bank Secrecy Aci/Anti-Money Laundering Examination Findings in 
the Uniform Interagency Rating Systems and OOC's Risk Assessment System 


This memorandum provides interim guidance for incotjKjrating Bank Secrecy 
Act/Anti-Moncy Laundering (BSA/AML) examination findings into the CAMELS 
ratings and the OCC’s risk assessment system (RAS) assigned to national banks and 
federal savings associations (collectively, banks).* This guidance also applies to 
federal branches and agencies of foreign banking organizations. 

Consumer Compliance Ratine 

Effective July 1 8, 201 2, the results of a BSA/AML examination are no longer to be 
considered when assigning a rating under the Federal Financial Institutions 
Examination Council’s (FFIEC) Uniform Interagency Consumer Compliance Rating 
System. 

Management Component Rating 

In keeping with current policy, examiners must consider BSA/AML examination 
findings in a safety and soundness context as a part of the management component of 
a bank’s FFIEC Unifoim Finanetai Institutions Rating System (CAMELS ratings). 
For federal branches and agencies, BSA/AML examination findings must be 
considered as part of the risk management component of the ROCA rating system.^ 
Examination procedures used to evaluate the adequacy of a bank's BSA/AML 
compliance remain unchanged. 


^ This supervisory memoraAdum (SM) rescinds SM 2006*2 (issued as MM 2006*2), "Incorporallng 
BSA. AML, OFAC, and USA PATRIOT Act Compliance Into Supervisory RaJings," as well as 
SM 2004*1 (issued as MM 2004-1), "BSA Exammatioos." 

^ROCa stands for Risk managemeiit.Operetional controls. Compliance, and Asset quality. 
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In addition, serious deficiencies in a bank’s BSA/AML compliance area will create a 
presumption (hat the bank’s management component raring will be adversely 
affected. For example, significant deficiencies m a bank’s compliance with 
BSA/AML that result in an overall BSA compliance program violation^ would reflect 
risk management practices that are less than satisfactory and would generally warrant 
a management rating of “3.” Other adverse BSA/AML findings, such as those 
resulting in “Matters Requiring Attention” (MRA) or less severe enforcement actions, 
may also negatively affect a bank’s management component rating, depending on the 
circumstances. This may be the case, for example, when a bank has BSA/AML- 
reiated MRAs across several lines of business. howevn-, management is already 
deemed in need of improvement and risk management practices are deemed less than 
satisfactory as reflected in a “3” management rating, a further downgrade in the rating 
as a result of BSA/AML deficiencies may not be warranted. On the other hand, for 
those situations that raise greater supervisory concerns, a downgrade of the 
management component beyond a “3” may be appropriate. Notwithstanding the 
circumstances, the support for the management rating should be fully documented in 
the appropriate supervisory system. In addition, examiners should be alert to 
situations in which management weaknesses identified in other areas of a bank reveal 
potential deficiencies In BSA/AML program oversight. 

Risk Assessment System 

While examiners will no longer consid^ BSA/AML examination findings as a' part of 
the interagency consumer compliance raring, BSA/AML findings are still considered 
as a part of compliance risk under the OCC’s RAS. Compliance risk considers a 
bank’s compliance with all applicable laws and regulations. The overall quantity of 
risk and quality of risk management related to BSA/AML compliance as well as the 
four pillars of a bank’s BS.A/AML program are considered in assessments of 
compliance risk. BSA/AML examlnaiion findings should also continue to be reflected 
in the OCC’s assessments of reputation, strategic, and operational risks, as applicable. 

The Committee on Bank Supervision expects to incorporate this guidance into 
revisions of the “Bank Supervision Process," “Large Bank Supervision," and 
“Community Bank Supervision" booklets of the CompiroUer‘s Handbook — and other 
guidance and systems, as needed— by September 201 2. 


’ Overall BSA compliance program violaiioni are citations of 12 CFR 21.21 for national banks or 
12CFR \€l.\ll for federal savings esociadons. These violations an: cited for deficiencies that render 
the BSA compliance program ineffecCivc when viewed as a whole and result in the issuance of a cease 
arid desist order. 
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SUPERVISORY MEMORANDUM 


Comptroller of the Currency 
Administrator of National Banks 


Washington, DC 20219 
To; All Examining Personnel 
From; Committee on Bank Supervision 
Dale; August 17, 2012 

Subject: Bank Secrecy Act Large Bank Review Team Structure and Operation 


The Office of the Comptroller of the Currency (OCC) established a cross-functional Large Bank 
Review Team (LB Review Team) to ensure bank supervision and enforcement consistency in the 
area of Bank Secrecy Act/Anti-Money Laundering (BSA/AML) compliance. The LB Review 
Team is also part of the OCC’s “Process for Taking Administrative Enforcement Actions 
Against Banks Based on BSA Violations,” as outlined in OCC Bulletin 2005-45. ' which states 
that potential BSA compliance program violations are to be considered by a review group. 

The LB Review Team comprises the Director of the Enforcement and Compliance Division, ttie 
Senior Counsel for BSA/AML, the Director for BSA/AML Compliance Policy, and the Midsize 
Bank Supervision Risk Officer. The team’s objective is to provide expert input into the 
supervisory process and develop recommendations to promote and ensure consistency in BSA 
compliance and enforcetnent across the LB population. 

To this end, the LB Review Team: 

• reviews and provides written comments, recommendatioas, and conclusions in a timely 
manner on all draft supervisory letters and conclusion memoranda related to LB BSA/AML 
and Office of Foreign Assets Control (OFAC) matters to ensure they are consistent with 
OCC policy. 

• reviews all proposed LB BSA/AML and OFAC enforcement actions and terminations to 
ensure they arc well supported and consistent with the “Interagency Statement on 
Enforcement of Bank S«recy Act/Anti-Money Laundering Requirements” as well as with 
the OCC’s “Process for Takir^ Administrative Enforcement Actions Against Banks Based 
on BSA Violations” and other applicable guidance. 

• makes reasonable efforts to resolve in a timely manner any disagreements that may arise with 
LB Supervision on BSA/AML and OFAC-reUted matters. 

• reports on its activities to the Comptroller and Executive Committee on a regular basis. 


' The BSA enforcement process set forth in OCC Bulletin 2005-45 has not yet been foitnelly applied to federal 
savings associations through rescission pronouncements; however, the OCC applies this process for both national 
banks and federal savings associations. 
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Accordingly, LB Supervision: 

• provides the LB Review Team with complete and timely BS A supervisory letters and 
conclusion memoranda, including relevant BSA/AML/OFAC ‘"Matters Requiring Attention.” 

• incorporates LB Review Team comments, recommendations, and conclusions into 
supervisory letters and conclusion memoranda, making reasonable efforts to resolve in a 
timely manner any disagreements that may arise with the LB Review Team. 

• provides the LB Review Team with written explanations of any disagreements with its 
comments, recommendations, and conclusions. 

• provides die LB Review Team with final copies of the supervisory letters upon issuance to 
the bank and the final version of the conclusion memoranda upon completion. 

If agreement cannot be reached between the LB Review Team and LB Supervision, the matter 
will be referred to the Committee on Bank Supervision (the Senior Deputy Comptrollers for LB 
Supervision, Midsize and Community Bank Supervision, and the Chief National Bank 
Examiner), the Chief of Staff, and die Senior Deputy Comptroller and Chief Counsel 
(collectively, “the Committee”). If agreement cannot be reached by the Committee, the Senior 
Deputy Comptroller for LB Supervision will consult with die Comptroller, who may elect to 
decide die matter under die May 10, 2012, delegation of authority. 
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Comptroiler of the Currency 
Administrator of National Banks 


Washington, DC 20219 

September 20, 2012 

The Honorable Tom Cobum 
Ranking Member 

Permanent Subcommiltee on Investigations 
United States Senate 
Washington D.C. 20510 

Dear Ranking Member Cobum: 

Thank you for your letter of August 2, 2012, foUowii^ up on the Permanent Subcommittee on 
Investigations’ July 17, 2012, hearing on U.S. Vulnerabiliries to Money Laundering, Drugs and 
Terrorist Financing: HSBC Case Stutfy. 

At the hearing, I confirmed the OCC’s support of the recommendations contained within the 
Subcommittee’s staff report to strengthen our BSA/AML supervision. This letter provides you a 
brief update on the actions we have taken since that hearing to implement the report’s 
recommendations. 

On July 18, 2012, 1 notified all OCC staff of my commitment to adopt and implement the 
recommervdations, and I described other changes we arc making to enhance our supervisory 
process. As I stated at the hearing, it is my objective to promote an environment within the OCC 
that will empower our examiners to conduct effective BSA/AML examinations and escalate any 
findings of deficiencies to appropriate agency departments for action. A copy of my message to 
our staff is enclosed. 

On August 1,2012, we issued St^tvisoiy Memorandum SM 2012-3, “Consideration of Bank 
Secrecy Act/Anti-Money Laundering (BSA/AML) Examination Findings in die Uniform 
Interagency Rating Systems and OCC’s Risk Assessment System” to all examining personnel 
(copy enclosed). This memorandum provides that, effective July 18, 2012, the results of a 
BSA/AML. examination are no longer considered under the Federal Financial Institutions 
Examination Council’s (FFIEC) Unifoim interagency Consumer Compliance Rating System. 
Consistent with the Sub^mmittee’s recommendation, OCC examiners are now required to 
incorporate BSA/AML examinations findings as part of the Management component rating when 
determining bank ratings in accordance wth the FFIEC Uniform Financial Institutions Rating 
System (CAMELS ratings). This guidance also clearly states our policy that a presumption 
exists that serious deficiencies in a bank’s BSA/AML compliance area could adversely affect a 
bank’s Management component rating. 
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1 also committed to revising and claniying ttie operation of our cross-functional Large Bank 
Review Team. Pursuant to this commitment, we issued Supervisory Memorandum SM 2012-5, 
“Bank Secrecy Act Large Bank Review Team Structure and Operation” that more clearly defines 
the mission, membership, organizational structure and functions of the Large Bank Review 
Team. This guidance implements our policy desired to ensure that appropriate steps are taken 
in a timely fashion to adt^ss BSA/AML deficiencies identified in national banks and federal 
savings associations and includes provisions to ensure that 1 and die OCC’s Executive 
Committee are briefed on the Review Team’s activities on a regular basis. 

Furthermore, I directed the OCC’s Committee on Bank Supervision and Ombudsman Office to 
develop a process that will provide examiners witti a mechanism to appeal a supervisory issue 
directly to me. I have reviewed their recommendations and the internal appeals process will 
commence on October 1, 2012, 

Finally, we are in the process of (kafting policies and procedures for citation of violations in 
components of a bank’s BSA compliance program. We agree with the Subcommittee’s 
recommendation that this flexibility will provide our examiners another mechanism to address 
weaknesses and violations related to compliance program components. 

Compliance with BSA/AML is a safety and soundness issue and a matter of national seemity. 
Under my leadership, the OCC will continue to implemcnl the needed changes to ensure the 
safety and soundness and integrity of the U.S. financial system. 

We would be happy to provide additional information about our continued progress in 
implementii^ the Subcommittee’s recommendations, should that be helpful. Please feel fiee to 
have your staff contact Carrie Moore, Director for Congressional Liaison, at 202-874-4844, to 
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OCC News 

Posted on Ju^ 18. 2012 


To: All OCC Employees 
From: Thomas 3. Curry 
Date: July 18, 2012 

Subject: Lessons From Our Experience With HSBC 

On July 17, Deputy Chief Counsel Dan Stipano and Grace Dailey from 
Large Bank Supervision joined me In testifying before the Senate's 
Permanent Subcommittee on Investigations regarding our supervision of 
HSBC Bank USA, N.A., and Its BSA/AML program. The hearing followed a 
year-long investigation by the subcommittee into BSA/AML failures at 
HSBC. I want to thank the dozens of OCC team members who 
participated In Interviews during the Investigation and helped prepare 
Grace, Dan, and me for the hearing. 

There are Important lessons from this experience that we must use to 
Improve our supervision of BSA/AML issues. BSA/AML Is more than just a 
compliance issue. It Is an issue of safety and soundness and a matter of 
national security. As the investigation showed, we could have and should 
have acted sooner. We must be vigilant in banks and savings associations 
of every size. 

To enhance our supervision of BSA/AML across ail of the banks we 
supervise, we embrace the three recommendations from the 
subcommittee's report . Interim guidance on implementing these 
recommendations will be provided shortly, to be followed by revisions to 
our examination policies and procedures. 

First, effective immediately we will no longer reflect BSA/AML findings In 
the "compliance" rating, rather we will fully consider BS>VAML findings In 
a safety and soundness context as part of the "management" component 
of a bank's CAMELS rating. Examiners should presume that serious 
deficiencies In a bank's BSA/AML compliance area adversely affect a 
bank's management component rating. 

Second, we are clarifying the operation of our Large Bank BSA Review 
Team to ensure we bring different perspectives to bear and react more 
quickly when a bank has multiple matters requiring attention, or apparent 
violations of its BSA/AML program. We will also explore how we track and 
review relevant Information and whether additional initiatives are 
appropriate. 


http://doiiiino02.occ/apps/pa/occnews.nsf/f439d4ef036891b2852570ab00725cf4/13db54e24... 9/6/2012 
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Third, we will provide more flexibility for citing BSA/AML violations for 
individual '"pillar" violations, and we will identify what steps we can take 
in our examinations to obtain a holistic view of a bank's BSA/AML 
compliance more promptly. In implementing these changes, we must 
take care not to create disincentives to making the tough calls. That is 
fundamentally our job. 

More generally, we will also review training, staffing, recruitment, 
policies, and interagency coordination to make Improvements in our 
BSA/AML supervision program. 

Finally, we must foster a culture that encourages people to speak up 
about weakness at the banks we supervise and to escalate those views 
for action. 

Ours Is a difficult and Important mission. I am proud to be part of this 
team of dedicated professionals, and I appreciate the extraordinary effort 
of everyone working to ensure that the financial institutions we supervise 
operate in a safe, sound, and fair manner. 

My oral statement and testimony are available on OCC.gov. 


Date I Tilie } Sfeoucncie NuTvBef 


http://domino02.occ/apps^pa/occnews.n^f439d4efD36891b2852570ab00725cf4/13db54e24... 9/6/2012 
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SUPERVISORY MEMORANDUM 


Comptrolla- of the Currency gy 2012-3 

Administrator of National Banks 


Washington, DC 20219 



To: AH Examining Personnel 
From: Committee on Bank Supervision 
Date: August 1, 2012 

Subject: Consideration of Bank Secrecy Act/Aoti-Money Laundering Examination Findings in 
the Uniform Interagency Rating Systems and OCC's Risk Assessment System 


This memorandum provides interim guidance for incorporating Bank Secrecy 
Act/Anti-Money Laundering ^SA/AML) examination findings into the CAMELS 
ratings and the OCC’s risk assessment system (RAS) assigrred to national banks and 
federal savings associations (collectively, banks).' This guidance also applies to 
federal branches and ageitoies of foreign banking organizations. 

Consumer Comoliance Ratine 

Effective July 1 8, 2012, the results of a BSA/AML examination are no longer to be 
considered when assigning a rating und^ the Federal Financial Institutions 
Examination Council’s (FFIEC) Uniform Interagency Consumer Compliance Rating 
System. 

Management Component Ratine 

In keying with current policy, examiners must consider BSA/AML examination 
findings in a safe^ and soundness context as a part of the management component of 
a bank’s FFIEC Unifonn Financial Institutions Rating System (CAMELS ratings). 
For federal branches and agencies, BSA/AML examination findings must be 
considered as part of the risk management component of the ROCA rating system. ^ 
Examination procedures used to evaluate the adequacy of a bank's BSA/AML 
compliance remain unchanged. 


' This supervisory memorandum (SM) leseinds SM 2006-2 (issued as MM 200$-2X “Incerperaiing 
DS A, Af^, OF AC. and USA PATRIOT Act Comi^iance Into Sujwrvisory Ratings,* as well as 
SM 2004-1 (issued as MM 2004-lX *BSA ExaminalioDS.’’ 

^ ROCA stands for Risk manageoient. Operational controls, Cony>liance, and Asset quality. 
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in addition, serious deficiencies in a bank’s BSA/AML compliance area -will create a 
presumption that the bank’s management component rating will be adversely 
affected. For example, slgnifiwint deficiencies in a bank's compliance with 
BSA/AML that result in an overall BSA con^Uance program violation^ would reflect 
risk management practices that are less than satisfacloiy and would generally warrant 
a management rating of “3.” Otfier adverse BSA/AML findings, such as those 
resulting in “Matters Requiring Attcntian” (MRA) or less severe enforcement actions, 
may also negatively affect a bank’s management component rating, depending on the 
circumstances. This may be the case, for example, when a bank has BSA/AML- 
reiated MRAs across several lines of business. If, however, management is already 
deemed in need of improvement and risk management practices are deemed less than 
satisfactory as reflected in a “3” management rating, a further downgrade in the rating 
as a result of BSA/AML deficiencies msy not be warranted. On the other hand, for 
those situations that raise greater supervisory cottcems, a downgrade of fte 
managwnent component teyond a “3” may be ^>propriate. Notwithstanding the 
circumstances, the support for the management rating should be fully documented in 
the appropriate supervisory system. In addition, examiners should be alert to 
situations in which management weaknesses identified in other areas of a bank reveal 
potential deficiencies in BSA/AML program oversight. 

Risk Assessment System 

While examiners will no longer consider BSA/AML examination findings as a part of 
the interagency consumer compliance rating, BSA/AML findings arc stil! considered 
as a part of compliance risk under the OCC’s RAS. Compliance risk considers a 
hank’s compliance with all applicable laws and regulations. The overall quantity of 
risk and quality of risk management related to BSA/AML compliance as well as the 
fourpillarsof a bank’s BSA/AML program are considered in assessments of 
compliance risk. BSA/AML examination findings should also continue to be reflected 
in the OCC’s assessments of reputation, strategic, and operational risks, as applicable. 

The Committee on Bank Supervision expects to incorporate this guidance into 
revisions of the “Bank Supervision Process,” “Large Bank Supervisiort,” and 
“Communi^ Bank Supervision” booklets of the Comptroller's Handbook — and other 
guidance and systems, as needed — by September 2012. 


’ Overall BSA compliaoce program vioIstioBS are citations of 12 CFK 21.21 foroaliona] banks or 
12 CFR 163.177 for federal savings associations. These violations an: cHed for deficiencies that render 
the BSA compliance pragram ineffective when viewed as a whole and result in the issuance of a czase 
and desist order. 
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SUPERVISORY MEMORANDUM 

Comptroller of the Currency ^oi 2-5 

Administrator of National Banks 

Washington, DC 20219 

To: A!l Examining Personnel 

From; Committee on Bank Supervision 

Date; August 17, 2012 

Subject: Bank Secrecy Act Large Bank Review Team Stnicture and Operation 



The Office of the Comptroller of the Currency (OCC) established a cross-functional Large Bank 
Review Team (LB Review T cam) to ensure bank supervision and enforcement consistency in the 
area of Bank Secrecy Act/Anti-Money Laundering (BSA/AML) compliance. The LB Review 
Team is also part of the OCC’s “Process for Taking Administrative Enforcement Actions 
Against BanJa Based on BSA Violations,” as outlined in OCC Bulletin 2005-45. * which states 
that potential BSA compliance program violations are to be considered by a review group. 

The LB Review Team comprises the Director of the Enforcement and Compliance Division, the 
Senior Counsel for BSA/AML, the Director for BSA/AML Compliance Policy, and the Midsize 
Bank Supervision Risk Officer. The team’s objective is to provide expert input into the 
supervisory process and develop recommendations to (xomoie and ensure consistency in BSA 
compliance and enforcement across the LB population. 

To this end, the LB Review Team: 

• reviews and provides written comments, recommendations, and conclusions in a timely 
manner on all draft supervisory letters and conclusicm memoranda related to LB BSA/AML 
and Office of Foreign Assets Control (OFAC) maoers to ensure they are consistent with 
OCC policy. 

• reviews all proposed LB BSA/AML and OFAC enforcement actions and terminations to 
ensure they are well supported and consistent with the “Interagency Statement on 
Enforcement of Bank Secrecy Act/Anti-Money Laundering Requirements” as well as with 
the OCC’s “Process for Taking Administrative Enforcement Actions Against Banks Based 
on BSA Violations” and other applicable guidance. 

• makes reasonable efforts to resolve in a timely manner any disagreements that may arise with 
LB Supervision on BSA/AML and OFAC-related matters. 

• reports on its activities to the Comptroller and Exeaitive Committee on a regular basis. 


' The BSA enforceinent process set forth io OCC Bulletin 2005-45 has not yet been fonnally applied to icdeial 
savings associations through rescission prorKKincenents; however, the OCC applies this process for both rational 
banks and federal savings assodations. 
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Accordingly, LB Supervision: 

• provides the LB Review Team with complete and timely BSA supervisory letters and 
conclusion memoranda, including relevant BSIA/AML/OFAC “Matters Requiring Attention.” 

• incorporates LB Review Team comments, recommendations, and conclusions into 
supervisory letters and conclusion memoraoda, m^ing reasonable efToits to resolve in a 
timely manner any disagreements that may arise with the LB Review Team. 

• provides the LB Review Team with v^itten explanations of any disagreements with Its 
comments, recommendations, and conclusions. 

• provides the LB Review Team with final copies of the supervisory letters upon issuance to 
the bank and the final version of the conciustem memoranda upon completion. 

If agreement carmot be reached between the LB Review Team and LB Supjervision, the matter 
will be referred to the Committee on Bardc Supervision (the Senior Deputy Comptrollers for LB 
Supervision, Midsize and Community Bank Supervistoo, and the Chief National Bank 
Examiner), the Chief of Staff, and the Senior Deputy Comptroller and Chief Counsel 
(collectively, “the Committee”). If agreement cannot be reached by the Committee, the Senior 
Deputy Comptroller for LB Supervision will consult with the Comptroller, who may elect to 
decide the matter under the May 10, 2012, delegation of authority. 
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liy Hand and Electrnnic Email 


lion. Carl Kevin, Chairninn 

Hon. Tom Coburn. Ranking Member 

l^-rmancni Subconnniucc on lnvc.sugaiions 

Commiuce on Homeland Sccurily and Ciovemmcntal Aflairs 

Hniu'cl Stales Senate 

SR-! 09 Russell Senate Olllce Huikiing 

W'a.shingion. DC 20510 


Dear Chairman Kevin and Ranking Member Coburn: 

Thank you for the opixniunity to testify at the Subcommittee's .luiy 17. 2012 hearing 
and for the follow-up que.stions presented in your August 2. 2012 letter and during a call with 
the Subcommittee .staff on .^ugllst 22, 2012. Responses to these questions follow. 


1. Al the hcarinii. ] ]SHC (iimoiimril ihai lUiMX wonUl he closing oU of Us U.S. clollor 
( Island accounfs. 

a. HUII flllMX also close ihe (\miuiii Island branch? 


Yes. 


n.suciioi<iiii«s pic 
l.cvcl ■12, S Canada Square. I-!I1 .'^1 IQ 

Wvl'-. nww.hshe.coni 


Permanent SubcommiHee on Investigations 1 

EXHIBIT #101 I 
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HSBC <i> 


h. Will same of lha Cayman Islam! accaunis, cmrciUly described as heiiifi serviced 
ihrangb the IIBMX Cayman branch, be reopened as accowus m another uni! within 
IIBMX or within HSBC? If yes. where will lho.se accounts he located? 

All i ISBC Mexico S.A. ("HBMX'') Cayman Islands accounts will be dosed. Customer.^ 
who have USD accounts al llBMX's Cayman Islands branch aitd also have pe.sos 
accounts at HBMX, may transfer their funds into their pesos accounts at HBMX w hen the 
Cayman islands account.s arc closed. Those who do not hold a peso account at HBMX 
will receive a check or a transfer of their funds to an account that they designated, ihe 
de.signated account could be an already open account that the customer has at another 
HSBC afniialc. Additionally, USD Cayman Islands accouniholdcrs whose accounts arc 
closed will have the opportunity to open pesos accounts at HBMX. .subjecl to appropriate 
review and in compliance with established account-opening proccdtire.s. 

Former HBMX Cayman lsland.s accoimtholdcrs may also seek to open new acctnint.s at 
other HSBC affiliates, subject to Know Your Customer ('‘KYC") and other aceount- 
opening procedures. 

c. Will HSBC continue to service any former Cayman Island clients? If yes. at what 
locations will these clients he serviced? 

See an.s\ver to ] (b) above. 


2. IVilh resard to Rami Makbhmf (see payes 1 76 and 1 17 of the Stdnommif/ee 's report), 
please respond to the followiny: 

(t. Plca.se provide the date when UBUS added Mr. Makhloufs name to Us OFAC Jitter. 

MSI3C Bank USA. N.A. ("MliUS;'! added Mr. Makhlouf s name to its (JFAC ililcr on 
i‘ebmary 21. 20fl8. the .same day he was designated by the U.S. Department of Treasury 
Ibr corruption. 

With rc.speet to questions 2{b)*(d). we are working to provide relevant information 
consi.stent with local privacy iaw.s. 
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3. On July 25. 2012, IIIiMX jniui a S2H miUum J'me that had been imposed on the bank on 
November 7. 201 1. by the CA7iI-‘ due to anti-money loimderinyt deficiencies identified in 
200 7 and 200d. Please explain the deficiencies that served as the basis for the fine, and 
M'hy IlIiM.X did not pay the fine until July 2012. 

The fine issued by CNIiV resulted primarily from untimely tiling of unusual transaction 
reports, all of which IIBMX ultimately filed with the proper authorities. In addition. CNBV 
identified deficiencies in MBMX’s ICYC records, periodic reviews of high-risk customers, 
systems for monitoring client profiles, and processes for detection, analysis, and reporting of 
unusual transactions, I 'ollowing the issuance of the fine itt November 2011, 1 IB.MX brought 
admini.siralivc litigation proceedings before the 1-edcral Tax and Adminisirali\ c Court (Sala 
Hspcciaiizada en Rc.sotuciones de 6rgaiu« Rcguladores dc la Actividad del l-^slado - fribunal 
redcral dc .lu.siicia I'iscal y Admini.slrativa) and indirect procecding.s before the Tenth 
Admini.stralivc District Court for the 1-ederal District (Juez Decimo de Distrito cn Materia 
Admini.slrativa cn c! Di.strilo l•edcml) challenging the basis of .some of the alleged underlying 
violation.s and the amount of the proposed fine. IIBMX. however, voluntarily paid the fine 
prior to rc,solution o!’ those proceedings. CNBV made a series of recommendations with 
respect to identified deficiencies and ha.s confirmed that I IliMX implemented them 
completely. 


■/. P/ease indicate wiKiher and when I Hit IS has conducted a due diligence / cv/toi’ of UBMX. 
(he nature of that review, and the results. 

MBUS has conducted a KYC review of ail of its HSBC allllialc customers, including IIBMX. 
A.S a correspondent banking cusUnner. 1 IBMX was subject to enhanced due diligence 

ilBUS compicied il.s initial KYC on IIBMX in September 2010. updated it in 
2011. and remediated IIBMX KYC to MIU!S‘ new KYC' standards in May 2012. in 
aecordanec with IlBUS' new KYC policy, the IU)D levicw conducted with rcspccl to MUMX 
was a multi-.siep process that included, anumg other tilings; obtaining itiforination 
concerning the countries where I IBMX Itas branches and suhsidiaric.s; .screening for negative 
news on the bank: inquiring about IIBMX's hanking rchuiotiships vvilh other insiitutinn.s and 
determining that none has closed I IBMX’s aecounl(s) in the last 5 yeans; obtaining 
infonnaiion regarding the type orbiLsiness HB.M.X engages in and whether HBUS believes 
that bu.sincs.s to be high risk: gathering information regarding any regulatory enforcement 
actions and llne.s; and gathering detailed information regarding HBMX'.s .\ML policies and 
proccdurc.s, 
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Funhermore, as recommended in ihe PSI's July 17, 2012 report, I (BUS has commiited to 
undertaking an addilional special review of ihe HBMX relationship. Currently, llte HiHJS 
I'inancial Intelligence Unit ("FlU'O is conilucling an assessment of, among other thing.s. the 
economic and security situation in Mc.xico, the risk associated with the banking servicc.s 
olTcred by IIBMX, funds flow in and out of Mexico by HBUS business line, reportable 
events and .suspicious activity reports related to Mexico, and anti*moncy laundering proccs.sc.s 
and procedures at HBMX. Once its asses.sment i.s ctimplcic. the FID will issue a report for 
consideration by HBUS senior management. 


5. Please provule the {late or anticipated date on which affdialcs will be^in sharing 
infnrmaiion with one another and the process hy which that will he accomplished. 

I ISBC has taken steps to enhance information sharing between aniHates. Earlier this year, 
the new Steering Committee on Global Slandard.s. which 1 co-chair along with Chief Risk 
OlTiccr Marc Moses, enacted a new global standard to maximize the sharing ofinfonnalion. 
to the extent permitted by law. acro.s.s all 1 ISBC affiliates and all Global Businesses and 
Functions for risk management purpo.scs. Under this .standard, the following enhancements 
to information .sharing have been made; 

• HSBC is creating an internal intranet site to facilitate the sharing ofCotnpliancc 
Assurance reports — which provide a .summary of the status of material AML and 
compliance issues in regions and bu.sincss linc.s -automatically on a monthly basi.s, 
All Regional and Global Businc.ss Compliance heads will have access to the reports 
on this intranet site, which is anticipated to be operational by the end of September 
this year. 

• Compliance Assurance team reports produced alter on-ihe-ground revie^^s ofspecillc 
Regional Compliance functions have maudaiory distribution to the Regional CEO. 
Regional CRO, local compliance, and (jrou|> Chief Risk Officer. 

• 1 ISliC is making changes to Us Group Compliance reporting system to allow any 
material or systemic AMI. control weakness at any affiliate that is reported by tlie 
Regional and Global Busine.s.s Compliance heads to lie viewed by all other Regional 
and Giobai Business Compliance heads. I'hc.sc chsmgcs arc expected to be 
operational by the end of September this year. 
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• Over ihe course ol' the Iasi year, HSBC has made iis Risk ManaGemciU meetings more 
eHeciive forums for sharing detailed information about compliance and other risks 
among affiliates. Among other things, attendees look at a "RLsk Map" that identifies 
risks across the (iroup. including AML risk. Regional and Global Biisine.ss heads 
must lake the information they receive at the meetings back to their Compliance and 
Risk teams. 

HSBC will continue to look for additional opportunities to increase the How of information 
througliout the Group. 

6. Please provule the names of the H.SBC affiliates located in tax havens where 

jurisdictional differences preclude the sharing’ of information. Please provide addilknuiJ 
detail on njevunt re.xtricliom to infonmition-sharing. 

The Bank is not aware of a .single, universtiily agrced-u|Kin list of lax havens. I lowcvcr. the 
Slop Tax Haven .Abuse Act (S. 681), introduced hy Chainnan Levin in 2007. contain.s a list 
of 34 "offshore secrecy. jurisdictions." which have been idcniiHcd publicly as such by the 
Interna! Revenue Service in federal court proceedings. The S. 681 list pro\ ides the basi.s for 
this response. From the S. 681 list. HSBC has officc-s in: Bahamas. Bermuda. Briii.sh Virgin 
Islands, Cayman Isiand.s. Cook Islands. Costa Rica. Northern Cyprus. Guernsey. 1 long Kong. 
I.sic of Man, Jersey, Luxembourg. Malta. Panama. Singapore, and Switzerland. We arc 
compiling a list of citations to the applicable laws in these jurisdictions that we will send to 
the Subcommittee. 

u. Please describe whof actions lUiUS will take or has taken if one of these affiliates 
does- not provide reipieshui information. 

I IBUS perform.s K YC on each of its customers, including it.s aBlIiatcs. In llic course of 
the K YC process, I ! BUS requests and maintains a signi (team amount of information 
relating to all of itscusiomens. This information is collected for multiple puiposes. and 
the consequences of a particular customer's failure to provide requested information will 
depend on the context. Imponantiy. MBUS treats it.s affiliate customers the same as any 
other third-party cirstomer. Where an alTilialc fails to provide requested information aller 
diligent inquiry by MBUS, HBUS will escalate the mutter to Group, anti a.s IIBUS CKO 
Irene Domcr ic.siillcd at the PSPs July 17. 2012 hearing, where an alTiliate fails to 
provide suffteicni KYC infomtation. MBUS "would have no hesitation in not opening the 
account or indeed closing an account." 


PSl-HSBC-aO-000005 


14:41 Nov 19, 2012 Jkt076061 PO 00000 Frm01118 Fmt6601 Sfmt 6601 P:\DOCS\76061.TXT SAFFAIRS PsN: PAT 



1105 


VerDate Nov 24 2008 


HSBC iZ> 


7. IVith regani to bearer .'chare account.'!, please provide the number of clicnls for wlwm a 
waiver was granted, from January I. 200fi to the pre.Kent. from any ilBUS due diligence, 
beneficial ownership, or anti-money laundering retpiirement, the naltire o f the waiver 
granted, the date on which that waiver iim granted, and who granted the waiver. 

As the Commiilcc is aware, accounts of bearer share corporations {"bearer share aceounis") 
were most likely to be held with the private banking emiiies— the Private iiank Itiieniatioiial 
in Miami and the International Private Bank in New York (collectively. "Private Bank 
America"). With regard to l-vcarer share accounts held at Private Bank America, the Bank i.s 
not aw'are of any waiver granted, on or after Januarv' 1. 2(K)8. from any of the due diligence, 
benellcial ownership, or anti-money laundering requireincnis in the applicable hearer .sliare 
policy, rhe Bank is also undertaking a review to determine if there are hearer .share accounts 
in other HSBC North America llolding.s. Inc. ("UN All") business units. If any are idcntiilcd. 
they will be subject to protnpt remediation in conformance with IINAI I jioliey. 


Thank you for the oppt^rlunily to provide this rcsjwnse. 


Sincerely. 


Sitiai‘i/l-c\cv / 

HSBC Chiell/gal Ofllcer 
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Stuuri Levcv 

i 'hie; qmcf 


Seplcinber 25. 2012 


tf 1' Hand mid Elecfrantc Email 


lion. Carl Levin. Chairman 

Hon. Toni Cohurn. Rankinj’ Member 

Permanent Suhcommitiec on inve.stig!ition.s 

Committee on ! lotncl.nnd Security and (iovcmmental Anair.-! 

Uniled Slates Senate 

SR-!‘19 Russell Senate Olllce Building 

Washington. DC 20510 


Dear Chairman Levin and Ranking Member Coburn: 

i hank >ou again for the opportimity to testify at the Subcomniitlcc’s July 17, 2012 
hearing and for the folluw-up questions presented in yottr August 2. 2102 Idler, Responses to 
quest ion,s 2{a) •• (d) follow. 


2. With regiin! li> Rami Sfukhinuf (Xfc pa^v.s I "6 ami l“~ nf ihc Suhcotnmidi'c'x ivponi. ptco'n' 
respond fn ilte fiilhin'inji’ 

a Pleaxc provide the dote when IHU JS added Mr. Mokhloufx name to il.s- OFAC filler. 

1 iSBC Bank l;iS.‘\.N..\. {"HBUS'T .iddcd Mr. MakhlouTs name to Its OI-AC Hlicr on 
pehniary 2 1 . 2008. the same day lie was designated by the U.S. Depannicnt of Treasury for 
eorniption. 

h. U'hal wci.f the approximate nummum omomu af ftouk in the JISHC C</tv»fm klaiul 
account that nm ai>ened in the name of the trust henefiting Mr. Makhlouf ? 

-''conl'd ... 


lisne iloldinet pir 

l evel -tl 8 CanaJj-SqiMic. l.itwfc'ti i- 14 5HO 
Wtfti rtuvi lishc emp 
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As rcllcctcd in documenls available in the IJ.S. that have been produced !o the Subcommiltec 
(HSHC OCC 0! 604x1), the Iriisi benefiting Mr. Makhlouf was administered by HSiJC 
Geneva (HSBC Cayman did not maintain an account for any trust benefiting Mr. Makhlouf)- 
\Vc arc not able to provide the inforimiion requested because relesan! privacy laws rc-strict 
HSBC's ability to di.scuss cfHifidcniial client infonnation. 

c. Is ihal accomu or anyulher HSliV acemmi bcnefilin^ Mr. Makhlouf slill open.' If yes. 
please identify the lISliC affilioW where cftch such account Is located, and indicate 

n helher and when that account has been frozen. 

As described above, the trust henefiting Mr. Makhlouf was administered by H.SBC Geneva. 
Mr. Makhlouf was removed a.sa benefieiary of the trust after his Febniary 2i. 2008 
designation by the I ),S. Departmem offreasury for corruption. 

Current privacy laws restrict nSB("s ability tod!SCU.sseonfidcn(iai client information in 
specific iurisdlciions. HSBC i.s comn^iiicd to complying with applicable .sanctions and where 
accounts are subject to sanctions. I LSBC's policy is to freeze accounts as required. 
Additionally, I ISBC docs not hold any accounts by or for the benefit of Mr. Makhloufin 
countries where sanctions di* m« apply. 

d. When HSBC Ciiytnan Jshmh raised concerns srilh rcyurd to .Mr MakhUnt f's accounts in 
200T. 


i. li'hai were the amcems raised hy HSHC i 'uyman Ishnuh? 

As rcilecied in documents available in the I'.S. that have been produced to the 
Snbcoinmiliecd lSBC OCC 0160-151). HSBC Cayman rai.sed<i»esiion.s about the 
appropriateness of the relationship with Mr. Makhloufin August 2007. prior to the 
sanctioning of Mr. Makltlouf in any juri.sdiciion. I ISBC Cayman's concern.^ were based 
on media covcnigc regarding the Makhlouf family. .After Mr. Mtikhlnuf s designation by 
tltc I i.s. Department of Treasury for comiplion on I'cbruary 21. 2008. he wa.s removed as 
it beneficiary of the tr«.st. 

// What steps did IISHC Croup lake to address those corH ern.sy 

i ISBC Group Compliance. Risk. Security, and the relevant business conferred and 
worked together to assess the relationship. 
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iii. iVho at JiSIii' (irnup iirw ruspomihle for nuikhif; a ciclenninalion ahout this account'.' 

As explained above. dilTcrcm pans ol‘l ISBC Group, including, among othens. 
Compliance. Risk. Security, and the* relevant hisiness ucro involved. 

rv. H'hy did HSliC allon- an inlcrnutionul (envrlst to inaiiilaiii an accaum with the bonk? 

As referenced above. Mr. Makliloiif was dc.signiiieci by the U.S. Dcpaimient of Treasury 
for corruption and was added to 1 iliUS’ Hiter tmilK* same day. HSHC iscnmntitted to 
complying with applicable sanctions and where account.s- are subject to s;mciu«is. 
liSBC's policy is to freeze account.s as required. 1 ISHC is moving to implement a new 
global sanctions policy under which 1 1S13C will screen for key illicit actors de.signaied by 
GI-AC in all jurisdietion.s, in all currencies. 


Thank you for lite opponunily lo provide this response. 


.Sincerely. 


y 




Siuan Levey 

HSBC Chief i.cual niTici. 


6j 
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